Tag
#OAuth
Zoho
Zoho Vault Secret Rotation: From Static Tokens to a Rhythm
Most Zoho integrations use OAuth tokens or API keys that never rotate. One leak or offboarding undoes you. Rotation playbook with rollover code.
Freshworks
Freshworks Marketplace SDK: OAuth That Survives Review
OAuth in Freshworks Marketplace apps fails review for predictable reasons. Token storage, refresh flows, and iparams done right the first time.
HubSpot
HubSpot OAuth Scopes: The Minimum Privilege Pattern
Most HubSpot OAuth apps request every scope on day one. Right-sized scopes pass security review faster and survive scope additions in HubSpot updates.
Zoho
OAuth Token Management for Zoho APIs: The Patterns That Survive
Self-client tokens, refresh rotations, multi-DC awareness — the OAuth setup that doesn't wake you up at 3am with a 401 storm.