Skip to content

Best practices for OAuth

Learn some best practices for using OAuth in your integration to ensure your users have a seamless experience.

Availability for unauthenticated users

Make sure you don’t add conditions to the integration logic that prevent unauthenticated users from finding and being able to configure your integration.

One way to ensure this is to avoid calling your third-party application with the OAuth token in the onLoad method. Instead, try to store any data that’s needed to render the initial configuration UI in the integration configuration.

Avoid cleaning up configuration when users disconnect

When a user disconnects an integration, it’s important to avoid cleaning up the integration’s configuration. It’s better to allow users to switch between different accounts and keep the configuration in place.