Why does the API token expire?

Question

I'm trying to create an external page form that prefills the fields with the leads name, email, company etc. I've set up a LaunchPoint and got my token. I can make a call to my endpoint using the ID from a cookie and return the leads info. BUT after awhile (1 hour?) the token expires.

How is this supposed to work? If the token expires after a time, how am I supposed to set this up?

Kenny_Elkington · Accepted Answer

Hi Philip, the token expires for the same reason that logins time out, for security if a session is somehow hijacked. You'll need to implement a system which reauthenticates with your credentials when the token expires: http://developers.marketo.com/documentation/rest/authentication/

SanfordWhiteman · Answer

I'm trying to create an external page form that prefills the fields with the leads name, email, company etc. I've set up a LaunchPoint and got my token.

1. Yuck. Have you thought about the DoS implications?

2. As Kenny said, you have to think of the access token as if it were distributed to a third party, where the ability to have it self-revoke is critical.

3. For apps you control, it can be annoying to have to do ultra-defensive programming, waiting for tokens to give an error before getting a new one. That's why I recommend the workaround here: Flaw in REST API Authentication

Cadastre-se

Fazer o login com rede social

Bem-vindo

Fazer o login com rede social