Hi, I would like to ask about the issue of invalid access due to cookies in Discourse. In my case, I am trying to access the Discourse API using a cookie obtained from /session.json after logging in. However, I encounter a problem where, after one or two days, Discourse returns an Invalid Access error when using the same cookie that was generated from login (Note: In my case, the cookie updates when the Discourse API returns a header with the Set-Cookie value _t= ). When I check the cookie, the expiration time is still more than a month away (e.g., expires=Tue, 30 Jul 2024 04:04:28 GMT). Additionally, I can see the token I used for login still present in the user_auth_tokens database table. I would like to know the possible reasons why Discourse might invalidate this token. Are there any specific steps or flags in the database discourse that indicate a token has been declared invalid? Additional info (I used latest discourse version 3.3.0.beta3-dev) Thank you.

Why do you not follow this guide? [image] Create and configure an API key Integrations API keys are generated from the Admin / API page. Go to Admin-Advanced-API Keys: [Left Menu > Admin > API keys] [Admin > API keys] After clicking the “Add API key” button, you will be taken to a page to configure the key: [New API key] Every API key needs a description, a user level, and a scope. Description The description can be anything that you choose. User Level The User Level drop down allows you to select either “All Users” or “Single User.” If “All Users” is selected, the key…

Hi @thoka, thanks for your reply. I am just checking the flow of how the authentication works from the website. Regarding the API key, it is an option I can try for developing the API using the Discourse API. For now, I would like to ask about the invalid access issue with Discourse. Is there any additional information in the database that can be checked (like flag) that indicates a token is already invalid?

Asking about discourse invalid_access

Development

thoka (Thomas Kalka) June 2, 2024, 10:37am 2

Why do you not follow this guide?

Topic		Replies	Views
Access via Discourse API, key and/or user rejected Development rest-api	2	985	December 1, 2023
Discourse login by cookie token SSO	2	1358	May 23, 2022
User API keys specification Integrations rest-api , reference	69	38584	September 22, 2025
Discourse API - Unable to query certain endpoints Product Support	7	1663	October 1, 2019
Invalid_access error Product Support	6	888	January 11, 2021

Asking about discourse invalid_access

Related topics