On selected platforms including Exact Online and Twinfield, Invantive Cloud offers the possibility to run OAuth authorisation outside Invantive Cloud. The resulting credentials can then (later) be used to register an Invantive Cloud database for the respective platform.
On Exact Online, this was only possible up to release 25.0.147 using the OAuth authorisation code. However, an OAuth authorisation code usually loses its validity after a limited time, depending on the platform, varying between a few seconds and a few minutes.
The short maximum duration for creating the Invantive Cloud database is not an issue if the user themselves – possibly together with the end user – performs the pre-authentication using the corresponding Invantive Cloud module.
However, a desire of OEM partners is to be able to conduct authentication entirely outside Invantive Cloud, for example by using their own web application with matching branding, and partly decoupled in time, enabling the database to be created hours or days later.
From release 25.0.147, it is possible for Exact Online developers to generate an access token and/or refresh token outside Invantive Cloud, to record them and still use them days later to create an Invantive Cloud database on Exact Online.
In this way, OEM partners can better assist their clients by combining Invantive SQL technology with their own applications.
How do I register an Exact Online database with access/refresh token?
Follow these steps to create a new Exact Online database based on previously acquired access/refresh token:
- Obtain an Exact Online access token and related refresh token via your own web application, Invantive Cloud pre-authentication or another method.
- Go to add a database in Invantive Cloud via
https://cloud.invantive.com/app/setup/databases/new/exactonline. - Choose the desired country:
- Select “Preauthenticated Credentials”.
- Enter the used client ID, client secret and redirect URL:
- Choose for authorisation code (as before) or access token / refresh token:
- Enter the Exact Online access token and refresh token.
- Click “Continue”.
- The database is created and immediately usable:
Note 1! An Exact Online access token is valid for a maximum of 10 minutes, and a refresh token for a maximum of 30 days. The entire OAuth authentication flow needs to be repeated if the refresh token has not been used within 30 days to create the Invantive Cloud database.
Note 2! A refresh token may only be exchanged once for a new access and refresh token. Exact implemented this change in 2022, and it is different from many other OAuth-based platforms. If a refresh token has already been used once to retrieve a new access token and refresh token, it is no longer usable.