Custom APIs

OAuth 2.0 (authorization code)

Connect to APIs where a person signs in and approves access. Runtara runs the OAuth 2.0 flow, then stores and refreshes the token.

01 / Workflows

What you can automate.

You set the authorization and token URLs, the client ID and secret, the scopes, and the API base URL, all over HTTPS. Signing in captures the token, and Runtara refreshes it as needed, including with providers that rotate refresh tokens. PKCE is on by default.

  1. Connect to a SaaS API that only offers OAuth sign-in.
  2. Act on behalf of a specific user account in another system.
  3. Replace a shared password with a revocable, scoped token.

02 / Capabilities

What it covers.

The full reference, with connection types, is in the OAuth 2.0 (authorization code) docs.

Capabilities

  • Interactive sign-in with PKCE
  • Tokens refreshed automatically, including rotating refresh tokens
  • Client secret sent in the form body or a Basic header
  • Optional token revocation when the connection is deleted
  • Requests pinned to one HTTPS base URL

Data handled

  • Request and response bodies
  • Access and refresh tokens

03 / Availability

In every edition.

OAuth 2.0 (authorization code) is a standard integration, included in Cloud, Enterprise and the open-source engine. Compare plans

  • Open-source engineAGPL-3.0, run and operate it yourself.Included
  • CloudWe host and manage your instance.Included
  • EnterpriseYour cloud or on-premises, supported by our team.Included

04 / Questions

Common questions.

Is OAuth 2.0 (authorization code) included in my plan?

Yes. OAuth 2.0 (authorization code) is a standard integration, included in Cloud, Enterprise and the open-source engine.

How is it set up?

A connection stores the OAuth 2.0 (authorization code) credentials once for your instance. Workflow steps that use it declare that connection, and the runtime denies anything else.

Can a person approve before anything is written?

Yes. A workflow holds an exception for approval and continues only after the person decides. The run keeps the source, the decision, who made it, and the response together.

More in Custom APIs

Connect the system you need.

Start with a paid pilot of one real process. Our team builds and runs it, live in two weeks once access is in place.

Discuss your process

All product names, logos and brands are the property of their respective owners and are used here in good faith, only to identify the systems Runtara connects to. Their use does not imply any affiliation with, or endorsement or sponsorship by, those owners.