Skip to main content

Hi,

I’m creating an integration with Front which will sync conversation and inbox data. API tokens will not work for my use case, so I need to use OAuth.

Can I add Workspace scopes to an OAuth app? Workspace scopes are visible when creating API tokens but not OAuth.

I am also trying to use OAuth with non-admin users. Is there any way to authenticate non-admin users with workspace member users using OAuth? Specifically, I need to use the Shared resources scope so that the integration can pull conversation, inboxes, etc. for a user.

Thanks!

Hi sandboxes,

No, OAuth clients don’t currently support more granular scopes.  You can request that feature here:

https://front.ideas.aha.io/ideas/PRD-I-2232

Is there any way to authenticate non-admin users with workspace member users using OAuth?

 

I’m not sure what being asked here?  API access can only be granted to OAuth apps by Front admins.


Hi ​@sandboxes and ​@evano,

 

We recently pushed an update that gives OAuth clients the same scopes accessible to API tokens.

 

If you select Shared Resources, the admin who authorizes your app should be able to deselect the workspaces that the app should not apply to on the OAuth authorization screen. Unlike API tokens, which are private to one company, OAuth clients are extensible to other companies if your application is submitted for publication, which is why the UI does not steer you towards selecting specific workspaces during configuration, since these will change across companies.