I read some of the threads here about OAuth2.0 and...
# suitescriptm
Marwan
11/16/2021, 12:01 PMI read some of the threads here about OAuth2.0 and I asked about it before, I know the Code Grant Flow is weird, but we have to use it as our client is not able to implement OAuth1.0/TBA.
I got it working from Postman, and also able to do it manually but I can't do it programmatically, specially this step https://system.app.netsuite.com/app/help/helpcenter.nl?fid=section_158081944642.html because it requires a browser or user interaction.
How do you do that step from the code?
b
battk
11/16/2021, 5:33 PMthat step is not designed to work programmatically
m
Marwan
11/16/2021, 5:34 PMbut if I did it manually, then used the code to get an access_token, it doesn't allow fetching a new one, you can use it once I guess
b
battk
11/16/2021, 5:35 PMthe access token is the uninteresting part
battk
11/16/2021, 5:35 PMthey last an hour
battk
11/16/2021, 5:36 PMyou want the refresh token, which lasts a week
battk
11/16/2021, 5:36 PMand can be used to get new access tokens
m
Marwan
11/16/2021, 5:36 PMwhat happens after the week
Marwan
11/16/2021, 5:36 PMyou get the code manually again?
b
battk
11/16/2021, 5:39 PMcorrect
m
Marwan
11/16/2021, 5:40 PMI think we should sue Oracle
b
battk
11/16/2021, 5:40 PMand i use the word want loosely here, you want to be using TBA
m
Marwan
11/16/2021, 5:41 PMIt is an integration with the client's account on SalesForce, and they said they can't use it from SalesForce, not sure why
Marwan
11/16/2021, 5:41 PMWill return back to them
Marwan
11/16/2021, 5:41 PMThanks very much ❤️
b
battk
11/16/2021, 5:42 PMim guessing they tried and failed to implement TBA in apex
battk
11/16/2021, 5:42 PMits possible, but requires understanding how Oauth 1 works and how to implement it
battk
11/16/2021, 5:43 PMi know of no library that would do it for them
m
Marwan
11/16/2021, 5:44 PMso they will have to do it manually, will discuss it with them, and maybe they could make a second search to find a library
m
michoel
11/17/2021, 12:53 AMI can confirm it is possible to get OAuth1.0 working in Apex. I worked with our salesforce dev and we got there
michoel
11/17/2021, 12:55 AMUse this tool http://lti.tools/oauth/, click create your own and use a hardcoded nonce and timestamp
michoel
11/17/2021, 12:56 AMLog every step of the way and make sure the output in apex matches what the tool shows
michoel
11/17/2021, 12:57 AMUntil you can get a signature that matches
m
Marwan
11/17/2021, 9:48 AMThanks very much, I will send this to them