Auth an external application to access api

Hi

Just wondering if this though process is the best way to access the API while allowing it to know which user is accessing it.

Initially I was thinking with the API key but as this is tied to a user it’s not practical to have each user manually get their key.

As such I’m looking at going down the oauth2 approach to get an access token and pass this though with the request. I assume I can then save the first code to get subsequent access tokens after the expiry/future sessions?

Not sure if there is any other way to approach this that would be better suited?

Hey @Reddevildragg,

Bill here from monday.com :wave:

Yes, you are right, using the personal token of users is not great practice in terms of security so we recommend using the Oauth process documented here:

I hope this helps.

Cheers,
Bill