Password for the Live API

[domestos]

Dear All,

I'm trying to authorize with the live IG API using the same password as for my account, but, when I do, I get the following error

"errorCode": "error.security.invalid-details"

The "identifier" and "api_key" fields are correct. Which password is required for the live API authorization?

Thanks in advance

[bug-or-feature]

Solving authorization problems with the API is hard, because obviously you dont want anyone else to know your credentials, and that makes it impossible for anyone else to reproduce your issue.

The credentials are different between LIVE and DEMO. The username, password and API key are all different. In addition, authentication itself is difficult with the API if you are new to it.

If you think you have created an API key correctly, but your credentials don't work, it's probably because you think you have a LIVE account, but it is DEMO. Or the other way around. Or, you are mixing up username/password/API key between LIVE and DEMO. The system will not allow you to create a DEMO API key until you have funded your LIVE account. If you make too many incorrect authentication attempts, your account will be locked. If that happens, you need to contact support to get it unlocked.

I would recommend resolving authentication issues with the REST API Companion

https://labs.ig.com/sample-apps/api-rest-companion-release/index.html

That way you can be sure the API methods will be called correctly, and you can concentrate on getting your credentials and API keys recorded properly. Only move on to actually calling API code once you are sure you have resolved the credentials issues.

Also you need to be aware of the issue discussed here:

 

[domestos]

Hi, thanks for the reply.

I'm using the API Companion for this.

With the demo key, everything works fine:

But with the live key, I get the error 401.

With the demo key, it's possible to set the password directly:

But there's no such option with the live keys. The same password as the account's one doesn't work.

 

[domestos]

Figured out. For authorizing with the live API, you should not use the API key's identifier, but your user name for the live account. But it must not be the email! I've changed my user name from the email address to a regular string (i.e. from my_username@mail.com to just my_username) and used it as the API key identifier, and it helped.

I couldn't find the if the documentation is mentioning it anyhow, if it does, please give a link

[bug-or-feature]

I'm glad you got it working. I agree the docs could definitely be better