topic Re: My third party service has Oath2 token Authentication in APIs & Integrations

My third party service has Oath2 token Authentication

ASaliasi — Sat, 27 Sep 2025 13:21:53 GMT

Hello everyone,

I need to create a Custom Code project, to integrate with my third party app.
Basically, if I have a request, I want to be able to open a Ticket in Hubspot, and then reply to the Hubspot Ticket, and then the ticket changes status accordingly.

However, my third party app uses Oauth2, and the token refreshesh every 2 hours.
How can I make refresh it automatiacally in my code as well?

Best,
Ardit

Re: My third party service has Oath2 token Authentication

BérangèreL — Mon, 29 Sep 2025 08:56:08 GMT

Hi @ASaliasi and welcome, we are so glad to have you here!

Great question, thanks for asking the HubSpot Community!

To start with, I'd like to share documentation on the topic:

- Manage OAuth access tokens
- Refresh an access token
- Workflows | Custom Code Actions
- Working with OAuth | OAuth Quickstart Guide

Also, I'd love to put you in touch with our Top Experts: Hi @skimura, @sylvain_tirreau and @Anton do you have suggestions to help @ASaliasi, please?

Have a lovely day and thanks so much!
Bérangère

Re: My third party service has Oath2 token Authentication

GRajput — Tue, 30 Sep 2025 13:56:32 GMT

Hi @ASaliasi

You can create a server in the backend to create the access token, whenever you are trying to interect with HubSpot then you can call that service, which will create a new access token and then you can interact witht the HubSpot Ticket using the REST API.

I hope this will help you out. Please mark it as Solution Accepted and upvote to help another Community member.

Thanks!

Re: My third party service has Oath2 token Authentication

suprdense — Wed, 01 Oct 2025 06:41:18 GMT

Hey @ASaliasi ,

You don’t need to manually refresh the token every couple of hours. The simplest way is to set up a small service outside HubSpot that holds onto your access and refresh tokens securely. Whenever it’s about to call the third-party API, it checks if the token is close to expiring or if the API sends back a 401. If so, it uses the refresh token to grab a new access token and saves it.

That way your HubSpot custom code just passes data along, and the service takes care of keeping tokens valid in the background. It avoids downtime and you never have to babysit the refresh yourself.

If my post answered your question, please mark it as the accepted solution to support the community.

Re: My third party service has Oath2 token Authentication

ASaliasi — Wed, 01 Oct 2025 07:24:07 GMT

Hello @suprdense , thank you for your reply!
I was wondering if it can be done inside Hubspot Custom Code.

Re: My third party service has Oath2 token Authentication

ASaliasi — Wed, 01 Oct 2025 07:41:46 GMT

Hello @GRajput ,thank you for your reply!
I was wondering if it can be done inside Hubspot Custom Code.

Re: My third party service has Oath2 token Authentication

suprdense — Wed, 01 Oct 2025 07:45:57 GMT

Hi @ASaliasi

Just clarify, are you trying to create an app or a custom coded action block in a workflow?

If it's an app, you can do this by adding an authentication service in your code repo and let it handle auto-refresh of tokens.

If it's a custom coded action in a workflow, you won't be able to do it. However, you can build a custom app action block, where you can handle this in your repo.

Re: My third party service has Oath2 token Authentication

ASaliasi — Wed, 01 Oct 2025 07:48:53 GMT

Hello @suprdense ,

I should have clarified, a custom code within a workflow.
Got it, thank you for your reply.