I’m wondering if it’s possible to access Data Service API without interaction of user. I have had my Postman setup but for a specific project I would like to get an access_token without the need of going through authorization process (opening a login page, providing my login credentials, etc.)
I know it’s possible to log in once and then just automatically refresh the token whenever access_token got redundant. I think I have everything that’s necessary for it like client secret/id but whatever I try won’t allow me to do it. I thought about changing grant type to password credentials but I just couldn’t make it work.
I would like to know if there’s any kind of solution that won’t include user at all. Thank you for any tips
Yeah, I went through these but they don’t seem to have answered my question. I set up the apps although for resources (the scopes) are only available for user scopes. And while reading the documentation about it there’s this line:
On the User Scope(s) tab, select the check boxes for the logical API permissions that you want to grant, as needed.
Granting permissions under user scope means that the external application can access those resources within a user context and a user with the appropriate permissions must be logged in.
So it would suggest I need to add Application scope to get access to it without any users.
And when I go here:
Learn more about the authorization methods for external apps.
This opens general documentation page and I would have to go through all of it to find it again. Although the definition by itself suggests that so far if Data Service doesn’t have any application scope it’s impossible to set up S2S authentication without user interaction as any try with different grant-types like password credentials or client credentials are being rejected.
So far this is what I came to. So basically, just got an access_token and refresh_token through Postman and then set up refresh every half an hour to maintain it without any user interaction.