<div dir="ltr"><span style="font-size:12.8000001907349px">Guys, thatns you for response,</span><div style="font-size:12.8000001907349px"><br></div><div style="font-size:12.8000001907349px">It really helped me a lot, and I let myself play a little with:</div><div style="font-size:12.8000001907349px"><a href="https://github.com/mozilla/fxa-oauth-server" target="_blank">https://github.com/mozilla/fxa-oauth-server</a></div><div style="font-size:12.8000001907349px"><a href="https://github.com/mozilla/fxa-auth-server" target="_blank">https://github.com/mozilla/fxa-auth-server</a></div><div style="font-size:12.8000001907349px"><br></div><div style="font-size:12.8000001907349px">But, unfortunately it is not quite what I need</div><div style="font-size:12.8000001907349px"><br></div><div style="font-size:12.8000001907349px">My context is next:</div><div style="font-size:12.8000001907349px">1) There is no client UI at all</div><div style="font-size:12.8000001907349px">2) I have Firefox Account credentials stored in the backend</div><div style="font-size:12.8000001907349px">3) Backend written via NodeJS</div><div style="font-size:12.8000001907349px"><br></div><div style="font-size:12.8000001907349px">The flow is next:</div><div style="font-size:12.8000001907349px">1) Something  call backend server;</div><div style="font-size:12.8000001907349px">2) fxa-auth-server endpoint <a href="https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#post-v1accountlogin" target="_blank">https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#post-v1accountlogin</a> called, which returns session token</div><div style="font-size:12.8000001907349px">3) Hawk credentials is derived from session token received in step 2)</div><div style="font-size:12.8000001907349px"><br></div><div style="font-size:12.8000001907349px">What I can do using Hawk credentials from step 3):</div><div style="font-size:12.8000001907349px">4a) Call <a href="https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#get-v1sessionstatus" target="_blank">https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#get-v1sessionstatus</a> to get session status</div><div style="font-size:12.8000001907349px">5b) Call <a href="https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#post-v1sessiondestroy" target="_blank">https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#post-v1sessiondestroy</a> to destroy session</div><div style="font-size:12.8000001907349px"><br></div><div style="font-size:12.8000001907349px">What I want be able to do using Hawk credentials from step 3)</div><div style="font-size:12.8000001907349px"><div>4b) Call <a href="https://docs.services.mozilla.com/loop/apis.html#post-call-url" target="_blank">https://docs.services.mozilla.com/loop/apis.html#post-call-url</a> to get call url</div><div>But the only thing I receive from Loop Server:</div><div><div><font size="1">{</font></div><div><font size="1"><span style="white-space:pre-wrap">      </span>"code": 401,</font></div><div><font size="1"><span style="white-space:pre-wrap">       </span>"errno": 110,</font></div><div><font size="1"><span style="white-space:pre-wrap">      </span>"error": {</font></div><div><font size="1"><span style="white-space:pre-wrap">         </span>"statusCode": 401,</font></div><div><font size="1"><span style="white-space:pre-wrap">         </span>"error": "Unauthorized",</font></div><div><font size="1"><span style="white-space:pre-wrap">         </span>"message": "Unknown credentials"</font></div><div><font size="1"><span style="white-space:pre-wrap"> </span>}</font></div><div><font size="1">}</font></div></div><div><br></div><div>So I here are more concrete questions:</div><div>- is it even possible to call <a href="https://docs.services.mozilla.com/loop/apis.html#post-call-url" target="_blank">https://docs.services.mozilla.com/loop/apis.html#post-call-url</a> with hawk credentials derived from session token recieved from <a href="https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#post-v1accountlogin" target="_blank">https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#post-v1accountlogin</a>?</div><div>- if it is possible - what I am doing wrong?</div><div>- if it is not possible - what are other ways? (except FxA OAuth)</div><div><br></div><div>P.S. I create test application to give an idea what I am doing: <a href="https://github.com/oleksandrkyetov/test-app-server" target="_blank">https://github.com/oleksandrkyetov/test-app-server</a></div><div><br>Thanks in advance,</div><div>Alex K.</div></div></div>