Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More
Arquivado

Resource is not available at token.services.mozilla.com

Pushi

I try to get token from token server to access sync storage 1.5. This how i build my browserid assertion:

{
    header = {alg: 'RS256'}
    claims = {aud: 'https://token.services.mozilla.com', exp: now + (60 * 5)}

    body = base64(header) + '.' + base64(claims)
    signature = token + '.' + rsa_encrypt_on_private_key(base64(token))

    assertion = certificate + '~' + signature
}

Certificate has my public key. I get it from auth server.

After that i try to send request

request( 'GET', 'https://token.services.mozilla.com/1.0/sync/1.5')

with Authorization header:

BrowserID <assertion>

I think server recognize me, because it response me not with Unauthorized header, but i get error:

{"status": "error", "errors": [{"location": "body", "name": "", "description": "Resource is not available"}]}

How can i resolve this problem? Please, i spent so much time on it. Need help. At least tell me is my assertion generation algorithm correct and if not can somebode show how it should be?

I try to get token from token server to access sync storage 1.5. This how i build my browserid assertion: <pre><nowiki>{ header = {alg: 'RS256'} claims = {aud: 'https://token.services.mozilla.com', exp: now + (60 * 5)} body = base64(header) + '.' + base64(claims) signature = token + '.' + rsa_encrypt_on_private_key(base64(token)) assertion = certificate + '~' + signature }</nowiki></pre> Certificate has my public key. I get it from auth server. After that i try to send request <pre><nowiki>request( 'GET', 'https://token.services.mozilla.com/1.0/sync/1.5') </nowiki></pre> with Authorization header: <pre><nowiki>BrowserID <assertion></nowiki></pre> I think server recognize me, because it response me not with Unauthorized header, but i get error: <pre><nowiki>{"status": "error", "errors": [{"location": "body", "name": "", "description": "Resource is not available"}]}</nowiki></pre> How can i resolve this problem? Please, i spent so much time on it. Need help. At least tell me is my assertion generation algorithm correct and if not can somebode show how it should be?

cor-el modificouno o

All Replies (2)

I made mistake.

signature = body+ '.' + rsa_encrypt_on_private_key(base64(body))

Sorry.

But it does affect my question. Still need help.