Get Support Have a question? Let's get you an answer!
Other Help Resources Wait, there's more! Check out these Community sourced spaces for additional resources.
Learning Resources All of our best learning resources can be found here.
Share your knowledge Give back to the Community by sharing your automation wins and helping to answer questions.
Other Learning Resources Some of our favorite additional ways to upskill your Zapier knowledge.
Product Updates Check out what is new and upcoming with Zapier with our regular product updates.
Early Access Program Want to join Early Access? Learn more here.
Questions about setting up authentication for integrations on the Zapier platform.
Recently active
Is there any way to authenticate apps using api tokens instead of using the login button? For my usecase, I want to use api tokens for the jira app instead of using login button from UI but I am not able to find any way to do so. Thanks for the help!
When using webhooks within Zapier, you may need to use a Secret Key or Bearer token.How should you manage this if you don't want other users in your company to know about it, or if you don't want to leave information in Zapier itself? thanks
I’m trying to connect my highlevel account to another CRM so leads are created automatically in my CRM. It keeps on telling my connection is expired and I need to reconnect it. I’ve tried reconnecting multiple times, I also renewed my API on my highlevel account and this still did not work. What am I doing wrong?
Hello together, we are currently facing the problem that API access with new access token fails after token was refreshed the second time. For better testing we use very short timespan for the access token in Keycloak: The initial OAuth2 Flow /auth endpoint is triggered succcessfully and the first token retrieved also is accepted by our API.Then after 1 Minute (when the token expired) we get a 403 from API and trigger a RefreshAccessToken call with scope “offline_access”.This successfully returns a new token which is accepted by our API.Again, another minute later, our API returns 403 and RefreshAccessToken call is triggered.This time our API refuses the Token with 403 and Zapier Zap failed with “Please reconnect your account”.After debugging the Token from our API we noticed that this was an old token which expired already. It seems Zapier did not use the new access_token but reused the old one.Maybe I did somethring wrong in the code on how to return the new token (we use zapier-plat
Hi,I have been using the WordPress API Request (Beta) zap without any issues for the last 3-4 months. However, the last week the connection failed. I have tried to reconnect the WordPress app in “My connections”, but I have been getting the following error since then:To rule out that it was not an error of the connected website, I have tried to connect other websites made with WordPress, with different configurations (themes, plugins...), and in all tests I get the same authentication error without any specific message.
Hi all, we’re facing the issue that we want to do the auth with Cognito, in code mode we have: const options = { url: 'https://auth.hauzd.app/oauth2/token', method: 'POST', headers: { 'content-type': 'application/x-www-form-urlencoded' }, body: { 'client_id': 'x', 'grant_type': 'refresh_token', 'refresh_token': bundle.authData.refresh_token }, removeMissingValuesFrom: { 'body': false, 'params': false },}return z.request(options) .then((response) => { if (response.id_token) { return response.id_token } return false }); but it adds the refresh_token as query parameter, which causes a “invalid_grant” error.It is a “Session auth”. We tried also “Api Key Auth” but it is the same… There is no way to avoid refresh_token to be put as query parameter.Basically the issue is that the refresh_token should not be sent as query param but there is no way to remove it from there. Please help. Thanks in advance!Regards,Gonzalo.
I’m trying to create a private integration in the Platform UI for the USPS Public API. Details can be found at https://github.com/USPS/api-examples?tab=readme-ov-file#oauth-token. You’ll note they only have a /token url (step 2). There’s no /auth url (step 1) present nor is it required to get an auth_token. Any ideas for how to get around this?
We currently building a integration using the UI platform. Everything seems to work fine so far.At thing we did not found tho is the following:Our test request returns some kind of data which will be used for the connection id, which works fine. But we would like to use some of this data as well for default field values in actions and maybe also triggers. Is there even a way to do it or do we have to use dynamic dropdowns for all?Thanks for a answer already
I’m trying to utilize Custom Actions and/or API Requests Beta to send messages using Zoom’s Team Chat API.When I run test either one, I receive this error message:Invalid access token, does not contain scopes:[chat_message:write, chat_message:write:admin].It seems that the default scope included for the Zoom connection provides limited scopes into the API, so we’re not able to fully leverage all the endpoints. Please consider increasing the scope.
I am facing with the integration of our application, Mold Ninja, into Zapier.We have deployed Mold Ninja to Zapier and set it up using OAuth v2. We successfully created a Zap to schedule meetings between:The user who logs into our app (acting as the scheduler).Other email IDs added as invited users.However, I encountered a problem during testing. When I attempt to schedule a meeting via Mold Ninja other users(not the same mail id with which zap was created), the integration only works if the "from" email address matches the one used to create the Zap in Zapier (the original scheduler email). It does not work with any other email addresses, even though those users are logged into Mold Ninja and are expected to act as schedulers.I would appreciate your guidance on resolving this issue. Is there a way to configure the Zap or our app’s OAuth implementation so that meetings can be scheduled by any valid logged-in user, instead of restricting it to the original scheduler email?Thank you in a
I am trying to integrate Zapier with my OAuth Authorization Server. It seems that the login information is not persisting, because after I try to make a GET request to /oauth2/authorize, I am redirected to the login page. After a successful login, when Zapier tries to make a POST request to /oauth2/token, it receives the login HTML page again.When I try the authorization flow using Postman, it works, and I developed a client-server application to test the authorization server, and it also works. What can I do to fix this?I am using the Spring Authorization Server dependency.
I’ve searched around the community as well as the internet and cannot find what redirect_uri Zapier wants from ServiceNow. I’m attempting to use the default https://<instance>.service-now.com/oauth_redirect.do, but Zapier says this URI is invalid. To be clear, this redirect works fine with multiple other integrations. I could use the username and password to bypass this, but the entire point of this is to test an integration for my company and if I can’t get OAuth working, that’s a deal-breaker and my PoC spike will be over before it started.Any help is appreciated. Thanks!
Hi,Is it possible to do an authentication for a Zap between Meta and MS Dynamics other than via Oauth (aka using an email address)?My IT team is quite nervous about using an email-based auth! Thanks a lot, Zappito
Hey all, Is it possible to bipass the need to reauthenticate each time you reset your google account password? I see this help article but wasn’t sure about an App password between google and zapier. https://support.google.com/a/answer/6328616?hl=en&ref_topic=10021546&fl=1&sjid=8876137320170281140-NC#zippy=%2Chow-does-this-change-impact-applications-using-an-app-password-if--step-verification-is-enabled%2Cwhen-do-the-tokens-get-revoked-upon-password-expiry-or-password-change
I’ve updated app authentication from API key to OAuth 2.0. I’m currently testing in Private mode. OAuth flow works in a way that pop-up opens, login-in, grant access, and closes pop-up. However, the account in Trigger doesn’t show up even if I wait like a minute or two. It shows up after force refresh the page and account shows up. Is there a way that accounts show up smoothly without user have to refresh the page? I’ve noticed other apps, automatically change the account to new one that’s signed in. Any thoughts on why this might be happening?
I have created 1 Custom Zapier APP for My Client, for now I am using Staging API and have plan to update the API of LIVE server once the Zapier APP (ex: XYZ) get Publish.So is this possible to update the Authentication and Trigger API after APP Publishing?
Hey, I’m working on baby’s first development, so I’m bound to have pretty stupid questions: thanks in advance for the help! I hope to learn and ask smarter questions next time =)API docs for reference.I’m making a session auth step, and having a spot of trouble with the developer platform injecting X-CLIENT-ID-KEY and X-CLIENT-SECRET-KEY into headers, and I can’t seem to get rid of them.Authentication POST requestThe API docs wantHeaders: Content-Type: application/json Api-version: alpha Body: ClientID ClientSecret The platform keeps autopopulating the X-CLIENT-ID-KEY and X-CLIENT-SECRET-KEY into my headers, and I can’t delete them. Even if I hit the ‘X’ to delete them, they come back when I click back into the tab (even if I hit ‘save’). Test GET Request The API docs wantHeaders: Content-Type: application/json Api-version: alpha Authorization: bearer token Body: optional (not the issue here). Again, the platform keeps injecting X-CLIENT-ID-KEY and X-CLIENT-SECRET-KEY. When I tes
It seems like a Zapier doesn’t fully implement the OAuth 2 flow, in regards to updating the refresh token. So the refresh token has to essentially live forever or you have to force customers to periodically update the refresh token? We’re returning the refresh_token in the auth token refresh request as specified in the OAuth standards but Zapier doesn’t actually use the refres_token in a subsequent response. Can anyone confirm if Zapier supports refreshing the refresh token in perhaps some other way without user interaction? An example successful response: HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Cache-Control: no-store Pragma: no-cache { "access_token":"2YotnFZFEjr1zCsicMWpAA", "token_type":"example", "expires_in":3600, "refresh_token":"tGzv3JOkF0XG5Qx2TlKWIA", "example_parameter":"example_value" }
I'm setting up my app for the first time with private integration. As my app api is protected with Cognito user pool, I'm setting up OAuth v2 authentication against Cognito. I have configured a new app in Cognito with client_id, client_secret and zappier.com as an authorized redirect url. However, zapier is not able to connect to the app. It goes through the authorize step successfully showing the login screen and fails at the token step with the below error. Appreciate any help. This is time sensitive for a funding demo.{"status":400,"headers":{"content-type":"application/json;charset=UTF-8","retry-after":null},"content":"{\"error\":\"invalid_client\"}" Regardsvg
I wish to store some sensitive data in the environment variables to use in authentication flow. I’d like to know how does zapier stores these variables? Are these in some kind of vault or if there’s any security layer that protects these? What is the encryption mechanism for storing these variables.
Not able to connect account for newly created app.2 issues.Sometimes in new pop up window auth url is not opening ( hit error getting oauth url) Sometimes auth page opened and after entering email and pwd received code and but exchange of code (AUTH RuntimeError Lambda function prd-mngd-lmbd_cliappjs18_cli-423959 took too long to be ready to use)
