smugmug.auth.checkAccessToken : invalid/expired token

Saurav Anand

Hi there,

In our PicBackMan & Mambouploader application we are getting invalid/expired token error message when trying to GET checkAccessToken method. Its working when we connect SmugMug account for the first time but while further use (Upload,Album list) of same token then this error coming regularly. We have been looking into this for the past several hours and it looks like we are seeing some unexpected behavior from the SmugMug API. Here' the message we are seeing (which was not the case earlier):

{"stat":"fail","method":"smugmug.auth.checkAccessToken","code":36,"message":"invalid/expired token"}

It looks like after authenticating the SmugMug account, the token is expiring in a few minutes. Can you please let us know if there has been a change with regards to the API/token etc?

Regard,
Saurav

bwg

Hi Saurav,

Is this something that has been working previously and just started failing? If so, do you know when it started failing? What version of the api are you using?

Saurav Anand

Hi,

Thanks for your reply. i'm validating SmugMug token with below end point:
https://secure.smugmug.com/services/api/json/1.3.0/?method=smugmug.auth.checkAccessToken

For sometimes its working but then after suddenly start to giving token expired/invalid error message. We are using this method for a long time with same code block but since last 3-4 days we are facing this issue and its coming all of a sudden.
Anything changed with the API? That invalid error message used to throw by API itself to the client.

Saurav Anand

Hi,

Any update or fix on this issue? We are facing this issue very frequently and by our users also and we need to fix this issue ASAP.
Please guide us what to do next in this regards.

Thanks,
Saurav

bwg

Hi Saurav,

Nothing yet. We're looking into it but don't see anything obvious from our end that would have suddenly caused this. We'll need some more time to look into your requests specifically as there are no other reports of this behavior.

We'll let you know what we find.

Thanks,
Lee

SmugMug API Sorcerer

bwg

Hi Saurav,

Can you please email us directly at api@smugmug.com with a full capture of the request your application sends, including headers and body.

Thanks,
Lee

SmugMug API Sorcerer