API CALL URL

  • 0
  • 1
  • Question
  • Updated 2 months ago
  • Answered
Can a user or app token be used to bypass signing on?  I want to have a URL to edit a field but without having to log into quickbase first, similar to below

https://target_domain/db/target_dbid?a=API_EditRecord&rid=154
&_fid_34=999
Photo of Bradley Damron

Bradley Damron

  • 320 Points 250 badge 2x thumb

Posted 2 months ago

  • 0
  • 1
Photo of Joshua Tate

Joshua Tate

  • 1,016 Points 1k badge 2x thumb
usertoken is one option the other is a token which you can get from an particular api call but requires you not have 2FA enabled. user token is the best bet but dont use it when its at all client side and another user is using it else they will have as much access as the user the token belongs too.
Photo of Bradley Damron

Bradley Damron

  • 320 Points 250 badge 2x thumb
thanks Joshua,  what would the entry in the URL for a user token be?
Photo of Joshua Tate

Joshua Tate

  • 984 Points 500 badge 2x thumb
You will need to generate a user token through your settings, go to the top bar, drop arrow per below then my preferences. then find he manager user tokens and intuitivly generate one from there. then using the API Guide, they have examples like below. 

If you require app tokens for your app also add that too

https://target_domain/db/target_dbid?a=API_EditRecord&usertoken=xxxxxxxxxx&apptoken=xxxxxxxxxxxx&rid=154


then



Photo of Bradley Damron

Bradley Damron

  • 320 Points 250 badge 2x thumb
Thanks Joshua, worked perfectly!