About Zapier Community
New to our Community? Get to know more about our space and how to make the most of your time here.

Code of Conduct Community FAQ's Zapier Common Questions What to Expect

Get Started With Zapier
New to Zapier? We have got you covered with our Zapier 101 Resources.

Zapier Essentials

Get Support
Have a question? Let's get you an answer!

How Do I...? Troubleshooting Code & Webhooks Developer Zone

Other Help Resources
Wait, there's more! Check out these Community sourced spaces for additional resources.

Zapier Help Center Hire an Expert

Zapier Products
Learn more about Zapier's new products.

Zapier Tables Zapier Interfaces

Zapier Reading
All of our best learning resources can be found here.

Featured Articles Show & Tell AI Hub Zapier Tools Hub

Learning Groups
Excited to meet other builders? Check out our interest areas full of doers, dreamers, and in-betweeners.

User Groups

Other Learning Resources
Some of our favorite additional ways to upskill your Zapier knowledge.

Zapier Learn Zapier Blog Zapier Webinars

Product Updates
Check out what is new and upcoming with Zapier with our regular product updates.

Product Updates

Early Access Program
Want to join Early Access? Learn more here.

Authentication

Questions about setting up authentication for integrations on the Zapier platform.

  • 30 Topics
  • 52 Replies

30 Topics

L
lsvBeginner
asked in Authentication

Connecting Jamf API

Has anyone had any luck connecting the Jamf API to the Developer platform? I can’t seem to get an access token generated the way it should be despite following what I think are the right steps. If someone has been able to do it, any guidance would be greatly appreciated! Thanks

1
H
1 day ago
C
Code MonkeyNew
asked in Authentication

zapier OAuth flow expires_int

does the OAuth 2.0 flow support expires_in for refresh tokens? It appears that Zapier doesn’t actually look at the expres_in field to determine if the accessToken is invalid - it instead calls the API so we need to return 401 to Zapier every time an access token goes bad. This seems like a security issue by making it more difficult to find real unauthorized attempts from bad actors.

1
O
8 days ago
C
Code MonkeyNew
asked in Authentication

Zapier not support refreshing refresh tokens in the OAuth flow?

It seems like a Zapier doesn’t fully implement the OAuth 2 flow, in regards to updating the refresh token. So the refresh token has to essentially live forever or you have to force customers to periodically update the refresh token? We’re returning the refresh_token in the auth token refresh request as specified in the OAuth standards but Zapier doesn’t actually use the refres_token in a subsequent response. Can anyone confirm if Zapier supports refreshing the refresh token in perhaps some other way without user interaction?    An example successful response:     HTTP/1.1 200 OK     Content-Type: application/json;charset=UTF-8     Cache-Control: no-store     Pragma: no-cache     {       "access_token":"2YotnFZFEjr1zCsicMWpAA",       "token_type":"example",       "expires_in":3600,       "refresh_token":"tGzv3JOkF0XG5Qx2TlKWIA",       "example_parameter":"example_value"     } 

1
O
9 days ago
C
Code MonkeyNew
asked in Authentication

Managing multiple connections OAuth2

 I’m prototyping a new Zapier integration. We want to allow customers to create multiple connections to our application using the OAuth 2.0 flow. We want to display the connections on our website similar to how Zapier displays connections under the app folder. However, we cannot tell the difference between when an OAuth 2.0 flow is initiated for creating a new connection or refreshing an existing connection. So if we had a list of a connections on our end we wouldn’t know if we should insert the connection into our database or update an existing connection. Is is possible to obtain a “connectionId” or configure Zapier to pass a connectionId or something similar whenever an OAuth 2.0 flow is initiated, either for the update an existing connection scenario or creating a new connection? Or is this not possible to do or against best practices to display multiple connections if there are. 

0
C
13 days ago
N
nameisbkBeginner
asked in Authentication

How to obtain refresh token for platform api to get list of user zaps?

Hello, I was able to gain Oauth2 access token in my app using “authorization_code” grant type to get list of zaps for the platform user. it was giving me a access_token and refresh_token. Now, I was not able to renew the new access token using refresh_token. Can someone help me to guide me on how to get this?POSTMAN example I have tried (didn’t works):URI  - https://zapier.com/oauth/token/Request : POSTContent-Type : “application/x-www-form-urlencoded”Data :   {    "grant_type": "refresh_token",    "refresh_token": "REFRESH_TOKEN"  }Header : Authorize : “Basic base64(client_id+client_secret)”--- RESPONSE---{    "error": "unauthorized_client"}Appreciate your support.  

2
N
17 days ago
AJM
AJMBeginner
asked in Authentication

Building a Custom Connector to Netsuite: Netsuite wants 24+ length "state" param yet Zapier's is 23

I’m trying to build a custom OAuth2 Integration with Netsuite using the developer console.Netsuite’s documentation requires a “state” parameter in the OAuth urls that is between 24 and 1024 characters long.Zapier’s state parameter is… 23 characters long 🤦Is there anyone who has successfully integrated with Netsuite who may have encountered this? I was hoping there’d be a way to override Zapier’s state param but I’m not seeing a way. Otherwise, is there perhaps another known way to do the integration (please don’t tell me I have to build a custom OAuth1 app).

7
P
17 days ago
A
abizerjafferjeeNew
asked in Authentication

Setting up AWS Cognito User Pool Authentication with Oauth V2 - Connection Expires

I'm building a zapier authentication with my application. My application uses aws cognito user pools for authentication so I connect with oauth v2. I correctly set up a client on my user pool to connect with Zapier. When I try to Test authentication with Zapier, the Zapier test authentication opens up the pop up to set up email and password and then closes it immediately and gives the message: "The account is expired. Please reconnect here". Upon clicking this the same thing happens. I've tried adding a new test account but the same thing happens and I'm not able to add any credentials. Looking at the http tab, I don't see any logs of requests made so I cannot figure out what the response from the authentication calls was.At one point I got the error "state" not found. I see that state is set by Zapier in the authorization url so I have no control over it.

3
O
1 month ago
S
sankavi sNew
asked in Authentication

Account expiring of oauth2 authentication randomly, it is asking for reconnect. 

We have built a custom integration, and for authentication, we are using OAuth v2. When trying to turn on the Zap that was turned off a day ago, I encountered the following error: "Error turning on account connection is stale, a Zapier issue." I checked the Zapier logs and monitoring page, but I didn't find any clues or errors related to this from our end. This happens randomly. I know we can make it work by reconnecting it, but I wanted to know the reason behind it. Can I know why it is getting expired randomly? 

0
S
1 month ago
M
masterAkayMOEBeginner
asked in Authentication

Modify label and help text of basic auth "username" and "password" fields in CLI mode

Hey!I want to change “Username” label to “App ID” and “Password” label to “App Key”. I have set up Basic auth using CLI mode. Here is what I have tried already:// ...module.exports = { type: 'basic', // ... fields: [ { computed: false, key: 'username', required: true, label: 'App ID', type: 'string', helpText: 'Enter your App ID. [Know more](https://link.to.helpdoc.com/)' }, { computed: false, key: 'password', required: true, label: 'Data API Key', type: 'password', helpText: 'Enter your Data API Key. [Know more](https://link.to.helpdoc.com/)' }, // ... ], connectionLabel: '{{bundle.inputData.app_name}} (Dashboard {{bundle.authData.region}})', basicConfig: {},};And when I pushed the code of this version, this is what I see when connecting to my app in Zapier: I was also adding a draft Zap before pushing the code, and I refreshed my page and tried to add a new connection and “test” my zap again - everyth

0
M
1 month ago
R
Rahil AroraNew
asked in Authentication

API Request (Beta) in Slack - Use bot's auth headers instead of user's

Hello!I’m trying to use the API request to call chat.update API to update a message with Zapier bot sent to an existing channel. Now this API only works if the user auth token sent with the request matches the user who actually sent the original message (Zapier bot).When I try this, it throws a cant_update_message error which tells me the token that Zapier is sending is not allowed to update the message. My guess is this is happening coz I selected my account when setting up this step. Is there a way to replace my account with Zapier’s and send the request using a bot token and not my user token?Thanks!

0
S
2 months ago
Z
ZapzapzapBeginner
asked in Authentication

Oauth2 in testing

I am struggling to understand how to authenticate via oauth2 in testing with Zapier CLI. Initially I was using Platform UI and was able to authenticate via oauth2 just fine. Then I found a need to swap to CLI and have had issues with oauth2. The issue seems to be 2 things:When visiting my website to authorise the oauth2 I have to log in via session so that my website knows which user account to authorise for oauth2. How do I authenticate in tests? I can’t work out a way of authenticating first and then continuing with the oauth2 flow. This is particularly confusing as in production I won’t need to authenticate first as this will be already done by the session cookie. Even if I can get the tests to authenticate first. How then do I authorise the oauth2? On my website you have to click a button to accept the authorisation. How is this done in tests?

1
Z
2 months ago
K
KnoxicNew
asked in Authentication

Bug Report: Refresh Tokens do not get stored when testing custom integrations

I am currently building a custom integration for a app which has a Laravel backend with a OAuth passport integrationWhen testing the OAuth refresh mechanism I experienced some flakiness which I was able to boil down to a bug:For development purpose I set down the access_token TTL to 10 seconds, so I can check if the refresh mechanism works.When getting an 401 from the backend, zapier automatically tries to get a new token via the refresh token endpoint. This also invalidates the old refresh_token, that's why in the response a new refresh_token is issued. This lead to a refresh_token method, which looks like this: const options = {  url: 'https://devoted-marginally-cub.ngrok-free.app/oauth/token',  method: 'POST',  headers: {    'content-type': 'application/x-www-form-urlencoded',    'accept': 'application/json'  },  params: {  },  body: {    'refresh_token': bundle.authData.refresh_token,    'grant_type': 'refresh_token',    'client_id': process.env.CLIENT_ID,    'client_secret': proce

0
K
2 months ago
swinster
swinsterBeginner
asked in Authentication

Bearer token App Integration - authorisation failure

Hi,I am trying to create an integration where the authorisation request that the API client request a token, then that token is used in a Bearer token for subsequent requests. As far as I understand, the Session Authentication type should be used of this, however, I am causing a 500 server error via Zapier. I have a successful authorisation mechanism setup in Postman, but can’t seem to replicate this in Zapier.The API endpoint I am looking to use to request the token is https://cloudshare.stoplight.io/docs/AccelerateAPI/5jzyft1s3p00h-authenticationIn Postman, the code I use to request the token is:pm.sendRequest({ url: 'https://api.accelerate.cloudshare.com/v4/oauth/token', method: 'POST', header: 'Content-Type: application/x-www-form-urlencoded', body: { mode: 'urlencoded', urlencoded: [ // The CloudShare Oauth2 implemntaiton is the same as using "Client Credentiatls" in the built in Postman Oauth2 authorisation { key: "client_id", value: pm.variables.get("API_ID"), disabled: fa

2
swinster
2 months ago
L
l_mac19New
asked in Authentication

Why cant i authenticate my app?! Oauth 2 or Session Auth

Im using the developer platform to build a zapier integration with an API that uses OAuth2 authorisation however am struggling. The API in question uses 4 bit of information to obtain an access token:client_id client_secret username passwordThe client_id and secret are fixed - they will be set in the Zapier integration and used every time. The username and password will need to be gathered by zapier then added to the request whenever someone wants to authenticate.I can run a curl request and am successful in returning a result:curl -XPOST -H 'Accept:application/json' -d 'grant_type=password&client_id=xxxxxxxx&client_secret=xxxxxxxxxxx&username=person@domain.com&password=MyPassword!' https://myAPIdomain.com/v1/auth/token I have tried configuring this with both Oauthv2 and Session Auth however always get the same error "Invalid grant_type parameter or parameter missing"My config for Session Auth:HTTP Headers are content-type = application/x-www-form-urlencoded and accept

0
L
2 months ago
AppGuyAaron
AppGuyAaronBeginner
posted in Authentication

Feature Request - Add Account Name to Disconnect Email

When an authentication for an app expires/fails - Zapier auto generates an email to you that looks something like this: However - if you happen to be a power user / part of lots of different Zapier teams - this is problematic. It does not state which Zapier account this integration has failed for. I am current part of 15 different zapier accounts and each time I get one of these I have to check a bunch of different accounts to figure out where the actual problem it. Hoping that a simple fix could be done where the account name as shown on the account switcher could be added in as part of this email notification.  Thanks!

0
AppGuyAaron
3 months ago
J
Jeff GNew
asked in Authentication

Does Zapier actually have a Support function?

I’m on Day 4 of a Zapier support issue for a failed API connection (Zapier<->Gravity Forms), it took 2 days to get an initial response, and no help whatsoever beyond a boilerplate link pointing to a support article and “You might receive an email indicating that I've marked the ticket as resolved. If you need further assistance with anything else, please don't hesitate to reply, and we'll be happy to help.”I see that my support request doesn’t even merit a case #; I don’t know how anyone at Zapier tracks a response. I’m probably back at the bottom of someone’s email inbox.What do I have to do to get a response?

2
Troy Tessalone
3 months ago
E
emanresuNew
asked in Authentication

Is it possible to set OAuth2 client_id and client_secret as input fields V2?

Hi,I created custom fields in oauth v2  Then I tried to pass custom parameters to the client_id and client_secret fields in step 3 and then use them in queries in step 4  but it doesn't work!I have read the post but it is useless for me.I also tried passing the values {{bundle.inputData.api_key}} and {{bundle.inputData.secret_key}} to the client_id and client_secret fields instead of process envs, but that didn't work either.What could be the problem?

0
E
3 months ago
T
TMurray88Beginner
asked in Authentication

Basic Auth - How to set the domain in bundle.authData and use in Triggers

Hi All,We are currently building an integration with Zapier. Our application uses Basic-Auth, and our clients have user-based domains/URL’s. We want to ensure that when the user completes authentication that the domain in the bundle is correct for that user and use it in our triggers and actions.As part of the authentication step, we have built an endpoint that is called to retrieve the correct domain for that user. Is it possible to use this domain in the bundle? This is the code we have for the authentication step const options = { url: 'https://xxxxxxxxxx/getdomain', method: 'GET', params: { username: bundle.authData.username, },};//The response is the domain for the user. We validate on our side and return the domain for the userreturn z.request(options) .then((response) => { response.throwForStatus(); const responseData = response.json; // Concatenate the characters into a single string const clientDomain = Object.values(responseData).join(''); // Add the

4
T
3 months ago
T
TMurray88Beginner
asked in Authentication

How to modify the domain in authData using Basic Auth

Hi,We are currently building an integration with Zapier. Our application uses Basic-Auth, and our clients have user-based domains/URL’s. We want to ensure that when the user completes authentication that the domain in the bundle is correct for that user.As part of the authentication step, we have built an endpoint that is called to retrieve the correct domain for the user. Is it possible to use this domain in the bundle? This is the code we have for the authentication step const options = { url: 'https://xxxxxxxxxx/getdomain', method: 'GET', params: { username: bundle.authData.username, },};//The response is the domain for the user. We validate on our side and return the domain for the userreturn z.request(options) .then((response) => { response.throwForStatus(); const responseData = response.json; // Concatenate the characters into a single string const clientDomain = Object.values(responseData).join(''); // Add the clientUrl to the bundle to use in later sta

2
T
3 months ago
G
Gaurav ChadhaBeginner
asked in Authentication

Zapier API key to authenticate and verify webhook request

Hi Zapier, I want to create a webhook authentication to connect my app with zapier, to trigger a zapier integration whenever a POST request is received to it. Where can I generate an API key or user access token for my zapier account to setup an authentication? I could not find any API Docs on this.  Thanks,Gaurav

3
G
5 months ago
dev_user
dev_userBeginner
asked in Authentication

Facing issue while integrating my app (using bearer token login Api) with zapier authorization

Hi!Trying to integrate our property portal Api, for authorization we have to integrate login Api with bearer token in headers.But for zapier, the user will add his credentials with username and password for login on our platform. As our system Api is taking the bearer token key in the header of each request. how we can send bearer token keys (header) to login Api?Which auth will be best for building auth on zapier for our system?Looking forward to your positive response. thanks

2
dev_user
7 months ago
I
Ikhlas AzmatBeginner
asked in Authentication

Is there a way save the auth_token and userId from response and use it for trigger?

Hello,I'm a new Zapier user, so please bear with me.I am trying to integrate our app into Zapier. I am getting success and a response with an auth_token and userId using basic auth on hitting our portal login API.(See screenshots)My question is, how can I take the auth_token and userId from the response and use them in the trigger, as they are required to hit different API in our app?I tried using StoreClient to store the token but I am getting StoreClient is undefined error.Please provide explaination in layman's terms.Thanks in advance!

2
I
7 months ago
quercus
quercusBeginner
posted in Authentication

Slack Integration via API Token

I’m curious if anyone out there has built a Slack integration that uses an API Token for access rather than OAuth?  For reasons that I do not understand, the built in Slack integration only supports OAuth, which means it ends up tied to a specific user.  It seems silly to rebuild identical functionality simply to have a different authentication method.If there are others whose security team would like this feature, perhaps you can chime in and help get Zapier to prioritize providing this? 

2
quercus
7 months ago
MMueller
MMuellerNew
asked in Authentication

OAuth2 - Token Revocation

I've made an app in Zapier, but I'm having trouble revoking the authentication tokens. I want to set up a process where when a customer deletes the integration between my software and Zapier, a request is sent to Zapier asking them to remove the connection to my app from their platform. Furthermore, if a customer removes a connection of my app from Zapier, I want to receive either an event notification or a DELETE request on my OAuth2 endpoints so that I can revoke the associated tokens.Although I have previously communicated with Zapier regarding this matter, it appears that they do not support this basic OAuth2 flow. Therefore, I would like to ask if anyone could give me some advice on how to achieve the same result using alternative methods.https://oauth.net/2/token-revocation/https://www.rfc-editor.org/rfc/rfc7009.html

0
MMueller
8 months ago
J
jkirkwood001Beginner
asked in Authentication

Can't get 1st trigger to work for an API Key authentication - please help!

Here’s the recommendation I got from Galaxy Support (the vendor of the host I want to create a Zap for; note their API documentation):...I am pretty familiar with how API authentication works in general, which is why I was able to help troubleshoot the last step in more detail. However, this next piece isn't something I have worked on before, so unfortunately I am not able to advise on how to set this up in Zapier. This is the part where I would recommend reaching back out to Zapier for help, and I would be glad to advise on what questions you should ask them. Let's use the /users/list endpoint as an example. This endpoint will show you a list of users on the site, and is a good one to use for testing because it's straightforward and easy to verify the results. If you were to make a call to this endpoint in Postman or some other API client outside of Zapier, the actual request would look something like this:In this example, I am using curl, which is a command line interface for making

1
J
9 months ago
Terms & Conditions