"Token invalid/expired" occurred, but I'm sure that the token is valid and has not expired

[azyl99]

The token config:

Here is my code:

import authentik_client
from authentik_client.rest import ApiException
from pprint import pprint

configuration = authentik_client.Configuration(
    host = "http://xxxx.xxx/api/v3",
    access_token = 'API_key',
    debug=True
)

with authentik_client.ApiClient(configuration) as api_client:
    admin_api = authentik_client.AdminApi(api_client)

    try:
        api_response = admin_api.admin_apps_list()
        print("The response of AdminApi->admin_apps_list:\n")
        pprint(api_response)
    except ApiException as e:
        print("Exception when calling AdminApi->admin_apps_list: %s\n" % e)

The request and response are as follows:

send: b'GET /api/v3/admin/apps/ HTTP/1.1\r\nHost: xxxx.xxx\r\nAccept-Encoding: identity\r\nAccept: application/json\r\nUser-Agent: OpenAPI-Generator/2025.2.4-1745325589/python\r\nAuthorization: Bearer API_key\r\n\r\n'
reply: 'HTTP/1.1 403 Forbidden\r\n'
header: Server: nginx/1.27.5
header: Date: Tue, 29 Apr 2025 07:44:58 GMT
header: Content-Type: application/json; charset=utf-8
header: Content-Length: 34
header: Connection: keep-alive
header: Allow: GET, HEAD, OPTIONS
header: Referrer-Policy: same-origin
header: Vary: Accept-Encoding
header: Vary: Cookie
header: X-Authentik-Id: 6f413b838bae4f4a901a2723469741e6
header: X-Content-Type-Options: nosniff
header: X-Frame-Options: DENY
header: X-Powered-By: authentik
Exception when calling AdminApi->admin_apps_list: (403)
Reason: Forbidden
HTTP response headers: HTTPHeaderDict({'Server': 'nginx/1.27.5', 'Date': 'Tue, 29 Apr 2025 07:44:58 GMT', 'Content-Type': 'application/json; charset=utf-8', 'Content-Length': '34', 'Connection': 'keep-alive', 'Allow': 'GET, HEAD, OPTIONS', 'Referrer-Policy': 'same-origin', 'Vary': 'Accept-Encoding, Cookie', 'X-Authentik-Id': '6f413b838bae4f4a901a2723469741e6', 'X-Content-Type-Options': 'nosniff', 'X-Frame-Options': 'DENY', 'X-Powered-By': 'authentik'})
HTTP response body: detail='Token invalid/expired' code=None

[rissson]

I suppose that the header Authorization: Bearer API_key doesn't actually contain API_key, but the actual token?

[azyl99]

The 'API_key' is the token config in settings. Is this actual token? If not, how can I get actual token?

[rissson]

You can click on the "copy token" icon

[azyl99]

It works. Thanks very much!