@logto/express -- withLogto and access token for api resources

[patakattack]

Hi,

I'm new to Logto and I followed the documentation the best I could. I've successfully been able to use @logto/express and sign in. However, I'm trying to get an access token for my api resource.

I've used this:
app.get( "/fetch-access-token", logToExpress.withLogto({ ...logtoConfig, // Fetch access token from remote, this may slow down the response time, // you can also add "resource" if needed. getAccessToken: true, resources: ["https://api.example.com"], }), (request, response) => { // Get access token here console.log(request.user.accessToken); response.json(request.user); }
I changed resource to resources because it seems like it doesn't work with resource and says I'm unauthenticated.

I'm probably doing something wrong, but maybe something isn't working. How can I successfully get an api resource access token?

[patakattack]

Looking at the audit logs, this is shown:

"error": "{\"stack\":\"InvalidTarget: invalid_target\\n at default (file:///etc/logto/node_modules/.pnpm/[email protected]/node_modules/oidc-provider/lib/helpers/resolve_resource.js:29:13)\\n at refreshTokenHandler (file:///etc/logto/node_modules/.pnpm/[email protected]/node_modules/oidc-provider/lib/actions/grants/refresh_token.js:184:26)\\n at process.processTicksAndRejections (node:internal/process/task_queues:95:5)\\n at async callTokenHandler (file:///etc/logto/node_modules/.pnpm/[email protected]/node_modules/oidc-provider/lib/actions/token.js:70:7)\\n at async allowedGrantTypeCheck (file:///etc/logto/node_modules/.pnpm/[email protected]/node_modules/oidc-provider/lib/actions/token.js:53:7)\\n at async supportedGrantTypeCheck (file:///etc/logto/node_modules/.pnpm/[email protected]/node_modules/oidc-provider/lib/actions/token.js:45:7)\\n at async stripGrantIrrelevantParams (file:///etc/logto/node_modules/.pnpm/[email protected]/node_modules/oidc-provider/lib/actions/token.js:33:7)\\n at async auth (file:///etc/logto/node_modules/.pnpm/[email protected]/node_modules/oidc-provider/lib/shared/token_auth.js:257:9)\\n at async loadClient (file:///etc/logto/node_modules/.pnpm/[email protected]/node_modules/oidc-provider/lib/shared/token_auth.js:152:9)\\n at async setWWWAuthenticateHeader (file:///etc/logto/node_modules/.pnpm/[email protected]/node_modules/oidc-provider/lib/shared/token_auth.js:43:11)\\n at async selectiveBody (file:///etc/logto/node_modules/.pnpm/[email protected]/node_modules/oidc-provider/lib/shared/selective_body.js:49:5)\\n at async noCache (file:///etc/logto/node_modules/.pnpm/[email protected]/node_modules/oidc-provider/lib/shared/no_cache.js:3:3)\\n at async cors (/etc/logto/node_modules/.pnpm/@[email protected]/node_modules/@koa/cors/index.js:105:16)\\n at async errorHandler (file:///etc/logto/node_modules/.pnpm/[email protected]/node_modules/oidc-provider/lib/shared/error_handler.js:26:7)\\n at async ensureSessionSave (file:///etc/logto/node_modules/.pnpm/[email protected]/node_modules/oidc-provider/lib/helpers/initialize_app.js:52:7)\\n at async contextEnsureOidc (file:///etc/logto/node_modules/.pnpm/[email protected]/node_modules/oidc-provider/lib/shared/context_ensure_oidc.js:4:5)\", \"message\":\"invalid_target\",\"allow_redirect\":true,\"name\":\"InvalidTarget\",\"error\":\"invalid_target\",\"status\":400,\"statusCode\":400,\"expose\":true, \"error_description\":\"resource indicator is missing, or unknown\"}",

The resource used should be correct so not sure why it's saying it's unknown.

[patakattack]

This has been responded to in issue #4630