Applying OAuth on RingCentral API (part 3)
0 likes469 views
The document discusses RingCentral's OAuth 2.0 authorization code flow for web applications. It explains how to create an app in the RingCentral developer portal that supports the authorization code flow and configure it with a callback URL. It then demonstrates obtaining an access token using the authorization code flow in Postman, including authenticating in RingCentral and authorizing the app. Finally, it shows calling a RingCentral SMS API with the access token.
Applying OAuth on RingCentral API (part 3)
- 2. In the last slide here, we have seen using of RingCentral OAuth 2.0 APIs and implementation of OAuth 2.0 token in RingCentral APIs with grant_type=password . We will discuss the RingCentral OAuth 2.0 with grant_type=Authorization Code
- 3. For web-based applications, the OAuth 2.0 authorization code flow is supported in RingCentral. 3-Legged OAuth is a form of OAuth that allows RingCentral to manage the authentication of users for an app provider. RingCentral supports the Authorization Code flow which is in 3-Legged OAuth form.
- 4. Let's start with creating an app in developer portal that supports authorization code flow as follows:
- 5. Creating apps with name and description. Next step is to make the API public and we can see the app supports Authorization Code as below:
- 6. Then the next step is to give the functionality of the app. I have selected SMS as I want my app to send SMS as below: We also need to give a callback uri that will be redirected to get the code. It can be any local url. During calling the OAuth API we need to give exactly same url as redirect_uri .
- 7. Once the API created, we can see the details like client id, client secret etc in the dashboard:
- 8. We will be testing the API in client tools like postman. To start testing the API, we first need to configure OAuth call with grant_type Authorization code: In postman, first we need to select Authorization and then select OAuth 2.0 as follows:
- 9. Then we will configure the OAuth 2.0 in Authorization header as follow:
- 10. As we are configuring the parameters, we are providing exactly same callback uri that we created during our app creation along with details like client id, secret. Once we click Request Token, we will see redirected to some login pages as follows where we need to fill the details:
- 12. We need to click Sign In as above. Then finally the page will appear that ask us to Authorize our app:
- 13. Once done, we will get the access_token for our SMS API:
- 14. We will use this access_token for our SMS API as follows: We can see how easy is to use grant_type=Authorization Code for our app