How to automate OAuth token generation without browser intervention?
Case 1
When you develop applications to source your own information, you won't have any proper redirection URLs. In that case, you can use Self Clients to get an authorization grant code. This one-time code can exchanged for an access token and a refresh token by making POST request to /oauth/v2/token.
Case 2
When you develop a web-server based application,
- You have to generate grant code using /oauth/v2/auth API.
- In /oauth/v2/auth by default, access_type will be online. Changing the parameter as access_type=offline will give refresh token along with the access token as a response for /oauth/v2/token.
- Save the created refresh token in your side. You can generate access tokens using refresh tokens
- Once the access token expires you can regenerate them using refresh tokens automatically.
If you have deleted the refresh token, include access_type=offline in your authorization request. Adding prompt=consent along with access_type parameter prompts the OAuth page every time when your app tries to access user details.
For detailed information, please refer to our OAuth documentation
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
What to do when error occurred during access token generation?
The endpoint /oauth/v2/token supports only POST request. Request you hit directly from the browser is a GET request. Since token generation requests contain sensitive information like client secret and refresh tokens, GET request is not allowed. ...Asked to sign in to my account every time I quit my browser
What happened? If you sign in to your Zoho account once and mark your browser as the trusted browser, we won't ask you to sign in to your account for the next 30 days, even if you quit the browser. However, based on your browser settings or ...What is OAuth token and why should I migrate from Authtokens to it?
OAuth tokens are an industry standard protocol that are replacing old and obsolete authtokens. Unlike OAuth tokens which expire in one hour, authtokens will never expire unless you manually revoke them in your Zoho Accounts dashboard leading to many ...How to regenerate access token automatically?
You can regenerate access tokens automatically without prompting OAuth pages. The user has to grant access for the entire session to regenerate access tokens automatically. Learn more about how to generate access tokens without user consent in our ...Why am I receiving invalid_client or invalid_client_secret error message?
If you're facing the above errors the following might be the reason behind it: A new line character or extra space between the parameters. For example, the following request has a new character line after "client_id": ...
New to Zoho LandingPage?
Zoho LandingPage Resources