The request unfortunately outputs a 400 without specyfying the reason for it. Could you tell me why the request is bad?
Few years ago I had a similar problem, and I remember that I required a CSRF token to avoid the 400 code. To do that I had been sending a GET request to: https://sandbox.orcid.org/oauth/authorize . Unfortunately the response does not contain the token anymore.
What would be the right way to get the authorisation code these days without a web-browser interaction?
Thanks, Mateusz
Fran Alsina
unread,
Mar 28, 2023, 4:43:24 AM3/28/23
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to ORCID API Users
Hi Mateusz,
Thank you for your message.
Please, find here the step-by-step instructions on how to do the 3-legged OAuth process, including how to exchange the authorization code for an access token: