Refresh token issues

General
1

Hi, Since today we are experiencing issues with our API integration through React.

Our integration allows user to create an avatar with a guest account. Our flow

  • authenticate to RPM using our API key and
    • if the account is new, we supply our own user id, and we store the RPM account id that was sent back
    • if the account is existing, we send the account id as we know it
  • Then using that information we invoke the AvatarFrameApi (react)
  • in Browser console we can see the avarar?frameApi get url is being called with source, token, bodyType and the id from the RPM Account
  • Then a callback happens triggered by the RPM response javascript, that requests a refresh token.

Now the issue is that we get an error in java console, stating that the refresh token is unauthorized.

POST https://api.readyplayer.me/v1/auth/refresh 401 (Unauthorized)

Actions taken (all with no avail)

  • we re–rolled our API keys as we thought they might be expired
  • rolled back our code to several branches that worked from now till a month ago
  • double checked all tokens we are sending, they look correct

Is anyone else experiencing this issue ?

2 Likes
2

Hey @ReinhartDeLille

We pushed out an update that caused this issue but the team have rolled it back and are working to identify and resolve the issue before redeploying the update.

If you check your integration now you should see that it is working correctly but please do let me know if you are still running into any issues

Thanks

3

Hi Tom

Thanks for the swift response. We are testing, it looks fine for now. Had a small issue but that was from our own code trying to work around the issue :slight_smile:

Let me know if we can help with testing if the new update would come online.

Thanks again, livesaver!

Reinhart

PS: can you forward me to someone to talk about PlayerZero?