创建用户时，OKTA 中的无效令牌提供错误

Question

我收到 Invalid token provided 错误。我创建了新令牌并使用邮递员，我能够创建用户，但使用 ajax 调用我无法创建用户。这是示例代码。

var express = require('express');
var bodyParser = require('body-parser');
var nodemailer = require('nodemailer');
var request = require('request');
var cookieParser = require('cookie-parser')
 
var port = process.env.port || 9002;
 
var app = express();
 
app.use(bodyParser.urlencoded({ extended: true }));
app.use(bodyParser.json());
app.use(cookieParser());
var router = express.Router();
 
app.use(function(req, res, next) {
    res.header("Access-Control-Allow-Origin", "*");
    res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,PATCH,OPTIONS');
    res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, Authorization");
    next();
});
 
router.post('/createUser', function(req, res) {
 
    var oktaUserCreationData = {
        "profile": {
            "firstName": req.body.profile.firstName,
            "lastName": req.body.profile.lastName,
            "email": req.body.profile.email,
            "login": req.body.profile.webId + '~' + req.body.profile.email
        }
 
    };
    var usderData = JSON.stringify(oktaUserCreationData);
 
    request({
        url: "https://dev-58043.oktapreview.com/api/v1/users?activate=false",
        method: "POST",
        headers: {
            'Accept': 'application/json',
            'Content-Type': 'application/json',
            'Authorization': 'SSWS {{apiKey}}
        },
        json: true, // <--Very important!!!
        body: usderData
    }, function(error, response, body) {
        console.log(response);
        ActivatedUser(response.body.id);
        res.json({ "message": "Please check your mail and follow steps, to set your credential." })
    });
 
});
 
app.use('/api', router);
 
app.listen(port, function() {
    console.log('Example app listening on port 9002!')
});
 

在这里，我使用的是我自己的 api 密钥，它是秘密的，因此被替换为 {{apiKey}}

Answer 1

您似乎错过了结束语

'Authorization': 'SSWS {{apiKey}}

此外，我希望您已在代码中将 SSWS {{apiKey}} 替换为您的 api 令牌。如您所知，SSWS {{apiKey}} 仅适用于邮递员。