Authorization Tokens that keep Expiring

Justin.B.253

I created a widget, that allows an Instructor or Admin level to create a course using a form and entering a title, and the rest is generated for the user. Doing so requires an API POST command that requires a token. What I'm finding is the token keeps expiring. I have the auto-refresh token turned on, but this didn't fix the issue, I also went through the documentation for creating a refresh token but it's not working. When the original token expires, I no longer have the ability to create courses through the widget. Is it how I have the code set up in my javascript or is it somehow not possible? https://community.brightspace.com/s/article/How-to-obtain-an-OAuth-2-0-Refresh-Token

Bruce.B.64

Hi Justin;

After conversing with my colleagues - the syntax I think you seeking is to identify the user who is logged into Brightspace. In order to satisfy this within a widget in Brightspace you need to use some Java Script to seek the user logged-in token information.

If you are looking in the developer tools - you'll see an option named "XSRF.Token" under Dev Tools > Application > Local storage:

You'll see the "Token" information will show you what is in memory and that expires when the session concludes (the time is located here with a numeric value (underlined in green).

To that end - you'll need to use something like the below syntax to handle the present user's token to validate if the user in question has permission to interact with your widget.

You can use the below syntax to ensure that the widget can fetch who the user is:

async function BrightspaceFetch(fetchMethod, fetchUrl, fetchData)
{
console.log('BrightspaceFetch')
const headers = {
"Content-Type": "application/json",
"Access-Control-Origin": "*",
"X-Csrf-Token": localStorage["XSRF.Token"],
};

let options = {
"headers": headers,
"method": fetchMethod,
"credentials": "include"
};

let strToSend = '';

if (fetchData !== null)
{
const objToSend = {};
objToSend.Data = JSON.stringify(fetchData);
console.log(objToSend.Data)
strToSend = JSON.stringify(objToSend);
options = {
"headers": headers,
"method": fetchMethod,
"credentials": "include",
"body": (objToSend.Data),
};
}

const res = await fetch(fetchUrl, options);

const result = {
"status": res.status,
"data": {}
}

if (res.status === 200)
{
result.data = await res.json();
return result;

}

document.getElementById("demo").innerHTML = "Sorry something went wrong please try reloading the page or the username already exists"

console.log(res)
console.log('BrightspaceFetch - After fetch');

document.getElementById("form").reset();
}

async function getWhoAmI()

{

let URL = "https://"+window.location.hostname +"/d2l/api/lp/1.0/users/whoami"

let whoami = await BrightspaceFetch('GET', URL, null)

console.log(whoami.data)

document.getElementById("demo").innerHTML = JSON.stringify(whoami.data, undefined, 2)

}

Let me know if this syntax is helpful to answer your question.

Kind regards;

Bruce