I am able to use User-Agent Flow. I hooked up a login workflow. It gets me to the authentication page, I am able to enter username and password (for Nice inContact). Then I get the Grant permissions page. It then returns to my app page and a window pops up that says “API Connector error: the Oauth2 API New Test is not configured properly - incorrect header check”.
I have been over and over this thing. I used Postman to validate and it works.
I am pretty sure I am getting a valid response to the API. See screen shot. The authentication seems to work fine and then it returns to the bubble app screen. Then, maybe it is trying to run the actual API GET (https://api-C15.incontact.com/inContactAPI/services/v13.0/realtime/skills/activity). Is there a header issue with that?
You should not have any Shared header with authorization because you handle authorization part with Bubble. Also, the Bearer is bearer in their doc. You also need to have access to an endpoint that will return the authenticated user data with an email field and ID field. I didn’t found one but you may ask niceincontact to know if there a way to get it and put this endpoint in User profile endpoint.
After that, you need to create a page with a button to login on social network and in debug_mode to be able to initialize call in API Connector.
I tried to use the password oauth2, but I get the same “incorrect Header Check”. Do I put the fields that are supposed to go in a json body as parameters? I tried that, but still got error.
When after the grant permissions page is clicked, the workflow uses the Generic Bubble.io return URL to get back to the app page. In the url in the browser is perfectly formed return data from the inContact API. There is a token along with all the other fields. But, the app page gives the “incorrect header check”. I feel like the API is returning the access token, but my workflow doesn’t know what to do with it. I have something configured incorrectly, I am sure. I just can’t find it.
There’s a few example in the forum here. Most of the time is that you need to create a link with the authorize part, a Workflow on page load that detect if url parameter contains code and act as the callback url and an action flow that complete the Token part. But may also need to handle refresh token using scheduled workflow or evaluation if the access token is expired before doing a call.