# Asking API creds on the OAuth callback

**URL:** <https://community.hubspot.com/t/asking-api-creds-on-the-oauth-callback/109927>\
**Category:** APIs & Integrations\
**Tags:** workflows, oauth\
**Created:** [June 24, 2024, 7:33am UTC](https://community.hubspot.com/t/asking-api-creds-on-the-oauth-callback/109927 "2024-06-24T07:33:42Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![AT9](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@AT9](https://community.hubspot.com/u/AT9)\
**Post date:** [June 24, 2024, 7:33am UTC](https://community.hubspot.com/t/asking-api-creds-on-the-oauth-callback/109927/1 "2024-06-24T07:33:42Z")

</div>

good day!  
could you please advice on whether we can ask for the API creds after the OAuth flow completed? will this violate the publishing requirements?  
the thing is we’re using 3rd-party service, which provides api creds to the user, so that user could access their api with our integration  
sample flow:  
1. ordinaty OAuth  
2. callback to /api-auth (it’s a simple form with 2 fields: api key and api secret)  
3. user fills it in, we store a pair or the portalId + api creds and use it to authenticate user to the 3rd-party API on our server

---

<div class="post-metadata">

**Author:** ![Jaycee\_Lewis](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/jaycee_lewis/32/61352_2.png) [@Jaycee\_Lewis](https://community.hubspot.com/u/Jaycee_Lewis)\
**Post date:** [June 24, 2024, 3:10pm UTC](https://community.hubspot.com/t/asking-api-creds-on-the-oauth-callback/109927/2 "2024-06-24T15:10:31Z")

</div>

Hi, @AT9 Welcome to our community! Thanks for your question. Let’s invite some of our community members to the conversation – hey [@zach\_threadint](https://community.hubspot.com/t5/user/viewprofilepage/user-id/324811) @Bryantworks @himanshurauthan have you built anything similar in your integration work?

Thank you very much for taking a look! —Jaycee

---

<div class="post-metadata">

**Author:** ![AT9](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@AT9](https://community.hubspot.com/u/AT9)\
**Post date:** [July 2, 2024, 7:32am UTC](https://community.hubspot.com/t/asking-api-creds-on-the-oauth-callback/109927/3 "2024-07-02T07:32:50Z")

</div>

[@zach\_threadint](https://community.hubspot.com/t5/user/viewprofilepage/user-id/324811) @Bryantworks @himanshurauthan 🙏