How to get access token using the REST API?

Help
3

Hey @miguelcabs,
I want to use the Vercel REST API (No SDK) with a custom integration.

My current setup:

  1. Redirect user to https://vercel.com/integrations/MY-APP/new
  2. User clicks ‘Add integration’ in Vercel
  3. Vercel redirects user to https://my-app.com/vercel/callback?code=ABCDEF&state=ABCDEF
  4. I exchange it for an access token using https://api.vercel.com/v2/oauth/access_token
  5. When that is done, show confetti :tada:
  6. After some time, I need access to their projects (to do my business logic). How to authenticate my backend with the vercel API. Because the code from the callback isn’t valid anymore. Do I need to save the access token in my backend? This doesn’t seem secure?

Is this more clear? In the docs I find a lot on manual access tokens the user needs to generate themselves in the Vercel dashboard but is this really needed? I would like it to just be ‘add integration’ and that’s it.