Practical guides on OAuth, APIs, webhooks, authentication and automation — for teams building integrations into their products.
How delegated authorization works, from the authorization code flow and PKCE to access tokens, refresh tokens and scopes, and what changes when a SaaS product runs OAuth across many providers and customers.
11 min readRead article →How delegated authorization works, from the authorization code flow and PKCE to access tokens, refresh tokens and scopes, and what changes when a SaaS product runs OAuth across many providers and customers.
11 min readWhat webhooks are, when to use them instead of polling, and how to build a receiver that stays reliable across many connected customers.
5 min readConfigure QuickBooks Online webhooks, verify notifications, route them to the right company and recover missed changes with change data capture.
5 min readHow to let your customers subscribe to events from your product, with a delivery pipeline, signing and tooling that keep support load down.
5 min readOAuth grants API access; OpenID Connect verifies identity. How access tokens and ID tokens differ, and when a SaaS product needs each.
5 min readPractical rules for storing, using, refreshing and revoking OAuth tokens without leaking them.
5 min readThe operational side of OAuth: keeping thousands of connections usable across providers, customers and years.
4 min readAdd OAuth 2.0 to a web app so users can connect a third-party account, from app registration to refresh and disconnect.
4 min readWhat self-hosted and open-source OAuth token management gives you, what it costs, and how to decide.
4 min readThe main categories of OAuth tooling, what each is built for, and the criteria that matter when you evaluate them.
4 min readHow SSO works, how SAML and OIDC compare, and the steps to add enterprise SSO to a product that already has password login.
5 min readHow Proof Key for Code Exchange protects the authorization code flow, and why it’s now recommended for web apps as well as mobile.
4 min readWhat changes when you stop running OAuth infrastructure yourself, and when running it yourself is still the right call.
3 min readHow to detect broken OAuth connections early, tell the right person, and spot provider-wide problems before customers do.
3 min readKeep the integration logic, hand off the authorization layer: the options and what each one changes.
3 min readWhy passwords and API keys fall short for customer-facing integrations, and what supporting OAuth asks of your team.
3 min readHow to choose, scope, design and maintain integrations that live inside your product.
3 min readThe categories of alternatives for customer-facing integrations and the questions that separate them.
3 min readA decision framework for integration platforms, from general automation tools to managed OAuth and workflow engines.
3 min readWho uses each, where the integration lives, and how Pathfix OAuth and Pathfix Automation differ from Zapier.
3 min readWhen a native integration is worth building, when Zapier is the better answer, and how to combine them.
3 min readHow integrations influence buying, adoption and retention, and how to measure and prioritize them.
3 min readHow unified APIs normalize providers in a category, and when that abstraction helps or gets in the way.
4 min readA section-by-section checklist for teams building an internal unified layer across several providers.
4 min readWhich productivity categories matter for your product, what each integration involves, and how to prioritize.
3 min readChoosing which CRMs to support, how deep to go, and how to handle the ways CRMs differ.
3 min readHow to assemble a no-code stack that integrates well, and where per-user authorization changes the picture.
3 min readThe OAuth problems Bubble builders hit most often, why they happen, and how to approach each one.
5 min readA step-by-step map for adding Google Calendar to a Bubble app, from Google Cloud setup to API calls and refresh.
5 min readWhat a request builder must handle when the same API call runs for many connected users.
3 min readThe transformation types API workflows need, where they belong, and how to keep them reliable across many users’ data.
3 min readHow to watch both connections and workflows, route each problem to the person who can fix it, and avoid alert noise.
3 min readWhat an API connector contains, how it runs in a workflow, and where custom requests take over.
3 min readNo articles match your search yet.
