Skip to main content

Get Support
Have a question? Let's get you an answer!

How Do I...? Troubleshooting Code & Webhooks Developer Zone

Other Help Resources
Wait, there's more! Check out these Community sourced spaces for additional resources.

Zapier Help Center Hire an Expert

Learning Resources
All of our best learning resources can be found here.

Featured Articles Show & Tell Zapier's products AI Hub Zapier Tools Hub

Share your knowledge
Give back to the Community by sharing your automation wins and helping to answer questions.

Share your success See unanswered questions User Groups

Other Learning Resources
Some of our favorite additional ways to upskill your Zapier knowledge.

Zapier Learn Zapier Blog Zapier Webinars

Product Updates
Check out what is new and upcoming with Zapier with our regular product updates.

Product Updates

Early Access Program
Want to join Early Access? Learn more here.

Authentication

Questions about setting up authentication for integrations on the Zapier platform.

  • 74 Topics
  • 112 Replies
74 Topics
D
dadeNew
asked in Authentication
When using REST webhooks, Is it possible to authenticate request to the targetURL?

This question is about the request from an app to Zapier’s `target_url`. Is it possible to have this request authenticated? Looking through the documentation I could not find a mention of this.

10
D
E
endoNew
asked in Authentication
How to securely manage API keys and tokens in Zapier

When using webhooks within Zapier, you may need to use a Secret Key or Bearer token.How should you manage this if you don't want other users in your company to know about it, or if you don't want to leave information in Zapier itself? thanks

392
O
C
Code Monkey
asked in Authentication
Zapier not support refreshing refresh tokens in the OAuth flow?

It seems like a Zapier doesn’t fully implement the OAuth 2 flow, in regards to updating the refresh token. So the refresh token has to essentially live forever or you have to force customers to periodically update the refresh token? We’re returning the refresh_token in the auth token refresh request as specified in the OAuth standards but Zapier doesn’t actually use the refres_token in a subsequent response. Can anyone confirm if Zapier supports refreshing the refresh token in perhaps some other way without user interaction?    An example successful response:     HTTP/1.1 200 OK     Content-Type: application/json;charset=UTF-8     Cache-Control: no-store     Pragma: no-cache     {       "access_token":"2YotnFZFEjr1zCsicMWpAA",       "token_type":"example",       "expires_in":3600,       "refresh_token":"tGzv3JOkF0XG5Qx2TlKWIA",       "example_parameter":"example_value"     } 

4135
V
S
sebyoungBeginner
asked in Authentication
Handling OAuth token refresh for Zapier Zaps

Hi all,I wondered if I could get some advice on how to best handle OAuth access and refresh tokens.I have built some Zaps which make calls to an API using Webhook by Zapier. The calls must be authenticated with an access token. An access token is valid for 30 minutes and can be refreshed using the refresh token, which is valid for 60 days.I store the access and refresh tokens in a Zapier Table. I have built a Sub-Zap to refresh the token, which essentially fetches the refresh token from the table, refreshes it, updates the table, and passes the access token through to the Zap that called it.This works well, but the trouble is that because multiple Zaps are using it, there’s the risk that another Zap calls the Sub-Zap before the first Zap has finished, making the first access token invalid.I thought about having the Sub-Zap refresh the token every 30 minutes, but this would seem a waste of tasks as the Zaps which need the token don’t run all that frequently.So I was wondering, does anyo

304
S
T
teocomiNew
asked in Authentication
Troubleshooting OAuth2 code parameter in custom Zapier integration

I’m trying to create a custom Zapier integration, but it seems that the Platform UI is expecting a `code` query parementer while my auth flow returns it as `access_code`.I’ve trided using `bundle.cleanedRequest.querystring.access_code` but it seems that the filed is retrieved before any code of the “Access Token Request” step.What can I do?  ```const options = {  url: 'https://myurl/auth/token/',  method: 'POST',  headers: {    'content-type': 'application/x-www-form-urlencoded',    'accept': 'application/json'  },  params: {  },  body: {    'access_code': bundle.cleanedRequest.querystring.access_code,    'appId': process.env.CLIENT_ID,    'appSecret': process.env.CLIENT_SECRET,    'challenge': bundle.inputData.state  },  removeMissingValuesFrom: {    'body': false,    'params': false  },}return z.request(options)  .then((response) => {    const results = response.json;      // You can do any parsing you need for results here before returning them    return results;  });

70
T
K
kenserBeginner
asked in Authentication
How to create a webhook in Zapier for RingCentral tasks

I am trying to create a webhook in Zapier that will add a task in RingCentral when a form is submitted on our website.I am struggling with the authorization.When I registered the app with RingCentral, it provided a API Server URL, Client ID and Client Secret as credentials, but I don’t know where/how to enter these in the Zapier Webhook.

81
Troy Tessalone
A
AlexOBeginner
asked in Authentication
Langflow Integration

Hi there,I'm trying to integrate Langflow (hosted at Datastax) with Zapier. There is a zap to run a Langflow workflow, but I'm stuck on authenticating my Langflow account with Zapier.If anyone has an experience with Langflow, could you please advise what I should enter in these fields?I've basically tried every possible API/URL I can find in my Langflow settings, and mostly I get this error: We hit an error adding your new account authentication failed:The app returned "no bearer token in request".I have tried adding Bearer, but the error message remains the same. I would appreciate any help!

190
A
L
l_mac19New
asked in Authentication
Why cant i authenticate my app?! Oauth 2 or Session Auth

Im using the developer platform to build a zapier integration with an API that uses OAuth2 authorisation however am struggling. The API in question uses 4 bit of information to obtain an access token:client_id client_secret username passwordThe client_id and secret are fixed - they will be set in the Zapier integration and used every time. The username and password will need to be gathered by zapier then added to the request whenever someone wants to authenticate.I can run a curl request and am successful in returning a result:curl -XPOST -H 'Accept:application/json' -d 'grant_type=password&client_id=xxxxxxxx&client_secret=xxxxxxxxxxx&[email protected]&password=MyPassword!' https://myAPIdomain.com/v1/auth/token I have tried configuring this with both Oauthv2 and Session Auth however always get the same error "Invalid grant_type parameter or parameter missing"My config for Session Auth:HTTP Headers are content-type = application/x-www-form-urlencoded and accept

1151
A
M
MelonRRRNew
asked in Authentication
Troubleshooting access token issues in Zapier OAuth2 authentication

I just took over this project, and the colleague who previously maintained this project is now working on other things. There is a problem with the customer feedback interface, and I am troubleshooting.I am testing my OAuth v2 authentication, and Zapier tells me that it cannot find the access token. How should I solve this problem?It looks like code mode is used and Zapier tries to find the token directlyI just took over this project and I'm not very familiar with Zapier, so I'm sorry  

360
M
Y
yash_aggarwalNew
asked in Authentication
Use token/api-key for authenticating apps instead of login

Is there any way to authenticate apps using api tokens instead of using the login button? For my usecase, I want to use api tokens for the jira app instead of using login button from UI but I am not able to find any way to do so. Thanks for the help!

201
Troy Tessalone
J
Justin5StarNew
asked in Authentication
How to fix the expired connection issue between Highlevel and my CRM

I’m trying to connect my highlevel account to another CRM so leads are created automatically in my CRM.  It keeps on telling my connection is expired and I need to reconnect it.  I’ve tried reconnecting multiple times, I also renewed my API on my highlevel account and this still did not work.  What am I doing wrong? 

312
S
S
SHomeierNew
asked in Authentication
OAuth2 with Keycloak fails after 2nd RefreshAccessToken Call

Hello together, we are currently facing the problem that API access with new access token fails after token was refreshed the second time. For better testing we use very short timespan for the access token in Keycloak: The initial OAuth2 Flow /auth endpoint is triggered succcessfully and the first token retrieved also is accepted by our API.Then after 1 Minute (when the token expired) we get a 403 from API and trigger a RefreshAccessToken call with scope “offline_access”.This successfully returns a new token which is accepted by our API.Again, another minute later, our API returns 403 and RefreshAccessToken call is triggered.This time our API refuses the Token with 403 and Zapier Zap failed with “Please reconnect your account”.After debugging the Token from our API we noticed that this was an old token which expired already. It seems Zapier did not use the new access_token but reused the old one.Maybe I did somethring wrong in the code on how to return the new token (we use zapier-plat

250
S
M
MarketingSafa
asked in Authentication
WordPress app authentication failed

Hi,I have been using the WordPress API Request (Beta) zap without any issues for the last 3-4 months. However, the last week the connection failed. I have tried to reconnect the WordPress app in “My connections”, but I have been getting the following error since then:To rule out that it was not an error of the connected website, I have tried to connect other websites made with WordPress, with different configurations (themes, plugins...), and in all tests I get the same authentication error without any specific message.

471
M
H
HauzdNew
asked in Authentication
[Auth] Refresh token is added as url query parameter

Hi all, we’re facing the issue that we want to do the auth with Cognito, in code mode we have: const options = {  url: 'https://auth.hauzd.app/oauth2/token',  method: 'POST',  headers: {    'content-type': 'application/x-www-form-urlencoded'  },  body: {    'client_id': 'x',    'grant_type': 'refresh_token',    'refresh_token': bundle.authData.refresh_token  },  removeMissingValuesFrom: {    'body': false,    'params': false  },}return z.request(options)  .then((response) => {    if (response.id_token) {      return response.id_token    }    return false  }); but it adds the refresh_token as query parameter, which causes a “invalid_grant” error.It is a “Session auth”. We tried also “Api Key Auth” but it is the same… There is no way to avoid refresh_token to be put as query parameter.Basically the issue is that the refresh_token should not be sent as query param but there is no way to remove it from there. Please help. Thanks in advance!Regards,Gonzalo.

311
MiguelC.
A
Anything-Helps.orgBeginner
asked in Authentication
How to Integrate a Platform's UI Without an Authorization URL

I’m trying to create a private integration in the Platform UI for the USPS Public API.  Details can be found at https://github.com/USPS/api-examples?tab=readme-ov-file#oauth-token. You’ll note they only have a /token url (step 2).  There’s no /auth url (step 1) present nor is it required to get an auth_token.  Any ideas for how to get around this?

391
MiguelC.
C
CyrillvwNew
asked in Authentication
Integration: how can i use data from the test request in actions and triggers as default value

We currently building a integration using the UI platform. Everything seems to work fine so far.At thing we did not found tho is the following:Our test request returns some kind of data which will be used for the connection id, which works fine. But we would like to use some of this data as well for default field values in actions and maybe also triggers. Is there even a way to do it or do we have to use dynamic dropdowns for all?Thanks for a answer already 

191
MiguelC.
A
Andrew504Beginner
asked in Authentication
Zoom Connection Scope

I’m trying to utilize Custom Actions and/or API Requests Beta to send messages using Zoom’s Team Chat API.When I run test either one, I receive this error message:Invalid access token, does not contain scopes:[chat_message:write, chat_message:write:admin].It seems that the default scope included for the Zoom connection provides limited scopes into the API, so we’re not able to fully leverage all the endpoints. Please consider increasing the scope.

281
Sebastian M
B
Brandon_AdamsNew
asked in Authentication
Error with OAuth Integration and Scheduler Email in Mold Ninja using Zapier

I am facing with the integration of our application, Mold Ninja, into Zapier.We have deployed Mold Ninja to Zapier and set it up using OAuth v2. We successfully created a Zap to schedule meetings between:The user who logs into our app (acting as the scheduler).Other email IDs added as invited users.However, I encountered a problem during testing. When I attempt to schedule a meeting via Mold Ninja other users(not the same mail id with which zap was created), the integration only works if the "from" email address matches the one used to create the Zap in Zapier (the original scheduler email). It does not work with any other email addresses, even though those users are logged into Mold Ninja and are expected to act as schedulers.I would appreciate your guidance on resolving this issue. Is there a way to configure the Zap or our app’s OAuth implementation so that meetings can be scheduled by any valid logged-in user, instead of restricting it to the original scheduler email?Thank you in a

101
JammerS
V
Vitor CoimbraNew
asked in Authentication
Oauth integration

I am trying to integrate Zapier with my OAuth Authorization Server. It seems that the login information is not persisting, because after I try to make a GET request to /oauth2/authorize, I am redirected to the login page. After a successful login, when Zapier tries to make a POST request to /oauth2/token, it receives the login HTML page again.When I try the authorization flow using Postman, it works, and I developed a client-server application to test the authorization server, and it also works. What can I do to fix this?I am using the Spring Authorization Server dependency.

280
V
P
plakinBeginner
asked in Authentication
Invalid redirect_uri in ServiceNow oauth

I’ve searched around the community as well as the internet and cannot find what redirect_uri Zapier wants from ServiceNow. I’m attempting to use the default https://<instance>.service-now.com/oauth_redirect.do, but Zapier says this URI is invalid. To be clear, this redirect works fine with multiple other integrations. I could use the username and password to bypass this, but the entire point of this is to test an integration for my company and if I can’t get OAuth working, that’s a deal-breaker and my PoC spike will be over before it started.Any help is appreciated. Thanks!

1047
P
V
Vitor CoimbraNew
asked in Authentication
Oauth integration

I am trying to integrate Zapier with my OAuth Authorization Server. It seems that the login information is not persisting, because after I try to make a GET request to /oauth2/authorize, I am redirected to the login page. After a successful login, when Zapier tries to make a POST request to /oauth2/token, it receives the login HTML page again.When I try the authorization flow using Postman, it works, and I developed a client-server application to test the authorization server, and it also works. What can I do to fix this?I am using the Spring Authorization Server dependency.

221
Troy Tessalone
Z
ZappitoNew
asked in Authentication
MS Dynamics - Authentication

Hi,Is it possible to do an authentication for a Zap between Meta and MS Dynamics other than via Oauth (aka using an email address)?My IT team is quite nervous about using an email-based auth! Thanks a lot, Zappito

311
Troy Tessalone
jake.reworx307
jake.reworx307Beginner
asked in Authentication
Google OAuth 2.0 Re-authentication for Each Password Change

Hey all, Is it possible to bipass the need to reauthenticate each time you reset your google account password? I see this help article but wasn’t sure about an App password between google and zapier. https://support.google.com/a/answer/6328616?hl=en&ref_topic=10021546&fl=1&sjid=8876137320170281140-NC#zippy=%2Chow-does-this-change-impact-applications-using-an-app-password-if--step-verification-is-enabled%2Cwhen-do-the-tokens-get-revoked-upon-password-expiry-or-password-change

334
jake.reworx307
C
cjjeonBeginner
asked in Authentication
Account Not Visible After Successful Authentication

I’ve updated app authentication from API key to OAuth 2.0. I’m currently testing in Private mode. OAuth flow works in a way that pop-up opens, login-in, grant access, and closes pop-up. However, the account in Trigger doesn’t show up even if I wait like a minute or two. It shows up after force refresh the page and account shows up. Is there a way that accounts show up smoothly without user have to refresh the page? I’ve noticed other apps, automatically change the account to new one that’s signed in. Any thoughts on why this might be happening?

511
C
A
AnkitIIhNew
asked in Authentication
Can I Update the API After Publishing a Custom Zapier App?

I have created 1 Custom Zapier APP for My Client, for now I am using Staging API and have plan to update the API of LIVE server once the Zapier APP (ex: XYZ) get Publish.So is this possible to update the Authentication and Trigger API after APP Publishing?

152
JammerS
Terms & Conditions