Dear all, I have a couple of questions regarding Netsuite's OAuth2 for REST Webservices • We are able to get an access_token and refresh_token via the OAuth2 flow 1. We are not able to refresh an access token (we always receive

invalid_request

):

curl -X POST -H "Content-Type: application/x-www-form-urlencoded" -d "grant_type=refresh_token&refresh_token=XXXX&client_id=XXX&client_secret=XXXX" <https://REDACTED-sb1.suitetalk.api.netsuite.com/services/rest/auth/oauth2/v1/token>
{"error":"invalid_request"}

2. Is it possible to fetch invoice documents (like an invoice pdf) via the REST API? 3. How to refresh a refresh_token? It seems to expire after 7 days? 4. In our "normal" OAuth applications we can use 1 integration/application that we register as a company. We can use the same

client_id

and

client_secret

and the same authorization + token urls for ALL our clients, it seems this is not possible for Netsuite? Thank you very much in advance.

The same page also says what to do after the refresh token expires, which is basically start over from step 1

I couldn't imagine someone would implement it that way. This means all clients should manually reconnect again.

you are not wrong there, its not very useful for integrations

Thanks for the help @battk I'll try to refresh a token with the Basic auth authorization header now. I've never seen this done this way before.

not that unusual: https://www.oauth.com/oauth2-servers/access-tokens/refreshing-access-tokens/

@battk Do you perhaps also know if Token Based Authentication requires a manual refresh?

tba does not require refreshing

I'll give that a try then, thanks so much.

i wouldnt expect so from the api browser, nothing file like in there.

I'll check that out, thanks again