Hey Damian,
I just wanted to chime in just to make sure this thread has accurate information.
This article might be helpful if you haven’t read it already. Here are some key points.
A few important points:
- When you create an App you get an API Key and a Client ID.
- Using the Client ID you can generate an authorization code by redirecting to the
/oauth2/authorize
endpoint - With this authorization code you can generate an access token using the
/oauth2/accesstoken
endpoint. Note you will use your API Key in theclient_secret
field of this request. - When calling standard Yext APIs (e.g. /entities) with OAuth you should use the
access_token
NOT theapi_key
. The API Key is only used for getting an access token when you are using OAuth. In your API requests pass inaccess_token
as the param instead of api_key. For example:
https://api.yext.com/v2/accounts/me/entities?access_token=&v=
Here is a diagram of the steps that also might be helpful.
Let me know if you have any additional questions,
Max