M2M authentication

[TottePereraSeemli]

Hey guys.

So I'm planning on doing an integration towards Fortnox M2M, but it seems like the only way getting around the Authentication flow is to authenticate as a user - I would rather skip that step since it adds unnecessary complexity to my simple integration.

Does anybody have some more information regarding this? Their support is not very helpful.

[SWICRIOT]

@TottePereraSeemli Did you find a solution for this? I'm trying to understand both the Fortnox API and this SDK but I can't make sense of how to authenticate from my console app to my fortnox account without using the user browser login flow.

[TottePereraSeemli]

I’ve had a long discussion with Fortnox support about this, I’ve been trying to get them to implement the client credentials flow, but that won’t happen. Their argument is that it is less secure. I dont agree with them, but what to do. The only way for new integrations to authenticate is the browser login flow that you are referring to. This project is OS and detached from the Fortnox company. Sent from Outlook for iOS<https://aka.ms/o0ukef>

…

________________________________ From: SWICRIOT ***@***.***> Sent: Sunday, February 18, 2024 3:17:16 PM To: FortnoxAB/csharp-api-sdk ***@***.***> Cc: Totte Perera ***@***.***>; Mention ***@***.***> Subject: Re: [FortnoxAB/csharp-api-sdk] M2M authentication (Discussion #284) @TottePereraSeemli<https://github.com/TottePereraSeemli> Did you find a solution for this? I'm trying to understand both the Fortnox API and this SDK but I can't make sense of how to authenticate from my console app to my fortnox account without using the user browser login flow. — Reply to this email directly, view it on GitHub<#284 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AWKNFZPZXPFW7MVDBEHOQ5LYUHE2JAVCNFSM6AAAAAA7YXJG3KVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4DKMBWGEYDI>. You are receiving this because you were mentioned.Message ID: ***@***.***>

[adamelfstrom]

Of note on this topic is that Fortnox previously used the client credential flow for integrations, but changed it a couple of years ago to what we have today. I highly doubt they will consider adding it again after having deprecated it already.