How do you manage your tokens for API?

Question

Hello everyone,

Short question here : how do you manage your tokens when you work with API?

I'm developing a workflow based on the myalteryx API ( https://us1.alteryxcloud.com/license-portal/api/swagger-ui/index.html ) and it uses a bearer token for Authorization. It expires every 24h00 and we have a refresh token that expires every 90 days. I wonder where to store safely those tokens and what are your practises ?

Best regards,

Simon

dreldrel · Answer

Save somewhere safe in your system, and you can use a scheduled workflow to refresh the token on a regular basis

Gaurav_Dhama_ · Answer

If you can get an azure key vault created, you can store it there safely.

You can also use any DCM vault I think to store these tokens.

If you do not have access to these, maybe you can store it in your server machine and update it there regularly.

But why not create a token per request? is the API request too frequent?