Hey @pnardmann, thanks so much for getting back to us with these additional details!
To clarify, the October 26, 2026 deadline requires all apps making listing changes to use the updated install flow, which has two paths:
Your app presents a login/signup form, generates a state token, redirects to HubSpot for OAuth, then receives a finalization callback (step=finalize) with the OAuth code.
In that case, your app needs the “With Partner Sign In” install flow, it’s designed exactly for apps like yours that require users to log in before OAuth. You need to implement the authorize/finalize handshake.
Here is why the flow stalls: Your install URL endpoint currently doesn’t handle the step parameter or redirect to returnUrl. The wizard sends step=authorize first (your app signs in the user, generates a state token, redirects back to HubSpot), then step=finalize (HubSpot sends the OAuth code + state; you exchange the code and must redirect to returnUrl). Without that final redirect, the install wizard never receives the completion signal and hangs indefinitely.
Here is what to do: You can migrate gradually. Your app can detect which flow is in use by checking for the step parameter in incoming requests. You can implement the two-step flow in your install URL endpoint:
-
step=authorize → show login, generate state token, redirect to ${returnUrl}?state=${state}
-
step=finalize → validate state, exchange OAuth code, redirect to returnUrl
-
no step parameter → older one-step flow (existing behavior)
Also, please ensure your finalize endpoint allows iframe embedding, set Content-Security-Policy: frame-ancestors ‘self’.
For testing, you can test from the listing editor’s Preview button. You can also test the flow logic locally by simulating the step, returnUrl, and state query parameters against your dev redirect URLs.
If you already opted into seamless install, you can’t revert, you must implement the flow to publish. If you haven’t opted in yet, the requirement takes effect October 26, 2026.
Here is the documentation for more details: " Understand app installation flow with the option for partner sign in - HubSpot docs "
I hope this helps!
Bérangère
This post was created with the assistance of AI tools
- Please note that I’m out of the office until August 27th -