Question on webhooks and OAuth tokens

Hello everyone,

I have a question regarding webhooks and OAuth tokens. The developer documentation states that webhooks are tied to tokens. I am currently using OAuth to create webhooks, and I wanted to clarify—if I refresh the OAuth tokens, will it result in the deletion of the existing webhook?

Any insights or clarification would be greatly appreciated. Thank you!

Hi @Ankur_Prabhu,

FYI I moved your post to a new topic since it’s not directly related to the previous one.

No, definitely not. A webhook will still be valid after you refresh the token.

1 Like

Dear @Phil_Seeman,
I have observed an issue regarding the webhook creation endpoint. It appears that we are able to make only approximately 70–75 requests per minute, whereas the documentation states that the limit is 150 requests per minute. Moreover, after reaching 70–75 calls, the endpoint returns a 400 error instead of the expected 429 status code, which leads me to assume that this error is indicative of a rate limit being exceeded. Could you please clarify why the limit appears to be set to 75 requests per minute rather than 150?

Thank you for your assistance.

Hi @Ankur_Prabhu,

I don’t work for Asana, I’m a third-party developer like you, and I don’t have an answer on that one, sorry.

@John_Vu @Andrew-asana maybe you’re able to answer?

@Phil_Seeman When we deauthorize the app, we do not receive the webhooks. However, upon reauthorizing, we start getting the webhooks attached to the previous token
so does that mean webhooks are not deleted when oauth tokens are deauthorized?

Webhooks are not directly tied to tokens in that way. Yes, you have to have a valid token in order for a webhook to work. But webhooks are their own Asana object; you need to manage (add/delete) them yourself to meet your needs.