jkakavas / creepy

A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.
http://www.geocreepy.com
GNU General Public License v3.0
410 stars 107 forks source link

Instagram API authentication error #49

Open uptospeed99 opened 8 years ago

uptospeed99 commented 8 years ago

Error: {"code": 403, "error_type": "OAuthForbiddenException", "error_message": "You are not a sandbox user of this client"}

Instagram updated their API terms on June 1st, which places all apps in "Sandbox Mode" until the developers submit their apps for "Live Mode". Developers must fix. Nothing users can do.

https://www.instagram.com/developer/sandbox/

jkakavas commented 7 years ago

I'll close all related issues and keep track of the problem here .I just submitted cree.py for validation, I'm not very optimistic that it will fit any of the - rather limited - use cases they allow, but let's see how that goes.

jkakavas commented 7 years ago

creepy_instagram

Well, not much I can do here...

zaydkhan3 commented 7 years ago

so its not able to be in use temporarily or permanently?

jkakavas commented 7 years ago

I would guess permanently ( or until they change their ToS )

zaydkhan3 commented 7 years ago

Rip the dream dude damn

On Aug 29, 2016 11:00 PM, "Ioannis Kakavas" notifications@github.com wrote:

I would guess permanently ( or until they change their ToS )

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/jkakavas/creepy/issues/49#issuecomment-243341121, or mute the thread https://github.com/notifications/unsubscribe-auth/AUV1bCGUYn5N9uL_3RHgaCkXh0YxB302ks5qk8b8gaJpZM4I_aYI .

jkakavas commented 7 years ago

A possible way to overcome this restriction is to use cree.py as your own application. In summary :

uptospeed99 commented 7 years ago

J: I did attempt as you suggested. First off, in the Run Config Wizard the URL must be updated to https://api.instagram.com/oauth/authorize/?client_id=CLIENT-ID&redirect_uri=REDIRECT-URI&response_type=code

After obtaining my new Client ID and Client Secret I proceeded to the above URL and was granted a new Token. I then tried the token in Creepy and received the error "Instagram Plugin is not correctly configured. The access_token provided is invalid. Not really sure where to go from here. Thx

jkakavas commented 7 years ago

Nope, that is wrong, you don't have to change the URL. The only thing you need to do is to change the client ID and client secret and then save the config with hitting "Apply Configuration" before running the wizard. I updated the instructions above.

uptospeed99 commented 7 years ago

My apologies J I did get it to work my way, but it also just worked as you described. Now once the wizard states it has been configured correctly I then attempt a username search and rcv the following error: ERROR:2016-08-30 16:43:47,263 In instagram.py:81: Error searching for targets with instagram plugin. ERROR:2016-08-30 16:43:47,263 In instagram.py:82: (400) OAuthAccessTokenException-The access_token provided is invalid.

uptospeed99 commented 7 years ago

Also, I then go back into the configuration settings to test configuration and now it says "Access token invalid" again. Are the access tokens expiring immediately after authorizing?

jkakavas commented 7 years ago

No, if you completed the wizard you should have gotten a new access token and access token secret that would be sufficient to perform searches ( as yourself ) . I will need to take a closer look tomorrow morning, it's already too late.

uptospeed99 commented 7 years ago

It does seem like the codes are expiring or invalidating almost immediately after being validated via Creepy. It's weird. Anyway I know you have a life and appreciate your responses thus far. :)

Shami-git commented 7 years ago

same problem here, I get the Token Value just fine, but when I paste it, it tells me that the access code is invalid

MagicMuffins commented 7 years ago

Hello jkakavas, I want to say that this method doesnt work for me. I followed instructions above exactly, but I still get a popup saying that the instagram plugin is not correctly configured. Here is the log output when i try to do this.

ERROR:2016-12-26 11:19:16,301 In instagram.py:209: You must provide a client_id ERROR:2016-12-26 11:19:16,305 In instagram.py:218: arguments did not match any overloaded call: QMessageBox.warning(QWidget, QString, QString, QMessageBox.StandardButtons buttons=QMessageBox.Ok, QMessageBox.StandardButton defaultButton=QMessageBox.NoButton): argument 4 has unexpected type 'NoneType' QMessageBox.warning(QWidget, QString, QString, int, int, int button2=0): argument 4 has unexpected type 'NoneType' QMessageBox.warning(QWidget, QString, QString, QString, QString button1Text=QString(), QString button2Text=QString(), int defaultButtonNumber=0, int escapeButtonNumber=-1): argument 4 has unexpected type 'NoneType' Traceback (most recent call last): File "CreepyMain.py", line 633, in wizardButtonPressed plugin.plugin_object.runConfigWizard() File "/home/ground_zero/Desktop/jkakavas-creepy-a861ee3/creepy/plugins/instagram/instagram.py", line 219, in runConfigWizard self.showWarning('Error', 'Error was {0}'.format(err)) File "/home/ground_zero/Desktop/jkakavas-creepy-a861ee3/creepy/plugins/instagram/instagram.py", line 229, in showWarning QMessageBox.warning(self.wizard, title, text, None) TypeError: arguments did not match any overloaded call: QMessageBox.warning(QWidget, QString, QString, QMessageBox.StandardButtons buttons=QMessageBox.Ok, QMessageBox.StandardButton defaultButton=QMessageBox.NoButton): argument 4 has unexpected type 'NoneType' QMessageBox.warning(QWidget, QString, QString, int, int, int button2=0): argument 4 has unexpected type 'NoneType' QMessageBox.warning(QWidget, QString, QString, QString, QString button1Text=QString(), QString button2Text=QString(), int defaultButtonNumber=0, int escapeButtonNumber=-1): argument 4 has unexpected type 'NoneType'

This looks a bit jumbled on my screen, so I will put it neatly in a text file and attatch it. The other plugins work by the way. Also, The first line says that I should provide a client id even though I put in the client id. I will also send a screenshot of the cofiguration as seen.

screenshot_2016-12-26_11-22-47 creepy log output.txt

NVolcz commented 7 years ago

Seems like you no longer can access public data from the API, even if you create a app in the sandbox. I got the access token configuration to work with the following URL: https://api.instagram.com/oauth/authorize/?client_id=CLIENT_ID&redirect_uri=http://localhost&response_type=token The token can be tested with the following API: https://api.instagram.com/v1/users/search?q=jack&access_token=ACCESS-TOKEN

jkakavas commented 7 years ago

Thanks @NVolcz , I will take a look !

quintendewilde commented 7 years ago

I have the same problem, copy with code. Get error. For google plus as for instagram.

AxRealGG commented 7 years ago

@jkakavas , how can i get token? please, add axreal_gg to sandboox.

spectre57 commented 7 years ago

Hello Jkakavas i have a problem with the access token, when i copy my token value from the web browser i get the next message: "Please verify that the link you pasted was correct. Try running the wizard again.

Thanks.

Dzianina commented 6 years ago

Anybody interested in this project still here? I'm struggling with configuring that plugin, I created a project at Insta API, obtained client ID and client secret and when I run configuration wizard I get error: "You are not a sandbox user of this client". Can anyone help? @jkakavas

NVolcz commented 6 years ago

@Dzianina The Instagram no longer work due to Instagram restricting the use of their API.

uptospeed99 commented 6 years ago

Could the developer replace Instagram with VK?

On Tue, Oct 24, 2017 at 4:22 PM, NVolcz notifications@github.com wrote:

@Dzianina https://github.com/dzianina The Instagram no longer work due to Instagram restricting the use of their API.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/jkakavas/creepy/issues/49#issuecomment-339135858, or mute the thread https://github.com/notifications/unsubscribe-auth/ATPRP6K85noV7HyNw7VGq-gPEX9gRkySks5svlUWgaJpZM4I_aYI .