Development & APIs

NOTE I originally wrote this in a rush hoping that the information provided here would be sufficient to start a conversation. It turned out it was not. Please refer to this comment below for a better explanation (and A DEMO) of the issue: Standard way to prevent formula injections when using AirTable `select` and `filterByFormula` - #15 by Luciano_Mammino Hello, When using your APIs to get data dynamically from a table, is there any secure way to handle formulas that need to contain user input data? How can we avoid a user trying to alter the formula by crafting an injection (like a SQL injection but for your formula language)? I couldn’t find anything in the docs, nor any utility in your (JavaScript) SDK… So far I had to come up with my own escape function… In case you need an example, this is my formula: {code} = 'someCodePassedByUser' If the user passes the following code ' >= 0 & ' I end up with {code} = '' >= 0 & '' which is always TRUE! Considering that injections

Hi There Hope I can get some good info on my issue.I have a client that manages their operations on airtable (We helped set it up).They are now quoting and invoicing from airtable using third party integrations. We are also collecting deposits via a 'mini extension' extension with a stripe integration. The Quote sent to the client has a stripe payment link which is a prefilled payment window. It has the clients name and the amount to be payed. When the payment is made the second part of the automation kicks in. A field in the airtable record gets marked paid. This allows us to easily match bank payments to clients and move the project into the scheduling process. It saves a lot of time.Our client company now wants to set up a payment automation using API/webhooks for another well known payment's gateway provider. The provider has the tech in place but I wanted to know if their are any airtable specialists that could bring specific know how to help create a similar automation?Regar

As in archived copy of this thread :Re: Automations error (but not on Block): Response status was 302 'Moved Temporarily' but redirect mode was set to 'error' Can someone in Airtable update me about the issue of allowing redirects in API/fetch requests in code in automations ? This is needed urgently , so that we can connect airtable to google sheets. (as i create an API in google apps script) so the behaviour of google apps script is, it redirects the requests to another url when you pass a parameter into itself.example :  if you send a get request to in automation: https://script.google.com/macros/s/*******-g/execgoogle redirects the paramteres into :https://script.googleusercontent.com/macros/echo?user_content_key=*******thus, when i set an automation in when a data updates in airtables scripting section, i get this error: I dont want to use any 3rd party services to solve this problem. Thanks 

Hello everyone! We build some Scripts with the Airtable Scripting extension and we’d like to trigger them externally via Make.com / API.Is there any way to achieve this?  Airtable Automations are not an option because we are at the 50 Automation limits already (why would you make this limit so low??) Any help would be greatly appreciated!   

HelloApologies if this has been asked before but I can’t find a solution that works. I have a base where all times should be for UK/London (it is scheduling of spaces in a building), wherever in the world I am I want any date or time entered to be UK time. Thankfully Airtable have now fixed this in the normal UI, but I am struggling to find a way of achieving this for dates entered via a script in a script block (not an automation) - I have an input.text field and can parse the date and time, but currently that time will always be based on the time zone of my browser, not the base. Does anyone know of a good bit of code to sort this out - I wonder if I should use offset. but I worry this would not work for DST?

Hello, Airtable friends! I have a table that has several file attachment columns and many rows. One of my workflows is go through the table and download all attachments for certain rows. It’s been a bit time-consuming to go download the files one by one, so I’m wondering if there’s a way to automate it.Does anyone know of an extension that lets you download all files attached to a given record? (My team and I are flexible on whether that’s a ZIP file, multiple downloads, etc.)  If not, does it seem feasible to write a custom block for that? Would greatly appreciate any perspectives on this!

Hello! I’m setting up a community coworking space and would like to have a simple tap in/tap out system so we can log who’s visiting the space, how long folks are staying, and how the space is being used. My idea is to use NFC tags with unique webhook payload information stuck on cards that when tapped on a reader near the entrance, a webhook is fired into Airtable with the unique information about that tag. Within airtable we’d then set it to log the taps and workout if someone is ‘in’ or ‘out’ (with the ability to override of course). My questions:Does this seem like the best approach or would anyone suggest a different way to go about it? I’ve searched the forums and aside from some discussion around RFID I haven’t seen anyone talk about setting things up this way. If so, what’s the best way to configure the webhook to fire when the NFC tag is tapped? We’ll be using an office PC with an external reader, and I’m not sure what the best route is to go from ‘tap’ to ‘webhook fired’.Any

I’m wondering if its possible to create a file, encode it and then add it as an attachment. Since the attachment field needs a url the only way for me to do this would be to make an api call from within the script to store the file in an AWS s3 bucket, return that url and then attach. This seems like a huge work around. For now I can just use the raw text field in the text field, if the large text file fits, but for formated xlx files for example this won’t work. Seems like a long workaround just to output a file, is there another way to do this?

The eco system ive been introduced to utilises airtable as a referencing and task hub for projects. The base data is integrated with Softr where records are created using a tiered importance methodology.Can someone please advise me on how to do the below without adding coding or other platforms for integrations to enable?When a record is created in Softr a. all fields must be filled. b. records appear in Airtable with a round robin assigned workflor for relevent teams c. each time a record is completed by the necessary team, the workflow pushes the record to the following team  Possibly integrate slack as an additional layer to communicate internally as well as link to input and update the above Create a dashboard on progress for each user and user group to track progress at micro and macro level of each projectAll advice is greatly welcome! I have a very short window of time for this.I have checked the existing automations in both Airtable and Softr without success as yet

I try to create CSV backup exports of all my bases as often as I remember. However, going through everything manually is a lot of work and leads to “not doing it” more often than not. I wish there was a way to automate this important backup process. Can this be done through an outside service maybe? Thanks in advance!

I’m getting the following error when I get or create the data from airtable in my next.js project.AirtableError {  error: 'NOT_AUTHORIZED',  message: 'You are not authorized to perform this operation',  statusCode: 403} I’m using airtable npm module for integration.I’ve added all required scopes already but not sure why I am getting that error.Can anyone help me for that? Thanks 

The Airtable OAuth specification says that authorization request responses will return the same code_challenge that was included in the original request.These docs also say that this value must be verified: The code_challenge parameter you passed in the authorization request. You must verify the code_challenge variable is associated with a code_verifier you generated.From what I understand of the PKCE flow, Airtable's backend (not the client integration) is responsible for validating the code_verifier included in the token creation request from the client. Why does the documentation call for the integration to check that authorization response returns the same code_challenge that included in the request?Also, the official Airtable example implementation does not perform this check: https://github.com/Airtable/oauth-example/blob/a714e68c2610e3249063b3d92faf064bf4c15188/index.js#L94-L137.Any ideas? TYIA!

Hi everyone ! I am trying to authenticate a request using Basic Auth. I then need to base64-encode my logins. (could encode them manually and then insert but would prefer to keep that logic in the code) I didn’t found how to achieve this “natively” without rewriting the entire encoding function. btoa() does not seems to work :confused: Can anyone help me on this ? Thanks

I've been using Pabbly with Airtable for a long time, suddenly today I'm having to update the connection data. No problem, I have done that before. Today, I get this message that pops up while connecting in the Pabbly dashboard. I assume the message is coming from Airtable - “invalid_client”My airtable account just renewed and there was as issue, but that is settled and my account is paid. I created a support ticket, but I hoped a user might understand what is happening. 

I have a strange one. There is a single line text field in my table definition (‘active’), but it’s not showing up in the API doc for that table, and the API throws an error when including that field in the get requested. I’ve deleted and re-added the field to no avail.  

Any ideas on how to connect Airtable to Replit? TIA

I have an object that I output from another script using the Output.Set(key: value) method. The value that I’m passing is an array of json objects. It seems that there are a lot of objects to transform the object but I would prefer to just pass the object to my script to iterate over the object and use dot notation to get the values that I would like.  I don’t see anything that just lets me keep the object as is and pass it through input.config only transforms or operations like length? Is there no way to pass an array or object??    

I was looking at the API reference... why is there no method to retrieve an element by a field that is defined as PK? That … is basic DB functionality. Currently the only way to use GET (HTTP) to retrieve a record, is with a value no one knows and that can only be calculated via the RECORD_ID() function (... after you already have the record!)To me this .. is so weird haha :-)Is it me? What I would expect is that Airtable allows via the API to query the table with AT LEAST the PK values. 

Hey all I am hoping you all can help point me in the right direction. I am looking at just using HTTP calls for updating parts of airtable for us. However, I am confused by how to update fields like single select and multi select. Example: I have a table that has a field of singleselect, and all I want to do is update the single select to have an additional choice. what url would I need to use to update the field? An example would help

I don’t see anything anywhere that says it can, however, I wonder if someone has figured it out.

Does anyone know of a way to create an automation where when a new recording is created, it uses the GPT chat API as the first column for text input and the second column to get the output response from the GPT chat? For example, column 1 (input) = Hi, how are you? and column 2 (response) = Hi, I'm doing great!The native GPT chat in Airtable is quite expensive.

Hello everybody, Here is my situation : I have a table of CONTACT(1900 records) and a table of COMPANY (800 records), I have all ready set a link in between them. Now I would like to insert a junction table : JOB.If i use the junction script it will create all the link possible (1520000 records). Is it possible to add a condition in it so the script will create the record in the JOB table only when a link already existe between CONTACT and COMPANY?Thank very muchPlatane

hi im really struggling with something that i think should be easy but is very challenging to get right. I’ve been tinkering with scripts, automations and apps now to basically just manage one field in one of my tables. I am creating a scope of work configurator that has a list of components in one table and in another table i want to create records for each distinct project that I create. What i would like to happen is to have a checkbox in the components table and then run a script to fire at my command, to then have a chosen record in the projects table to link to all checked records and then pull in the data it has to run a simple calculation/formula on to get a result that totals an estimate for the amount of hours it would take to complete all the checked items. I need each project to be distinct so i can continue to update its unique record based on what’s checked in my script/app without having to create new tables or new bases for each distinct project. I can make the calculat

Hello,I don’t have a lot of scripting experience but feel like this one should be simple. However, I can not find my error; it’s probably something super simple and I’m just not seeing it.Here are the two simple tables I have: So in the Day table, when the Week linked field is missing, I want a script to automatically update the field. Here is my script: The error is: I know the weekID is correct because I can paste the result in the Week field and it works but unfortunately the script can not do it. Thanks in advance, I hope this is easy one!

Hi Everyone - I am very new to API development and coding all together. I need some help with a script I am trying to implement. I keep getting this error thrown Error: Request parameters failed validation. and I have no idea why. Any help is greatly appreciated. // Get the table and the newly created recordlet table = base.getTable('Table Name');  let recordId = input.config().recordId; // The ID of the newly created record let record = await table.selectRecordAsync('recordId'); // List of users to assign randomlyconst users = [' User1 ', ' User2 ', ' User3 '];// Pick a random userlet randomUser = users[Math.floor(Math.random() * users.length)]; // Update the Assignee field with the selected userawait table.updateRecordAsync( 'recordId', { 'Assignee': randomUser});