CODEWITHSUNDEEP
xero-api
Shardul Virkar
Shardul Virkar

Reputation: 21

Is it possible to access the Xero API without user interaction

I am trying to come up with something which will be scheduled to run daily and would import newly created invoices from a database into Xero. To have this run daily, I want to avoid logging in manually i.e entering username and password for logging into Xero, is this possible?

Upvotes: 2

Views: 1679

Answers (2)

denniseagles
denniseagles

Reputation: 57

A daily update can be performed without user interaction, but does need the user to authorise your application the first time.

After that, your application can use the 'refresh token' to automatically generate a new access token each day.

2 important things to remember:

  1. you need to specify 'offline_access' in the SCOPE to give you the refresh tokens in the response.

  2. save the refresh token to a db or file, and then use this each day to obtain new set of tokens (without user interaction). When new tokens are obtained, use access token to perform your updates, and save refresh token for tomorrow.

Upvotes: 1

SerKnight
SerKnight

Reputation: 2642

So if you are reading and writing data to a Xero org on a customer's behalf, they will need to authenticate that connection a single time. From there you can use OAuth 2.0 access_tokens & refresh_tokens to programmatically run scripts that connect to their org via Xero API. We are looking at ways to make this easier while maintaining security standards for use cases like this. But for now you will need to prompt a user login and save the credentials in your database/store.

Upvotes: 3

Related Questions