i know about the dashboard but couldnt find them anywhere
You need to create an app first, go here - https://www.reddit.com/prefs/apps
Referencing old thread - https://www.reddit.com/r/redditdev/comments/251v3z/how_to_get_an_api_key/
You can find the dashboard by clicking on the "hamburger" icon in the top left-hand corner of the screen.
Hey guys!
I've been trying to get a client ID and Secret for a project with PRAW, but the provided link (https://www.reddit.com/prefs/apps) doesn't work. Someone experiencing this? Is this link up-to-date or broken?
I can only access a page that says: "Welcome back! You are already logged in and will be redirected back to Reddit shortly. If you are not redirected automatically, follow this link."
Clicking on "this link" does nothing.
Any help appreciated. Thank you :D
Where to store client_id and client_secret
How to Generate and Authorize Reddit API Credentials for use With the OpenBB Terminal.
Alert on Azure app registration client secret expiry : AZURE
How to implement Client ID and Client Secret based API Authentication for my REST API?
Videos
You can now use Sync for Reddit after July 1 using the Spoof client patch with ReVanced!
Follow the instructions in this post.
Troubleshooting:
If your patched app crashes, your APK file may be broken. Check if it does not crash when you don't patch it. If your APK file turns out to be broken, you need to source a working APK from somewhere else.
I'm reading https://socialiteproviders.com/Reddit/ and I want to implement Reddit OAuth login on my site. Does Reddit allow that? Where do I start`?
Hello guys. New programming learning about backend (SpringBoot). I am building a simple library app and am using Google Oauth2 for log in and out, and planning to host it using AWS with docker. I want to ask, what are some of the most popular ways to store client_scret in a safe way?
I tried googling but never seems to find a straight answer. There must be like, top 3 most popular ways to store client secret, or something.
Please help
I can successfully see the client id but couldn't see client secret after I clicked on "edit". Only basic informations (app name, descriptions, etc) are shown.
Hi, Im new to praw 4. Could someone tell me what to input to client_id and client_secret in the praw.Reddit() function?
Thanks
Learning OAuth2, and I'm seeing the reason for using PKCE is for when you have a completely public app, like a javascript application where it's entire source code lives in the browser and therefore the client_secret would be exposed.
It then recommends using PKCE. But in this case, isn't the code_verifier basically the password? It sends the initial code_challenge, the hashed value, in the original request...so this could be intercepted, it is even stated it's not a secret.
It then POSTS the code_verifier later with the auth_code from what I'm reading. So, how is this different than having a client_secret? If an app's source is published, won't the code_verifier be leaked as well? Or maybe it's generated at run time and that's the point...
If so, is the security of this flowed based on the fact that the password is basically randomly generated?
I am planning on building an installed app that uses reddit API. Let's assume a native android app.
Here is the relevant excerpt from the docs:
Your app won't be able to keep a client secret safe and secure. For example, Android, Windows or iOS apps that access the reddit API should choose this app type, as anyone who installs the app would be able to figure out your client secret.
For relevant requests, you should still send and use the client secret like normal. The reddit servers will simply not make the assumption that an installed app sending a secret has "proven" to be a request on behalf of that app.
I don't even understand what this paragraph means. What does it mean that reddit servers won't assume an installed app sending a secret has "proven" to be a request on behalf of that app? Should I send the secret or no?
From the sounds of it, it is awfully similar to Authorization Code Flow from spotify API. In that case does reddit not implement PKCE for preventing Authorization Code Interception Attack ? Spotify seems to do it.