Question

Do we have the api for creating a jwt token ?

  • 9 November 2022
  • 3 replies
  • 511 views

is there any api for creating an jwt token


3 replies

Userlevel 1

Unfortunately, there is no API to generate a JWT token. The only way to generate or revoke a JWT token is via the RingCentral developers portal.

Does that mean that we have to give every user in our organization permission for access to the Developer Portal, then log in with every user's credential to then generate a JWT token for every user?? Then repeat this for every customer that we have???

How can RC depreciate a working system (Password flow) without providing an adequate substitute? What am I missing?

Userlevel 1

If your app serves all (or multiple) users under the same account, you should consider using 3-legged authorization flow instead of JWT flow or even password flow (when it was supported). This will take away the hassle of asking every user to generate a JWT token or providing you with their username and password (once and every time the user change the password).

JWT token authentication should be used mainly for server-only app, which normally authenticated by a single user under an account (more often a super admin user) to operate on behalf of the company, or on behalf of other user extensions if the such operations are allowed.

There is a way that a super admin can generate a JWT token for other user extensions under the same account. But that also requires the user to login the developer portal once, so that is not really helpful in this case.

The team is still working on this area and try their best to improve documentation and JWT authentication process.

If you have further questions related to this topic, please post a new thread and focus on the technical aspects.

Reply