Forum Discussion

Hari329's avatar
Hari329
Adept
10 years ago

Using the authorization grant flow via a back-end API call

Hi ,   We are planning to use " authorization grant flow  via a back-end API call ". Could you please let me know the process to get the access token and refresh token after we create API-only user...
PaoloT's avatar
PaoloT
Lithium Alumni (Retired)

Hi Hari329

 

the "Authorization Grant" flow is interactive and therefore not suitable for a server to server integration. You could of corse log in manually with the "API user" via the browser and obtain an access and refresh token, and then use these directly, but I don't think this would be suitable for a back-end integration.

 

What I suggest for the time being is to see whether you can use rest V1 in that scenario, for the time being.

 

Thanks,

PaoloT's avatar
PaoloT
Lithium Alumni (Retired)
10 years ago

To clarify my above response, you could also approach this by coding an administrative interface which allows an authorized admin user to link your application via the interactive flow (using the api only account) and then persists the tokens that will be used for the subsequent calls. This would also allow to refresh the tokens if they become invalid and for some reason it's not possible to get a new one via a refresh token etc...