Forum Discussion

Finagraph's avatar
Finagraph
Contributing Partner
6 years ago
Solved

OAuth2 refresh token revocation

Hi there,   I'm a developer working with the AccountRight Live api (cloud-hosted company file). I've followed the instructions for the OAuth2 flow and have had no issues getting access/refresh toke...
  • Jacob_S's avatar
    Jacob_S
    6 years ago

    Hi Finagraph,

     

    Thanks for reaching out. To revoke access, you will need to log into secure.myob.com with the my.MYOB account that was used to authenticate and revoke the access. This process cannot be completed via the API or via the AccountRight program itself. 

     

    Thanks,
    Jacob
    MYOB API Team

    Are you a developer? Check out http://developer.myob.com
    Looking for an Add-on? Check out http://myob.com/addons/
    MYOB API Support Centre - https://apisupport.myob.com

Finagraph's avatar
Finagraph
Contributing Partner
6 years ago

No. That does NOT revoke the access or refresh token. I can still invoke the API for the user's company file even if the user is not logged in. Also, even when I restart the OAuth2 flow and am prompted to login again I am STILL not given an opportunity to Cancel the authorization, but instead am redirected back immediately to the callback endpoint without user confirmation after logging in. Thanks for your effort though.

Is there someone from the MYOB AccountRight Live team who can answer this?

  • Jacob_S's avatar
    Jacob_S
    Former Staff
    6 years ago

    Hi Finagraph,

     

    Thanks for reaching out. To revoke access, you will need to log into secure.myob.com with the my.MYOB account that was used to authenticate and revoke the access. This process cannot be completed via the API or via the AccountRight program itself. 

     

    Thanks,
    Jacob
    MYOB API Team

    Are you a developer? Check out http://developer.myob.com
    Looking for an Add-on? Check out http://myob.com/addons/
    MYOB API Support Centre - https://apisupport.myob.com

    • Finagraph's avatar
      Finagraph
      Contributing Partner
      6 years ago

      That did work! For anyone else following along. If you manually navigate your browser to https://secure.myob.com you get the following webpage:

       

       

      It's kind of an obscure webpage considering I have absolutely no idea how to get to this page using any links from other pages on the your website. For example, when I login to https://my.myob.au I see:

       

      I tried exploring just about all of the menu options from this page before posing this question. It might be nice if there was a weblink or other way to navigate to view connected applications from this webpage/site. Anyway, THANK YOU!

Related content