Unable to add activity (client-side)

Hi there,

I can’t add an activity from the client side.

According to https://getstream.io/docs/js/#adding-activities, I must pass a “userToken” to the feed constructor; but every time I get a 403.

Isn’t it the same token as the one generated with createUserToken ? Or have I to generate one for follow/unfollow and one for adding activities to the user feed ?

Thanks for your help

[JelteF]

@Djiit That code snippet definitely helped. To be sure that users cannot impersonate another user adding an activity is only allowed if the actor is a reference to the user that the token belongs to. In this case it’s the exact string instead of a reference, which would be SU:xY4mbWw3pwMlrrQO9NAI2e9t4yF2.

The easiest way to solve this is by simply not providing the actor field. When initializing the client with a userToken the default actor will be a reference to the user from the token.

I’m closing this as I’m very sure this would solve your issue. If not feel free to reopen it.

[99hats]

On v4.0.9 I get a 403 when leaving out actor. I did get it working by prepending “SU:” to the actor after finding this issue.