API access_denied JWT string must have two dots

msi_admin · 17 July 2020 11:33

I’ve seen this error a few times in the threads but I am not seeing clear-cut answers. I am using SuiteCRM 7.11.15 hosted at hostgator on a shared server.
My API submittor is getting access_denied, the resource owner or authorization server denied the request. Hint: The JWT string must have two dots.

Thu Jul 16 17:48:28 2020 [124318][-none-][FATAL] [ERROR] [ResourceServer] Code: 9 Message: The resource owner or authorization server denied the request. ErrorType: access_denied Hint: The JWT string must have two dots

I don’t know what this means other than I have seen various deep code edits to resolve.

However when I was trying to troubleshoot the original access_denied, I stumbled on the forum post regarding a missing authorization header that the rewrite was a fix in a previous version but also mentioned adding a rewrite to .htaccess which I did - but that didn’t help.

This the the .htaccess line I added to .htaccess at domain/msicrm/ (one folder up from domain root where suitecrm is installed)
#added to htaccess per suitecrm tshooting
RewriteRule ^lib/API/ - [env=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

For grins, I also added it to the .htaccess at domain root as well.

The site is https (I saw a reference for API to work it had to be https).

I’m not sure what else to check. Please help if you have knowledge of this.

hoshang · 15 January 2021 06:41

Hi @msi_admin,

Its Not a major Issue. Do One this. Create a Environ Ment Variable and When You fired a API to Generate Access_token, Just Store that access Toke in some variable say {{access_token}}.

When You create a new API which require this access token Ust use it from the Environment in the post man tool. And Dont forget to click on Sync.