Failing OAuth tokens since August

We recently started having issues with our existing OAuth connections expiring. This happened for customers connected via our partner credentials and the partner credentials of our customers.

There isn’t a clear time or pattern to the invalid tokens, but at some (not the same) point in the last month nearly all accounts invalidated. Some of them have only connected the previous month, so they are even outside the refresh token TTL of 90 days.

Hi there! I’m sorry to hear about this. We had an issue that might have affected your customers. Can you please raise a support ticket with more details and we will investigate this on priority.

Hi Khizar! I did reach out to our contact at Deel but got referred to this platform to raise the issue. Where can I create a support ticket? The urgency is fairly high, as quite a few customers are affected.

Hi @Kombo, happy to point you in the right direction!
You can submit a support ticket directly from the Developer Center.
Simply:

  1. Navigate to Apps & Integrations > Developer Center.
  2. Click on “Help & Feedback” to access support options.
  3. Submit a ticket by clicking “Contact Support” or use live chat by clicking “Help Live Chat”.

Thanks so much, and let us know if you have any further questions on this!

Hi @Cassy_Deel, we unfortunately do not have the “Help & Feedback” button in our instance. Is there some other way we could get support on this issue?

Today we had another customer report difficulty when connecting their Deel instance, in the OAuth flow of Deel they received the following response, unfortunately I don’t have more details on this at this time.

we are also having a similar issue. our refresh_token seems to be invalid, and we cannot refresh tokens once expired. perhaps it has the same expiration as the access token?

Hello @Kombo , @erin_harvest yes we had an issue couple of weeks ago with refresh token TTL, could you please generate new tokens with consent? If you will create new oauth2 token it will have access_token - 30 days and refresh_token - 90 days

1 Like

Got it, thanks for the update! I asked the customers to reconnect their accounts.

Could you also get back to me on the screenshot I shared? The customer tried to connect again today, but the connection attempt failed.

Morning @Kombo , is there any details under Technical details ? Sometimes it can happen when user provides incorrect scopes for the token, could you please share scopes?

Hey @Dmytro_Deel.

The technical details only list:

  • Unauthorized

The scopes we are requesting are:
organizations:read
people:read
Users:read

Hello @Kombo could you please send me application name?

Hi @Dmytro_Deel, the application name is “Kombo”.

Hey @Dmytro_Deel, any updates here? The Deel user is getting frustrated that they are unable to use the oauth flow

Hello @Kombo sorry for late responses, I’ve checked logs for your Application and I see that some of your customers trying to create consent of your application with incorrect roles. Only ORGANIZATION_ADMIN, IT_DEVELOPER_ADMIN, INTEGRATIONS_ADMIN_PEOPLE are available.