Felipe AmaralOriginal post
Rank 2: Process
The endpoint v1/account/jwts aint working as REST documentation says. It only works using Cookies recived from v1/account/sessions/email. My test commands steps are:
1st. Create Session
curl -sX POST "https://appwrite.mydomain.io/v1/account/sessions/email" \
-H "Content-Type: application/json" \
-H "X-Appwrite-Response-Format: 1.6.0" \
-H "X-Appwrite-Project: project-id" \
-d '{"email": "user@email.com", "password": "1234347"}' \
-c cookie.txt
2nd. Create JWT
curl -sX POST "https://appwrite.mydomain.io/v1/account/jwts" \
-H "Content-Type: application/json" \
-H "X-Appwrite-Project: project-id" \
-b cookie.txt
This works fine. But, i would like to know if i can make this request without cookies, usgin sessionID and UserID from JSON provided from v1/account/sessions/email request.
When I try any other way i get this error:
{
"message": "User (role: guests) missing scope (account)",
"code": 401,
"type": "general_unauthorized_scope",
"version": "1.6.0"
}
Summary
Issue: Unable to create JWT via REST without using cookies, using `sessionID` and `UserID` instead results in error code 401.
Solution: The endpoint `v1/account/jwts` requires the `account` scope which is missing when not using cookies. Stick to using cookies as the provided method.