Search code examples
xero-apixero

Need all scope access for Xero Standard Web APP


We created a XERO Web App (Standard web application) and while executing the authorization token API we are getting on below scopes:

"scope": "app.connections marketplace.billing"

We need all to grant scopes access so we can execute as much API from our system.

I know custom connection has all those options to grant scope access but my application would be available in Singapore and custom application is not available for Singapore.

Please help me, with how I can get all-scope access for the Web Standard App so I can execute as much as APIs.


Solution

  • When using OAuth 2.0 you will need to use the web based authentication system for the initial connection. However once this has been established and authenticated by a user, if you've included the offline_access scope in your Authentication, your app will benefit from Access and Refresh Tokens. Refresh Tokens can be used to refresh Access Tokens, without user intervention.

    Refresh Tokens are single use, and will last for 60 days or until used. On a Refresh Call you will receive both a new Access Token and Refresh Token, allowing you to use the new Refresh Token on your next Refresh Call. In case a response is lost, Refresh Tokens also have a 30 minute grace period where the same token can be used as many times as you require in the first 30 minutes after their first use. The only time the user would need to interact would be if your app was to lose track of the tokens. In this scenario the web based authentication system would be re-used. You can look at the link in my previous reply for more information.

    If you are still stuck you can contact Xero Support here