Node/Express JS issues get Bearer Token from POST request - ‘{“errors”:[{“code”:99,“message”:“Unable to verify your credentials”,“label”:“authenticity_token_error”}]}’ }

[paulf1tzgerald]

I am having some issues generating a token after sending a POST request from a node/express application.
I am using request to make a POST request with my API_KEY and SECRET_KEY.

I am getting the following error

‘{“errors”:[{“code”:99,“message”:“Unable to verify your credentials”,“label”:“authenticity_token_error”}]}’ }

var request = require('request');
var btoa = require('btoa');
request({
    headers: {
      'Authorization': 'Basic ' + btoa(API_KEY) + ' ' + btoa(API_SECRET),
      'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8'
    },
    uri: 'https://api.twitter.com/oauth2/token',
    method: 'POST',
    body:  JSON.stringify({
      'grant_type': 'client_credentials'
    })
  }, function (err, res, body) {
    console.log('res', res)
  });

[farriagada]

Hi. As far as the official documentation says, you should URL-Encode both keys, then concatenate them with ‘:’ in the middle, and only then you base64-encode the entire resulting string.

More info here: https://developer.twitter.com/en/docs/basics/authentication/overview/application-only

Try it out and tell us how it went.

Best of luck !

[paulf1tzgerald]

Thanks for this response, seems to have gone a step further but there is a new error.

My code looks like this

var request = require('request');
var btoa = require('btoa');

const KEY = encodeURIComponent('1234');
const SECRET = encodeURIComponent('5678');

request({
    headers: {
      'Authorization': 'Basic ' + btoa(`${KEY}:${SECRET}`),
      'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8'
    },
    uri: 'https://api.twitter.com/oauth2/token',
    method: 'POST',
    body:  JSON.stringify({
      'grant_type': 'client_credentials'
    })
  }, function (err, res, body) {
    console.log('res', res)
  });

The error I am getting is

body: ‘{“errors”:[{“code”:170,“message”:“Missing required parameter: grant_type”,“label”:“forbidden_missing_parameter”}]}’ }

I am including the grant_type as part of the body of the POST request though.

[farriagada]

I think you shouldn’t be passing a JSON as a request parameter. Try passing the body as a string.

[paulf1tzgerald]

how do you mean? could you give the example?

if you mean the following I get an error.

//rest of code above
uri: 'https://api.twitter.com/oauth2/token',
method: 'POST',
body:  {
  'grant_type': 'client_credentials'
}

[farriagada]

I mean:

body: "grant_type=client_credentials"

Try it out

[paulf1tzgerald]

“grant_type=client_credentials”

BOOM! good man! it works!

[farriagada]

Glad you made it work !

[andypiper]