For anyone using Oauth2.0 client credentials, do y...
# suitescript
c
For anyone using Oauth2.0 client credentials, do you just request a new token with every request?
b
that sounds like a hardcore way of not managing the token's expiration
the usual for ignoring expiration is requesting a new one when you start getting errors related to an expired token
c
ok yea that makes more sense. I am not the developer, but I was told that's a recommended way of doing it.
Are you familiar with the certificates? I was reading suite answers OAuth 2.0 Token Structure and Certificate Rotation ID:98364 It says the following: Does this mean the certificate that's uploaded during OAuth 2.0 Client Credentials Setup needs to be refreshed or is this something internally in NS? It says the system generates a new cert 30 days before expiring so it sounds like something related internally to NS.
Copy code
As of NetSuite 2021.1, the certificates used to validate access and refresh tokens during the OAuth 2.0 code grant flow are no longer valid indefinitely.

The certificates are valid for 90 days and the system generates new certificates 30 days before the previous certificates expire.

The certificates are company-specific.
b
you are looking in the wrong place, thats netsuite's public key used in responses so that you can verify that the response was generated by netsuite
c
ah ok. thanks.
b
is the documentation for your public key
c
oh that is what I followed and I got it working in postman. When I was just searching I saw that suiteanswers and was worried that the cert also expired
b
read the entire page
the certificate does expire, though the limit is not 90 days
c
ok thank you