question

Loyal Loops avatar image
Loyal Loops asked Miguel Deactivated commented

Client app changing tokens?

We have a single merchant in production whose app keeps changing API tokens. The api tokens associated with ~100 other installations of the same app in production have static tokens

1) Is this behavior normal? That is, should we build against he possibility of changing tokens?

2) What event(s) causes the merchant app's installation to change tokens?

Thanks.

2 comments
10 |2000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Miguel avatar image Miguel commented ·

Are you using OAuth to programmatically generate access tokens?

0 Likes 0 ·
Loyal Loops avatar image Loyal Loops commented ·

Hi Miguel. Our application is strictly an android app, and we're retrieving the tokens from the clover SDK

0 Likes 0 ·

1 Answer

sam avatar image
sam Deactivated answered sam Deactivated commented

  1. Yes, this is normal behavior. The only way for static tokens would be to store the tokens in your database after the first OAuth process or to hardcode the merchant generated token, which we discourage.

  2. Token will change each time they login through the OAuth process. The old tokens will still be valid and persists one year or until uninstallation of the app.

2 comments
10 |2000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Loyal Loops avatar image Loyal Loops commented ·

Thanks. I should add, we're retrieving the tokens from inside our android app using

the CloverAuth.authenticate method in com.clover.sdk.util.CloverAuth based on the gettokenexample from https://github.com/clover/android-exa...

I'm not sure if that's using OAuth under the hood?

0 Likes 0 ·
sam avatar image sam commented ·

If your app is strictly android app, the expected behavior would be to have a static token, retrieved from the associated device. The only reason for it to change token is if the app is uninstalled and reinstalled.

0 Likes 0 ·

Welcome to the
Clover Developer Community