This site was built to compliment the existing NetSuite Professionals Slack Community by adding a means for members to easily find answers to common questions and to create a searchable database of those questions and answers.

NetSuite Professionals

[Just checking whether I am missing something here]:

Something I was asked about in an interview recently... Can you use OAuth 2.0 for an API integration?
And I answered that, the last time I checked, it was expiring after a few weeks, so it is not designed for this, although it is more secure.
The interviewer said no; it can be used for it.

So, what am I missing here? Did I have the wrong information? Did Oracle change something?

<https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_158255317571.html#subsect_160828987108|Here>, it says:
```As of NetSuite 2021.1, the certificates used to validate access and refresh tokens during the OAuth 2.0 code grant flow are no longer valid indefinitely.

The certificates are valid for 90 days and the system generates new certificates 30 days before the previous certificates expire.```
I am not sure whether a different certificate would mean the tokens get invalidated or not. Not also sure if this is where I got the information previously or not.

Hey, short answer is yes. And NetSuite is actually pushing integrations to use OAuth 2.0. I think the statement you mentioned is if you need to verify tokens from NetSuite which is not required for usual integrations

Plz search about auth 2.0 m2m(machine to machine)

you will get the answer of your question