Help

Storing User-specific Tokens for Blocks

Topic Labels: Custom Extensions
Solved
Jump to Solution
3776 9
cancel
Showing results for 
Search instead for 
Did you mean: 
Alec_Jones
5 - Automation Enthusiast
5 - Automation Enthusiast

Hey everybody! I’m starting development on a block for the hackathon – super exciting!
I’m going to need to store a unique token for each user, because I’m going to need to do some OAuth in my block.

I’m wondering the best approach to do this? I could store it in GlobalConfig, each token is accessible through the ID of the user, but I’m not sure about that. Any advice would be much appreciated!

I noticed this is done the demo for blocks, by storing the Twilio ID and Secret, so I’m curious how it’s done there

1 Solution

Accepted Solutions
Kasra
9 - Sun
9 - Sun

Hi Alec, welcome!

Here’s the code from the demo video. In that case, I was hard-coding the API keys into my code.

In our other blocks, for example the Map block and the Send SMS, we prompt the user for their API key and store it in globalConfig.

In these cases, we usually don’t store a token per user ID. The tokens are shared across all of the users who can access that block installation, which is nice because it means one person can set up the block in the base and then all of their base collaborators can use it.

See Solution in Thread

9 Replies 9
Ronen_Babayoff
7 - App Architect
7 - App Architect

Hey Alec, which hackathon?

Kasra
9 - Sun
9 - Sun

Hi Alec, welcome!

Here’s the code from the demo video. In that case, I was hard-coding the API keys into my code.

In our other blocks, for example the Map block and the Send SMS, we prompt the user for their API key and store it in globalConfig.

In these cases, we usually don’t store a token per user ID. The tokens are shared across all of the users who can access that block installation, which is nice because it means one person can set up the block in the base and then all of their base collaborators can use it.

Alec_Jones
5 - Automation Enthusiast
5 - Automation Enthusiast

Oh, I see! So it’s global across the collaborators in the base, not everyone who has installed your block?

Yep that’s right! globalConfig is scoped to the block installation. A block can be installed multiple times in the same base or across different bases, and each installation has its own distinct globalConfig storage.

Ashwin_P
6 - Interface Innovator
6 - Interface Innovator

Is it possible to do OAUTH with Airtable blocks ? What value are you providing for the return url after user grants access ?

Shaun_Van_Weeld
6 - Interface Innovator
6 - Interface Innovator

+1 on the OAuth ask. :slightly_smiling_face: Ideally, my block would call a service I’m hosting and, from that service, one could update the original AirTable with the REST API. A bi-directional sync of sorts.

I can ask the user for their AirTable API token inside my block and pass a version of that along to my service, but that seems like it’d be frowned upon and less ideal than getting an OAuth token. Maybe asking for it in the block is ok for a MVP?

Any other ideas or feedback is welcome!

I tried OAUTH with a pop up flow. But, it doesn’t work either because browsers don’t allow an iframe(custom blocks are in ifraMes) to communicate with another iframe(OAUTh popup).

Ben_Orozco
7 - App Architect
7 - App Architect

+1 for Oauth2 Authorization Flow support, or t least “throwaway tokens” for specific Blocks, that would increase adoption by security-savvy users