question

newuser-d4cf03d0-25a8-432d-af47-ba633457cbd0 avatar image

Missing client_secret in access token request

The client_secret is not sent in the access token request body per the documentation at https://developer.amazon.com/en-US/docs/alexa/account-linking/configure-authorization-code-grant.html#tokens. The request body includes all other parameters featured in the example at that link; however, it is missing the client_secret. This makes reconciling with the stored secret on my authorization server and ultimately securing my endpoint impossible. Any help is appreciated, thanks!

alexa skills kitskillalexaaccount linking
10 |5000 characters needed characters left characters exceeded

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

1 Answer

Anand@Amazon avatar image
Anand@Amazon answered

Hi there,

Thanks for reaching out to us !!

Yes, it is by design and client_credentials are not allowed to be shared as URL parameter.

10 |5000 characters needed characters left characters exceeded

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.