Best practices for using personal access token when developing application

Hi all,

When developing an app for data integration, should I use a personal access token of a specific user during testing?

Another question I have is, when deploying an application for production, is it best practice to create another Asana user just for the personal access token to be used in the application itself?

Thank you in advanced!

Hi @Teck_Ng,

When you refer to “an app” and “production”, is this an app that you’re creating for one specific organization, or something for the public? If it’s for a specific organization (workspace), you can use a Personal Access Token (PAT). If it’s destined for the public, you’ll need to use OAuth for authentication.

Even for a public OAuth app, if you want to defer the OAuth part until later in development, then sure, you could use a PAT for initial development since it’ll let you get started a lot quicker/easier.

Hi Phil,

It’s an app that I’m creating for an organization, definitely not for the public.