Is it ok to use PAT instead of of OAuth

Hi,
I’m trying to build a plugin that integrates with Asana. I’ve been trying to learn about the OAuth and PAT systems of authentication and from what I see I can’t build a plugin without exposing the client secret to whoever will use the plugin. is it ok to use the PAT and require whoever will be using the plugin the create their own token and use that?

Welcome, @Eitan1,

While it depends on the breadth of your audience and the nature of your plugin, generally speaking you’d want to use OAuth; PATs wouldn’t really be appropriate for what you’re describing.

For more details, see these:

and

Thanks,

Larry

1 Like

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.