Salesforce Developer Community

Chatter

Feed
0

Best Answers
1

Likes Received
0

Likes Given
3

Questions
7

Replies

Authorization Error - Invalid SessionId

Hi,

I need a help in authorization after following username-password authentication process.
I am testing with CURL command and get valid response after authentication process and then I use the accessToken as input in the
authorization and get error as Invalid Session Id. (Pasting complete error response at the end of this post)
While authorization, is my serviceUrl not correct OR is the ! which I am passing in the accessToken is the issue here?
I followed this:
http://www.salesforce.com/us/developer/docs/api_rest/index_Left.htm#CSHID=quickstart_oauth.htm|StartTopic=Content%2Fquickstart_oauth.htm|SkinName=webhelp
Please suggest.

Username-password Authentication Request:
curl -k -v https://login.salesforce.com/services/oauth2/token -d "grant_type=password" -d "client_id=3MVG9sG9Z3Q1RlbeivZC.BRS1ukm56EdnPXo_VGi6P1rhHWCyMEHoDSVQ6i.1XjtjN348GdUG" -d "client_secret=325135132025" -d "username=emailTest@gmail.com" -d "password=myPwdOr8gYI1XpSrq54u" -H "Content-Type: application/x-www-form-urlencoded"

Authentication Response:
{"id":"https://login.salesforce.com/id/00D1a000000Jb4ZEAS/0051a000000IWqcAAG","issued_at":"1430427928586","token_type":"Bearer","instance_url":"https://na24.salesforce.com","signature":"uuAjbGBiTxSVKss5+TXuDhdKiYkCVU6lrk7IwmVRjvE=","access_token":"00D1a000000Jb4Z!ARkAQGmONT80NeBmtF7KrJxuld0NoAEmO6FtxBSy7V0X9Vtp7aZ_OL4bEV5QS47zsIjF7pqtpLWUFUkK2oTZOYEk6dqAqafW"}

Authorization Request:
curl -k -v https://na24.salesforce.com/services/data/v20.0/ -H 'Authorization: Bearer 00D1a000000Jb4Z!ARkAQGmONT80NeBmtF7KrJxuld0NoAEmO6FtxBSy7V0X9Vtp7aZ_OL4bEV5QS47zsIjF7pqtpLWUFUkK2oTZOYEk6dqAqafW'

Error in response:
* Connected to na24.salesforce.com (136.146.210.94) port 443 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* TLSv1.2, TLS Unknown, Unknown (22):
* TLSv1.2, TLS handshake, Client hello (1):
* SSLv2, Unknown (22):
* TLSv1.2, TLS handshake, Server hello (2):
* SSLv2, Unknown (22):
* TLSv1.2, TLS handshake, CERT (11):
* SSLv2, Unknown (22):
* TLSv1.2, TLS handshake, Server finished (14):
* SSLv2, Unknown (22):
* TLSv1.2, TLS handshake, Client key exchange (16):
* SSLv2, Unknown (20):
* TLSv1.2, TLS change cipher, Client hello (1):
* SSLv2, Unknown (22):
* TLSv1.2, TLS handshake, Finished (20):
* SSLv2, Unknown (20):
* TLSv1.2, TLS change cipher, Client hello (1):
* SSLv2, Unknown (22):
* TLSv1.2, TLS handshake, Finished (20):
* SSLv2, Unknown (23):
> GET /services/data/v20.0/ HTTP/1.1
> Host: na24.salesforce.com
> User-Agent: curl/7.42.0
> Accept: */*
{"message":"Session expired or invalid","errorCode":"INVALID_SESSION_ID"}]* SSL
2, Unknown (23):
Connection #0 to host na24.salesforce.com left intact
Rebuilt URL to: Bearer/
Could not resolve host: Bearer
Closing connection 1
url: (6) Could not resolve host: Bearer
Rebuilt URL to: 00D1a000000Jb4Z!ARkAQGmONT80NeBmtF7KrJxuld0NoAEmO6FtxBSy7V0X9V
p7aZ_OL4bV5QS47zsIjF7pqtpLWUFUkK2oTZOYEk6dqAqafW'/
Could not resolve host: 00D1a000000Jb4Z!ARkAQGmONT80NeBmtF7KrJxuld0NoAEmO6FtxB
y7V0X9Vtp7aZ_OL4bV5QS47zsIjF7pqtpLWUFUkK2oTZOYEk6dqAqafW'
Closing connection 2
url: (6) Could not resolve host: 00D1a000000Jb4Z!ARkAQGmONT80NeBmtF7KrJxuld0NoA
mO6FtxBSy7V0X9Vtp7aZ_OL4bV5QS47zsIjF7pqtpLWUFUkK2oTZOYEk6dqAqafW'

Meenakshi P
April 30, 2015
Like
0

2 replies

SAML Authorization - Salesforce

Hi,
I am new to SAML.
I have SAML configuration enabled in the salesforce application and I need to authorize in my code using saml.
I am looking for such approach where first I can authenticate using just username-password flow first and then authorize. As first step, I tried with a sample java code / curl to authenticate my test application using username-password flow and it worked.
As second step I want to add saml to it now using java code / curl.
Can someone please guide me how to start with?
I looked into the below url about SAML :
https://help.salesforce.com/apex/HTViewHelpDoc?id=remoteaccess_oauth_web_sso_flow.htm&language=en_US#ConfigureSAML

How can I use the accessToken which I received during initial authentication. Do I just need to pass below parameters?

grant_type=assertion&assertion_type= urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0%3Aprofiles%3ASSO%3Abrowser& assertion=PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPHNhbW. . .

I checked SAML response of my application in browser using saml tracer, after giving username and password and can see saml format as:
<saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">

Meenakshi P
April 27, 2015
Like
0

4 replies

grant type not supported error - username-password Authentication

Hi,
I am trying to authenticate from salesforce using username-password.
And getting error as: {"error_description":"grant type not supported","error":"unsupported_grant_type"}
I checked other posts regarding this error and have included everything including content-type and also selected 'Relax IP restrictions' in settings. Do we need to pass constant keyword as 'password' here in grant_type?
I have passed the same in my input. Do we need to use some key here instead?
I have passed my salesforces username and password in username and password input parameter (appended Security token at the end in password)
Can you please suggest what is missing here?
I tried with below inputs:
curl -v https://login.salesforce.com/services/oauth2/token -d “grant_type=password” -d
“client_id=3MVG9R.1XYZ7" -d “client_secret=32513123456" -d “username=tom@gmail.com” -H “password=mypwd123ZwTkOgD” -H "Content_type: application/x-www-form-urlencoded"

I get following complete response with error:
* STATE: INIT => CONNECT handle 0x60002de30; line 1011 (connection #-5000)
* Hostname was NOT found in DNS cache
* Trying 96.43.146.124...
* Adding handle: conn: 0x600069eb0
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* 0x60002de30 is at send pipe head!
* - Conn 0 (0x600069eb0) send_pipe: 1, recv_pipe: 0
* STATE: CONNECT => WAITCONNECT handle 0x60002de30; line 1058 (connection #0)
* Connected to login.salesforce.com (96.43.146.124) port 443 (#0)
> Content_type: application/x-www-form-urlencoded
> Content-Length: 207
> Content-Type: application/x-www-form-urlencoded
>
* upload completely sent off: 207 out of 207 bytes
* STATE: DO => DO_DONE handle 0x60002de30; line 1263 (connection #0)
* STATE: DO_DONE => WAITPERFORM handle 0x60002de30; line 1384 (connection #0)
* STATE: WAITPERFORM => PERFORM handle 0x60002de30; line 1395 (connection #0)
* HTTP 1.1 or later with persistent connection, pipelining supported
< HTTP/1.1 400 Bad Request
< Date: Fri, 24 Apr 2015 22:07:14 GMT
< Set-Cookie: BrowserId=1f5LKt3DT;Path=/;Domain=.salesforce.com;Expires=Tue, 23-Jun-2015 22:07:14 GMT
< Expires: Thu, 01 Jan 1970 00:00:00 GMT
< Pragma: no-cache
< Cache-Control: no-cache, no-store
< Content-Type: application/json;charset=UTF-8
< Transfer-Encoding: chunked
<
* STATE: PERFORM => DONE handle 0x60002de30; line 1565 (connection #0)
* Connection #0 to host login.salesforce.com left intact
* Expire cleared
{"error_description":"grant type not supported","error":"unsupported_grant_type"}

Meenakshi P
April 24, 2015
Like
1

4 replies

grant type not supported error - username-password Authentication

Meenakshi P
April 24, 2015
Like
1

2 replies

SAML Authorization - Salesforce

Meenakshi P
April 27, 2015
Like
0

4 replies

grant type not supported error - username-password Authentication

Meenakshi P
April 24, 2015
Like
1

SOLVED

16 replies

Session expired or invalid

Hi,
I am using REST API call to get SF account details. I am able to get OAuth token, but when I use this token to get Account details it gives below rror.

[{"message":"Session expired or invalid","errorCode":"INVALID_SESSION_ID"}]

Here is the flow

Request:https://ap1.salesforce.com/services/oauth2/token?grant_type=authorization_code&code=aPrxqJ8A8kLOza8Stjpv6sovqPjwgt9wJxzcIaPRsCnGPyxvpLJSOUhmEHkQ7qCNO84np7gXZQ%3D%3D&client_id=3MVG9ZL0ppGP5UrBx8LU.vAPd80ozIo4JMB66N3r1IPzsiMMPzIYm3pklapNDhi24wcd3Ik8JtlQZqr_opatH&client_secret=5390506801126798324&redirect_uri=https://local/user/connector/generic/redirectoauth

Response:
{"id":"https://login.salesforce.com/id/00D28000000KMl1EAG/00528000000MwpQAAS","issued_at":"1428631322872","scope":"id full custom_permissions api web openid visualforce refresh_token chatter_api","instance_url":"https://ap2.salesforce.com","token_type":"Bearer","refresh_token":"5Aep861TSESvWeug_wBae_.NiEYtLVbgA9FW1UDMAq7zqGYpEeyCgRS1jLbqFuSuC2vJd5RyDOmpU.pSPn.Q1zV","id_token":"eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjE5NCJ9.eyJleHAiOjE0Mjg2MzE0NDIsInN1YiI6Imh0dHBzOi8vbG9naW4uc2FsZXNmb3JjZS5jb20vaWQvMDBEMjgwMDAwMDBLTWwxRUFHLzAwNTI4MDAwMDAwTXdwUUFBUyIsImF0X2hhc2giOiJlbF9iOXBzSlJCMVFOMGI5cXJib0V3IiwiYXVkIjoiM01WRzlaTDBwcEdQNVVyQng4TFUudkFQZDgwb3pJbzRKTUI2Nk4zcjFJUHpzaU1NUHpJWW0zcHRsYXBORGhpMjR3Y2QzSWs4SnRsUVpxcl9vcGF0SCIsImlzcyI6Imh0dHBzOi8vbG9naW4uc2FsZXNmb3JjZS5jb20iLCJpYXQiOjE0Mjg2MzEzMjJ9.XXfxxvNwQgWrSP-eFoUhFbzDfqxsASntM1slTjhQXN_vgHAp-Wv0rJYBWg6QXcIWwQEsvfCAvGi9JkbRIZ5UYqLPSrnhxsje4StPfvwwHMBMarimqeKKWt24Xb6Hri0DMdp6FjN9y9RneJpVcZeLHbkFnOIUf11cgMk1d3kI9KrgmkoDn8TI1yfPU0NLbJtafnYw2S9cdHrcju31i-9eLjy-yeMrJtinS5TqUdWcalEL1uqZq_KGEnsWkmN8sjEaSgtCio33ZZwDL6IKTgdHeDZedEZfRqhUoyBni14qYdpRX9ANSd1B61HtCVLiAeetc156KB4KYr-oR0Byg7oqAswhU41OQ9RmNp5VDQVVKspgwImauJzhpLs59W64SH5dP
h4xn5SF7fCGK534idYP_HQOey2KxBNrS5ATOATbNHsDt0maztiPK0K8rNjjnARya8QCqPJoumeJddchsmYhMIWPrxtwzNdpPXMuSz3hY3xIALFf0cDW_OwBPWT4P3_KZqfE7w0lPihzwhTwHy4tSu_kq4t4ikMu-xc6TNkZoy4HJP_qNZ7f7CCENHvUHjF_vgjSqNcPVJnpp-g3ImN6eBbstsndoktkdxpSC8N34WyWwKxiC5S5NVtgJBbLI2J9Q8xdBvcArvvoANt6_nhjsDf6417kRstohZio1aOoSW8","signature":"3yrSoEaIoCEtGXZpMHaLnV8B6z/njamvHSPTOHUB9ME=","access_token":"00D28000000KMl1!ARAAQPLIuaRCKyXQPB1LDjuiF4Bg1QAVfzXNFpq7C4zYRVurh3JxqYpcu5IIf98P1XOB7oEwLkbSJwdq4Mc0pxkmaQCbjbgd"}

token 00D28000000KMl1!ARAAQPLIuaRCKyXQPB1LDjuiF4Bg1QAVfzXNFpq7C4zYRVurh3JxqYpcu5IIf98P1XOB7oEwLkbSJwdq4Mc0pxkmaQCbjbgd
Request:https://ap1.salesforce.com/services/data/v31.0/query?q=SELECT+Name+From+User+WHERE+Id='00528000000MwpQAAS'
Authorization:Bearer 00D28000000KMl1!ARAAQPLIuaRCKyXQPB1LDjuiF4Bg1QAVfzXNFpq7C4zYRVurh3JxqYpcu5IIf98P1XOB7oEwLkbSJwdq4Mc0pxkmaQCbjbgd

Error while sending Salesforce request {}HTTP_401 : [{"message":"Session expired
or invalid","errorCode":"INVALID_SESSION_ID"}]

Thanks,
Veera.

Veera Goriparthi
April 10, 2015
Like
0

2 replies

Session expired or invalid

Veera Goriparthi
April 10, 2015
Like
0