NodeJS - Configure OAuth Authorization during the first app installation

Platform discussions
, , ,
1

Good morning, I am building a monday.com integration app in nodeJS.

I am struggling with the installation process. I would like to know how to request the user to authorize my app to access to the board during the template installation and how to redirect to the board?

Please can you help?

2

Hi @rmanga86, any progress with that?
I’m struggling with it as well…

3

Hello @rmanga86,
o have users authorize your app and redirect to a board in monday.com, you can set up an OAuth2 process during app installation. Here are the steps: wakeidportal

  1. Configure OAuth Scopes & Redirect URL: First, head to the Developer Center in monday.com, create an app, and configure your app’s scopes and redirect URLs under the OAuth section. Set the appropriate scopes required for your app.
  2. Authorization Request: When a user installs your app, redirect them to monday.com’s OAuth URL:

plaintext

https://auth.monday.com/oauth2/authorize?client_id=YOUR_CLIENT_ID&redirect_uri=YOUR_REDIRECT_URI
```[_{{{CITATION{{{_2{OAuth and Permissions - Apps Framework](https://developer.monday.com/apps/docs/oauth)
Users will be prompted to authorize your app, and once they do, they'll be redirected to your defined redirect URL with an authorization code[_{{{CITATION{{{_2{OAuth and Permissions - Apps Framework](https://developer.monday.com/apps/docs/oauth).
  1. Exchange Authorization Code for Access Token: Your app’s backend should handle this redirect and exchange the authorization code for an access token by making a POST request to the token endpoint.:

plaintext

https://auth.monday.com/oauth2/token

Include necessary parameters like client_id, client_secret, and authorization_code.
4. Redirect to the Board: After obtaining the access token, redirect the user to the specific board URL. You can construct this URL based on your app’s logic to guide them directly to their board using the access token to make necessary API calls for board information.

Best Regards,
David Scott