question

Shlomi Biton avatar image
Shlomi Biton asked Yatin Gera answered

Present "Access Request" only one time per user

The "Access Request" screen is a screen where user confirm/"Authorize" that an application can access certain user information. Currently, this screen appears after any time where user provides credentials or even when user continue as already logged-in user. We would like to present this screen only one time. Is there an option to present the "Access Request" screen until user "Authorize" the screen and then no longer present the "Access Request" screen?

permissions
1 |3000

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

1 Answer

Yatin Gera avatar image
Yatin Gera answered

Hi @Shlomi Biton
From what I know, there is no way to stop the "scope" prompt.
The auth page can be customized to some extent but not showing scope every time is not a configuration option from what I know
https://developers.ringcentral.com/api-reference/Authorization

That being said, every time the user's access token is expired and the application fails to renew it or the user logs out, a new access token request needs to be sent. From a security point of view, I think it is necessary to show the user what is the "scope" of this auth request and what resources will the application token have access to every time the user grants access to the application.

This is my understanding of how it works and will let others add their thought/ways if they know of any

Hope this is helpful

1 |3000

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Developer sandbox tools

Using the RingCentral Phone for Desktop, you can dial or receive test calls, send and receive test SMS or Fax messages in your sandbox environment.

Download RingCentral Phone for Desktop:

Tip: switch to the "sandbox mode" before logging in the app:

  • On MacOS: press "fn + command + f2" keys
  • On Windows: press "Ctrl + F2" keys