Page 1 of 1

OAuth2 App Registration?

Posted: September 8th, 2021, 10:15 pm
by maidenelk
Have any of y'all have gotten a Logbook OAuth2 application registered? If you're willing to share your experience, I'd love to hear what's involved. Thanks!

Re: OAuth2 App Registration?

Posted: September 8th, 2021, 10:25 pm
by angrytongan
All the docs are here:
https://log.concept2.com/developers/doc ... der-oauth2

Email ranking@concept2.com to get a client id and secret.

Re: OAuth2 App Registration?

Posted: September 9th, 2021, 9:22 am
by maidenelk
Thanks, I did see those docs & reached out - was more a process question of what to expect once I hear back from them. e.g. What level of due diligence does Concept2 do?

Re: OAuth2 App Registration?

Posted: September 9th, 2021, 5:13 pm
by Citroen
angrytongan wrote:
September 8th, 2021, 10:25 pm
Email ranking@concept2.com to get a client id and secret.
That breaks rule #1 in website security as whoever sends the reply knows your secret. They should have a self-service web page to collect your credentials, verify them (with a system generated email or SMS) then generate a secure client id and secret.