CODEWITHSUNDEEP
oauth-2.0alexa-skills-kitalexa-account-linking
Jefftopia
Jefftopia

Reputation: 2155

What is the redirect_uri in Alexa Skill Activation API?

Background

I'm implementing Alexa's App-to-App Account Linking Flow, and I'm stuck on Step 6 - enabling the skill using Alexa's Skill Activation API.

Concretely, I am not sure what value to supply to the redirect_uri POST field. In the docs, the following description is provided:

The redirect_uri parameter that was included in the authorization request to your OAuth 2.0 server to obtain the user's authorization code. This enables Amazon to retrieve access tokens from your token server. This URL must be opaque to Amazon.

My understanding is that Alexa wants to exchange an existing authorization code for an access token, but I don't know how Alexa is trying to accomplish this "under the hood" and my current approach throws a 400 error.

Error Message

[status]  400
[response]  {"message":"Could not contact provider of account linking credentials"}

Notes

I have tried using my app's [faux] "universal link" as the redirect url, to no avail. There are no other redirects in my login flows. What is this url supposed to be?

NB: I have a endpoint for exchanging an auth_code for an access_token. The token is returned in the body; there's no redirect with the access_token appended to the redirect_url.

Example Skill Activation (my React Native app):

async enableSkill() {
    try {
        let response = await fetch(`https://api.amazonalexa.com/v1/users/~current/skills/${this.skillId}/enablement`, {
            method: 'POST',
            headers: {
                'Authorization': `Bearer ${this.alexaAccessToken}`,
                'Content-Type': 'application/json'
            },
            body: JSON.stringify({
                stage: 'development', // or live
                accountLinkRequest: {
                    redirectUri: Linking.makeUrl(), // <--- unsure
                    authCode: this.myAppAuthCode, // <-- auth code from my system, not Alexa's
                    type: "AUTH_CODE"
                }
            })
        });

        return response.json();
    } catch (err) {
        throw new Error(err);
    }
}

Upvotes: 3

Views: 1786

Answers (2)

mdeval
mdeval

Reputation: 23

According to the developer documentation The redirect_uri you are asking about is a parameter that was included in the authorization request to your OAuth 2.0 server to obtain the user's authorization code. This enables Amazon to retrieve access tokens from your token server. You must set this URL in the developer console of your skill like that:

alexa developer console

Upvotes: 1

riv333
riv333

Reputation: 389

I think it is not possible to use different OAuth Server like Google and Facebook together. I am not sure if it is possible to use firebase as OAuth Server.

In the account linking tab of the skill, you have to enter the details of the OAuth server you want to use and in the accountLinkRequest you must enter the redirectUri which you used for the OAuth Login with this server.

When you have your own OAuth server make sure it is running on port 443. It took me hours to find out that it is not working with Port 3000 which my Node.js backend used.

Upvotes: 1

Related Questions