[jemiris]

Hi,

Can we get the access_token without passing username and password https://wiki.processmaker.com/3.1/OAuth ... o_use_REST ?

[amosbatto]

If you want to use the access_token for the existing login session:
If you are inside a Dynaform, see:
https://wiki.processmaker.com/3.1/JavaS ... ing_jQuery

If you are in a trigger or a plugin, then see:
https://www.pmusers.com/index.php/Plugin_development

[jemiris]

As of my understanding for the first time I need to use username and password to generate the access token for the next time, I can use the refresh token to get the access token again. Is that correct?

And I have read in the documentation that refresh token doesn't expire until it's used to get an access token. The access token expires in 86400 (that means 24hours). The login session time expiry in 24mintues (it can be extended by changing php.ini file -> https://wiki.processmaker.com/index.php ... ssion_Time)

[amosbatto]

As of my understanding for the first time I need to use username and password to generate the access token for the next time, I can use the refresh token to get the access token again. Is that correct?

Correct.
If you are executing your code inside a Dynaform or inside a trigger or plugin, then you can use the existing login session which is created when the user logs into ProcessMaker, as shown in the examples that I gave you in the previous post. If that login session has expired, then you can either redirect to the login page with this PHP code:

Code: Select all

if (!isset($_SESSION['USER_LOGGED'])) {
	header("Location: ../login/login");
}

or you can use the refresh token. I never use refresh tokens, because it easier to make the user login again.

And I have read in the documentation that refresh token doesn't expire until it's used to get an access token. The access token expires in 86400 (that means 24hours). The login session time expiry in 24mintues (it can be extended by changing php.ini file -> https://wiki.processmaker.com/index.php ... ssion_Time)

The access_token expires after 24 minutes by default and the refresh_token expires after 24 hours (or when it is used to get a new access_token or when the user logs in again). I have never tested the expiration of a refresh_token, so I might be incorrect, so you will have to test it.

[jemiris]

Thank you i will be testing that

[vktRus]

How to do it in another version PM 2.8?

[jemiris]

I have done using session id. I have used version 3.0 version