Integrations

OAuth connections

Connect services that use OAuth 2.0: authorization code with PKCE, encrypted tokens and automatic refresh.

For services that require OAuth 2.0, an integration or connector with auth_type: oauth2 stores the client id and secret, authorize and token URLs and scopes (connectors prefill these). An administrator clicks Connect, consents at the provider, and UserTasks stores the access and refresh tokens encrypted.

• Tokens are refreshed automatically before they expire, and a background job (oauth-refresh, every 10 minutes) keeps idle connections fresh.
• Token write-back is race-free: an interactive call and the background job can refresh at the same time without losing the refresh token.
• Disconnecting revokes and deletes the stored tokens.