Can you provision an auth token manually without using a callback URL?

Question

question

Kenneth Pinos asked Jun 2, '19 Anirban answered Jul 6, '19

Can you provision an auth token manually without using a callback URL?

Hi!

With the Zoho API you can set up as a "Self Client" to obtain an authorization token. Is it possible to do this for the RingCentral API?

Here's the Zoho doc (scroll to the bottom): https://www.zoho.com/accounts/protocol/oauth-setup.html

Thanks!

getting started

1 |3000

Attachments: Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Using the RingCentral Phone for Desktop, you can dial or receive test calls, send and receive test SMS or Fax messages in your sandbox environment.

Download RingCentral Phone for Desktop:

Tip: switch to the "sandbox mode" before logging in the app:

On MacOS: press "fn + command + f2" keys
On Windows: press "Ctrl + F2" keys

Answer 1 · 2019-06-03T19:33:50Z

Phong Vu answered Jun 3, '19

Hi Kenneth,

So far I have not seen a feature like that for RingCentral authorization flow. So my answer would be that it is not possible.

1 |3000

Attachments: Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Answer 2 · 2019-06-04T20:22:39Z

Byrne Reese answered Jun 4, '19

@Kenneth Pinos There is not a user interface in RingCentral yet to provision such a token for re-use. However, one can do this via a script. The app needs to be configured for Password-based authentication. I would then go through the auth flow:

1. Pass in username/password.
2. Get auth token.
3. Exchange auth token for access token.

Now, tokens of this type do not last forever, so they would need to be refreshed from time to time. But in theory, you could take the access token you receive and stash it into a config file somewhere for re-use. If you were using a vault solution of somekind, you could have an offline process refresh the token in storage so that it is always fresh.

1 |3000

Attachments: Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Answer 3 · 2019-07-06T19:31:19Z

Anirban answered Jul 6, '19

For a OAuth security of Authorization code grant_type, there will be a callback url followed to provide the token which later exchanged with access_token.

You cannot do anything other as this is the core concept of Authorization code grant_type

https://developers.ringcentral.com/guide/authentication/auth-code-flow

1 |3000

Attachments: Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

question