Hi Everyone, Does anyone worked with oAuth2.0 Inte...
# suitescriptc
Charan
07/22/2020, 11:13 AMHi Everyone, Does anyone worked with oAuth2.0 Integration? If yes, do we need to generate the tokens in Netsuite or not? Because I didn’t see the Application record while creation of Accesstokens? It would be great If someone can help me on this ?
b
battk
07/22/2020, 11:44 PMYou probably want to at least start at OAuth 2.0 Authorization Code Grant Flow
battk
07/22/2020, 11:45 PMits a redirection based flow built around you building a server that redirects to netsuite's authorization endpoint
battk
07/22/2020, 11:46 PMnetuite's authorization endpoint eventually redirects back to your server's redirection endpoint
battk
07/22/2020, 11:46 PMat which point your server makes a post request to netsuite's token endpoint to get your tokens
battk
07/22/2020, 11:47 PMi personally recommend taking a look at other oauth 2 resources outside of netsuite first, so you can recognize the unusual way that netsuite uses refresh tokens
battk
07/22/2020, 11:48 PMcurrently they only last a week, at which point your refresh token expires and you need to get a new one by starting over
c
Charan
07/23/2020, 9:16 AMYes I have tried this and it’s working and the horrible thing in the oauth2.0 is it only supports for authorise grant type which requires single sign on everytime. I mean it displays consent screen everytime when we request the netsuite resource from outside the system.
b
battk
07/23/2020, 9:25 AMthat doesnt sound correct
battk
07/23/2020, 9:26 AMnone of the endpoints that accept oauth 2 for authentication will prompt for consent
c
Charan
07/23/2020, 9:35 AMSorry, I didn’t get you @baktt. I meant to say currently in netsuite oAuth 2.0 authentication is only possible through below steps which is
Users enter user credentials into one of the following login forms as a part of the flow.
A trusted NetSuite login form.
SAML SSO Identity provider’s login form.
OIDC OpenID Connect provider’s login form.
b
battk
07/23/2020, 9:39 AMcorrect, the user needs to login, or already be logged in to netsuite
c
Charan
07/23/2020, 9:42 AMBut my question here is there a possibility in netsuite where user credentials can be passed through the rest api code from the outside of netsuite and it should be validated by netsuite without consent screen and returns the token back to the calling point.
Charan
07/23/2020, 9:42 AM@battk let me know your insights on this?
b
battk
07/23/2020, 9:43 AMno, netsuite used to offer user credentials as a authentication method in the past
battk
07/23/2020, 9:43 AMand are currently deprecating it
c
Charan
07/23/2020, 9:50 AMThanks for letting me know. Then for oAuth 2.0 in netsuite the consent screen authentication is the only solution right or Is there any approaches where we can authenticate without consent screen? Because clients are worrying about the consent screen to validate everytime when the request is made to the netsuite.
b
battk
07/23/2020, 9:57 AMThe consent screen should only be needed every 7 days
battk
07/23/2020, 9:57 AMNot every request
c
Charan
07/23/2020, 9:59 AMOk got it @battk . Thanks!
b
battk
07/23/2020, 10:00 AMThat said, the older token based authentication (mostly oauth 1) will probably be more useful since it doesn't expire
2 Views