Back to Changelog
NewAPI
Roster OAuth 2.0 Developer Preview released
Roster now supports OAuth 2.0 Authorization Code flow.
oauthapisecurity
Roster OAuth 2.0 Developer Preview
- Authorization Code Grant (RFC 6749)
- Hosted consent screen at
/OAuthConsent - Access token TTL: 1 hour
- Refresh token TTL: 90 days with rotation
- Scope enforcement per action
- Owner context (label_id / account_id) enforcement
- Full OAuth audit log