Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Instagram oauth api gives { "code": 400, "error_type": "OAuthException", "error_message": "No matching code found." }

I am working on an application that integrates with Instagram API to access the user information. I successfully fetch the Access Token using the authorize url but unable to fetch the userId using access_token url:

i am tried both the endpoints:

https://api.instagram.com/oauth/access_token?client_id=48275564e2c445f6b8e1356djfha3e0c&client_secret=ab2062da9f314e3489dke7ae9cbe6e5d&redirect_uri=http://localhost&grant_type=authorization_code 

https://api.instagram.com/oauth/access_token

with the post body as:

client_id=48275564e2c445f6b8e1356djfha3e0c&client_secret=ab2062da9f314e3489dke7ae9cbe6e5d&redirect_uri=http://localhost&grant_type=authorization_code&code=1351860224.4827556.5dc92c4d15ea4a4ea1b0d33eaf0eef19 

(The data in the request is modified), But i am getting the follwing

{     "code": 400,     "error_type": "OAuthException",     "error_message": "No matching code found." } 

I have seen tons of queries and questions but could not find any solution to the problem.

The couple of questions i have is:

1) is the field code in the URL is same as access_token, if not how could i get the code field's value.  2) is there any other mechanism(API) to fetch the user details given the username is not known. 

Please help me as i am completely stuck and running out my deadlines.

like image 206
Amritpal Singh Avatar asked May 27 '14 10:05

Amritpal Singh


People also ask

What is OAuth Instagram?

This endpoint returns the Authorization Window, which app users can use to authenticate their identity and grant your app permissions and short-lived Instagram User Access Tokens.


2 Answers

For me unchecking Disable implicit OAuth in instagram developer -> manage clients fixed the issue

like image 156
h0mayun Avatar answered Sep 23 '22 21:09

h0mayun


I found that using either form-data or application/x-www-form-urlencoded works fine. The most important is the code you get from redirect uri is only used by one request. It means you could request the access token once for the code. If the you request more than one time with same code, you'll get the error like this:

{     code: 400,     error_type: "OAuthException",     error_message: "Matching code was not found or was already used." } 

Wish you all the best ;)

like image 41
yuhua Avatar answered Sep 21 '22 21:09

yuhua