Authentication

Hi all,I wondered if I could get some advice on how to best handle OAuth access and refresh tokens.I have built some Zaps which make calls to an API using Webhook by Zapier. The calls must be authenticated with an access token. An access token is valid for 30 minutes and can be refreshed using the refresh token, which is valid for 60 days.I store the access and refresh tokens in a Zapier Table. I have built a Sub-Zap to refresh the token, which essentially fetches the refresh token from the table, refreshes it, updates the table, and passes the access token through to the Zap that called it.This works well, but the trouble is that because multiple Zaps are using it, there’s the risk that another Zap calls the Sub-Zap before the first Zap has finished, making the first access token invalid.I thought about having the Sub-Zap refresh the token every 30 minutes, but this would seem a waste of tasks as the Zaps which need the token don’t run all that fr

I’m trying to create a custom Zapier integration, but it seems that the Platform UI is expecting a `code` query parementer while my auth flow returns it as `access_code`.I’ve trided using `bundle.cleanedRequest.querystring.access_code` but it seems that the filed is retrieved before any code of the “Access Token Request” step.What can I do?  ```const options = {  url: 'https://myurl/auth/token/',  method: 'POST',  headers: {    'content-type': 'application/x-www-form-urlencoded',    'accept': 'application/json'  },  params: {  },  body: {    'access_code': bundle.cleanedRequest.querystring.access_code,    'appId': process.env.CLIENT_ID,    'appSecret': process.env.CLIENT_SECRET,    'challenge': bundle.inputData.state  },

I am trying to create a webhook in Zapier that will add a task in RingCentral when a form is submitted on our website.I am struggling with the authorization.When I registered the app with RingCentral, it provided a API Server URL, Client ID and Client Secret as credentials, but I don’t know where/how to enter these in the Zapier Webhook.

Hi there,I'm trying to integrate Langflow (hosted at Datastax) with Zapier. There is a zap to run a Langflow workflow, but I'm stuck on authenticating my Langflow account with Zapier.If anyone has an experience with Langflow, could you please advise what I should enter in these fields?I've basically tried every possible API/URL I can find in my Langflow settings, and mostly I get this error: We hit an error adding your new account authentication failed:The app returned "no bearer token in request".I have tried adding Bearer, but the error message remains the same. I would appreciate any help!

Is there any way to authenticate apps using api tokens instead of using the login button? For my usecase, I want to use api tokens for the jira app instead of using login button from UI but I am not able to find any way to do so. Thanks for the help!

Hello together, we are currently facing the problem that API access with new access token fails after token was refreshed the second time. For better testing we use very short timespan for the access token in Keycloak: The initial OAuth2 Flow /auth endpoint is triggered succcessfully and the first token retrieved also is accepted by our API.Then after 1 Minute (when the token expired) we get a 403 from API and trigger a RefreshAccessToken call with scope “offline_access”.This successfully returns a new token which is accepted by our API.Again, another minute later, our API returns 403 and RefreshAccessToken call is triggered.This time our API refuses the Token with 403 and Zapier Zap failed with “Please reconnect your account”.After debugging the Token from our API we noti

Hi,I have been using the WordPress API Request (Beta) zap without any issues for the last 3-4 months. However, the last week the connection failed. I have tried to reconnect the WordPress app in “My connections”, but I have been getting the following error since then:To rule out that it was not an error of the connected website, I have tried to connect other websites made with WordPress, with different configurations (themes, plugins...), and in all tests I get the same authentication error without any specific message.

Hi all, we’re facing the issue that we want to do the auth with Cognito, in code mode we have: const options = {  url: 'https://auth.hauzd.app/oauth2/token',  method: 'POST',  headers: {    'content-type': 'application/x-www-form-urlencoded'  },  body: {    'client_id': 'x',    'grant_type': 'refresh_token',    'refresh_token': bundle.authData.refresh_token  },  removeMissingValuesFrom: {    'body': false,    'params': false  },}return z.request(options)  .then((response) => {    if (response.id_token) {      return response.id_token    }    return false  }); but it adds the refresh_token as query parameter, which causes a “invalid_grant” error.It is a “Session auth”. We tried also “Api Key Auth” but it is the same… There is no way to avoid refresh_token to be put as query parameter.

I’m trying to create a private integration in the Platform UI for the USPS Public API.  Details can be found at https://github.com/USPS/api-examples?tab=readme-ov-file#oauth-token. You’ll note they only have a /token url (step 2).  There’s no /auth url (step 1) present nor is it required to get an auth_token.  Any ideas for how to get around this?

We currently building a integration using the UI platform. Everything seems to work fine so far.At thing we did not found tho is the following:Our test request returns some kind of data which will be used for the connection id, which works fine. But we would like to use some of this data as well for default field values in actions and maybe also triggers. Is there even a way to do it or do we have to use dynamic dropdowns for all?Thanks for a answer already 

I’m trying to utilize Custom Actions and/or API Requests Beta to send messages using Zoom’s Team Chat API.When I run test either one, I receive this error message:Invalid access token, does not contain scopes:[chat_message:write, chat_message:write:admin].It seems that the default scope included for the Zoom connection provides limited scopes into the API, so we’re not able to fully leverage all the endpoints. Please consider increasing the scope.

I am facing with the integration of our application, Mold Ninja, into Zapier.We have deployed Mold Ninja to Zapier and set it up using OAuth v2. We successfully created a Zap to schedule meetings between:The user who logs into our app (acting as the scheduler).Other email IDs added as invited users.However, I encountered a problem during testing. When I attempt to schedule a meeting via Mold Ninja other users(not the same mail id with which zap was created), the integration only works if the "from" email address matches the one used to create the Zap in Zapier (the original scheduler email). It does not work with any other email addresses, even though those users are logged into Mold Ninja and are expected to act as schedulers.I would appreciate your guidance on resolving this issue. Is there a way to configure the Zap or our app’s OAuth implementation so that meetings can be scheduled by any valid logged-in user, instead of restricting it to the ori

I am trying to integrate Zapier with my OAuth Authorization Server. It seems that the login information is not persisting, because after I try to make a GET request to /oauth2/authorize, I am redirected to the login page. After a successful login, when Zapier tries to make a POST request to /oauth2/token, it receives the login HTML page again.When I try the authorization flow using Postman, it works, and I developed a client-server application to test the authorization server, and it also works. What can I do to fix this?I am using the Spring Authorization Server dependency.

I’ve searched around the community as well as the internet and cannot find what redirect_uri Zapier wants from ServiceNow. I’m attempting to use the default https://<instance>.service-now.com/oauth_redirect.do, but Zapier says this URI is invalid. To be clear, this redirect works fine with multiple other integrations. I could use the username and password to bypass this, but the entire point of this is to test an integration for my company and if I can’t get OAuth working, that’s a deal-breaker and my PoC spike will be over before it started.Any help is appreciated. Thanks!

I am trying to integrate Zapier with my OAuth Authorization Server. It seems that the login information is not persisting, because after I try to make a GET request to /oauth2/authorize, I am redirected to the login page. After a successful login, when Zapier tries to make a POST request to /oauth2/token, it receives the login HTML page again.When I try the authorization flow using Postman, it works, and I developed a client-server application to test the authorization server, and it also works. What can I do to fix this?I am using the Spring Authorization Server dependency.

Hi,Is it possible to do an authentication for a Zap between Meta and MS Dynamics other than via Oauth (aka using an email address)?My IT team is quite nervous about using an email-based auth! Thanks a lot, Zappito

Hey all, Is it possible to bipass the need to reauthenticate each time you reset your google account password? I see this help article but wasn’t sure about an App password between google and zapier. https://support.google.com/a/answer/6328616?hl=en&ref_topic=10021546&fl=1&sjid=8876137320170281140-NC#zippy=%2Chow-does-this-change-impact-applications-using-an-app-password-if--step-verification-is-enabled%2Cwhen-do-the-tokens-get-revoked-upon-password-expiry-or-password-change

I’ve updated app authentication from API key to OAuth 2.0. I’m currently testing in Private mode. OAuth flow works in a way that pop-up opens, login-in, grant access, and closes pop-up. However, the account in Trigger doesn’t show up even if I wait like a minute or two. It shows up after force refresh the page and account shows up. Is there a way that accounts show up smoothly without user have to refresh the page? I’ve noticed other apps, automatically change the account to new one that’s signed in. Any thoughts on why this might be happening?

I have created 1 Custom Zapier APP for My Client, for now I am using Staging API and have plan to update the API of LIVE server once the Zapier APP (ex: XYZ) get Publish.So is this possible to update the Authentication and Trigger API after APP Publishing?

Hey, I’m working on baby’s first development, so I’m bound to have pretty stupid questions: thanks in advance for the help! I hope to learn and ask smarter questions next time =)API docs for reference.I’m making a session auth step, and having a spot of trouble with the developer platform injecting X-CLIENT-ID-KEY and X-CLIENT-SECRET-KEY into headers, and I can’t seem to get rid of them.Authentication POST requestThe API docs wantHeaders: Content-Type: application/json Api-version: alpha Body: ClientID ClientSecret The platform keeps autopopulating the X-CLIENT-ID-KEY and X-CLIENT-SECRET-KEY into my headers, and I can’t delete them. Even if I hit the ‘X’ to delete them, they come back when I click back into the tab (even if I hit ‘save’).

I'm setting up my app for the first time with private integration. As my app api is protected with Cognito user pool, I'm setting up OAuth v2 authentication against Cognito. I have configured a new app in Cognito with client_id, client_secret and zappier.com as an authorized redirect url. However, zapier is not able to connect to the app. It goes through the authorize step successfully showing the login screen and fails at the token step with the below error. Appreciate any help. This is time sensitive for a funding demo.{"status":400,"headers":{"content-type":"application/json;charset=UTF-8","retry-after":null},"content":"{\"error\":\"invalid_client\"}" Regardsvg

I wish to store some sensitive data in the environment variables to use in authentication flow. I’d like to know how does zapier stores these variables? Are these in some kind of vault or if there’s any security layer that protects these? What is the encryption mechanism for storing these variables.  

Not able to connect account for newly created app.2 issues.Sometimes in new pop up window auth url is not opening ( hit error getting oauth url) Sometimes auth page opened and after entering email and pwd received code and but exchange of code (AUTH RuntimeError Lambda function prd-mngd-lmbd_cliappjs18_cli-423959 took too long to be ready to use)

In my Authentication Tab, I have generated the Token. And added the test connection URL as well to check whether endpoints are working fine.Now, On the next step - I need to check whether the particular user is present in target or not. But for that API call, we again need access token. But because of the last call was to get the data instead of token - I am getting the data and not the token. How can we retrieved the token in such case to use it in next step of ZAP?