I'm currently creating my app within the Zapier platform. I have OAuth endpoints setup in my application, hosted on Heroku. From my understanding of OAuth, I need to store Zapier'sclient_id
andclient_secret
in my app's database to identify who (Zapier in this case) is requesting API access to my app through the OAuth flow.
Zapier is asking me for my app'sclient_id
andclient_secret
(why?), but they haven't given me theirs. Not sure how I'm supposed to get a successful authorization if they won't give me theirclient_id
andclient_secret
.
Is my understanding of OAuth wrong? How am I supposed to identify who is requesting access to my API?
I've tried finding explanations for OAuth flows and looked through Zapier's documentation but there seems to be a general lack of useful information around this topic.
You are required to create an identity with your identity provider (AAD, for example) for your application in Zapier and configure a secret for it. The ID of this application and the generated secret are to be configured in Zapier.
These details will be used to generate tokens for use by the client in Zapier. Your API should have logic to decode these tokens to really identify the client (based on its ID baked into the token).
It is the ID and secret you generate for the client application with your identity provider that you term as Zapier Client ID and Secret, and these are not necessarily Zapier's own credentials.
Our community is visited by hundreds of web development professionals every day. Ask your question and get a quick answer for free.
Find the answer in similar questions on our website.
Do you know the answer to this question? Write a quick response to it. With your help, we will make our community stronger.
PHP (from the English Hypertext Preprocessor - hypertext preprocessor) is a scripting programming language for developing web applications. Supported by most hosting providers, it is one of the most popular tools for creating dynamic websites.
The PHP scripting language has gained wide popularity due to its processing speed, simplicity, cross-platform, functionality and distribution of source codes under its own license.
https://www.php.net/
Welcome to the Q&A site for web developers. Here you can ask a question about the problem you are facing and get answers from other experts. We have created a user-friendly interface so that you can quickly and free of charge ask a question about a web programming problem. We also invite other experts to join our community and help other members who ask questions. In addition, you can use our search for questions with a solution.
Ask about the real problem you are facing. Describe in detail what you are doing and what you want to achieve.
Our goal is to create a strong community in which everyone will support each other. If you find a question and know the answer to it, help others with your knowledge.