# Oauth2 datasource

**URL:** <https://community.weweb.io/t/oauth2-datasource/4411>\
**Category:** How do I?\
**Created:** [September 18, 2023, 7:17am UTC](https://community.weweb.io/t/oauth2-datasource/4411 "2023-09-18T07:17:00Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![marciano\_antonacci](https://avatars.discourse-cdn.com/v4/letter/m/eb9ed0/32.png) [@marciano\_antonacci](https://community.weweb.io/u/marciano_antonacci)\
**Post date:** [September 18, 2023, 7:17am UTC](https://community.weweb.io/t/oauth2-datasource/4411/1 "2023-09-18T07:17:00Z")

</div>

Hi,

I would like to connect with the API from Zoho Creator but they use OAuth2 authentication. I can’t find any documentation if and how you can manage these access tokens in WeWeb. The access token should be refreshed every hour and stored globally in the application. Is it possible to connect with an API using OAuth2?  
Thanks

---

<div class="post-metadata">

**Author:** ![Joyce](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/joyce/32/13232_2.png) [@Joyce](https://community.weweb.io/u/Joyce)\
**Post date:** [September 18, 2023, 10:47am UTC](https://community.weweb.io/t/oauth2-datasource/4411/2 "2023-09-18T10:47:57Z")

</div>

Hi @marciano_antonacci 👋

Can you tell us more about your use case? For example, will users need to be logged in to your app to access specific data based on a user role?

From what I can see [in Zoho’s documentation](https://www.zoho.com/creator/help/api/v2/add-records.html), you can pass a token in the authorization header when making an API call.

If you use the [token-based auth plugin](https://docs.weweb.io/plugins/auth-systems/token-based-auth.html) to authenticate users of your app, you’ll be able to use the token as a variable in your API call to Zoho. In that plugin, you have the option to include a refresh token endpoint.

Does that help?

---

<div class="post-metadata">

**Author:** ![marciano\_antonacci](https://avatars.discourse-cdn.com/v4/letter/m/eb9ed0/32.png) [@marciano\_antonacci](https://community.weweb.io/u/marciano_antonacci)\
**Post date:** [September 18, 2023, 12:08pm UTC](https://community.weweb.io/t/oauth2-datasource/4411/3 "2023-09-18T12:08:42Z")

</div>

Hi,

No authentication is necessary for the application. We just want to collect the data from Zoho and this is the same for all users. All users also use the same Authorization token for the API calls. I just don’t know how to store this token and how to refresh it every hour.