docusign / docusign-esign-node-client

The Official DocuSign Node.js Client Library used to interact with the eSign REST API. Send, sign, and approve documents using this client.
http://docusign.github.io/docusign-esign-node-client
MIT License
144 stars 99 forks source link

No SDK Method for generating refresh tokens #338

Open Christofuu opened 9 months ago

Christofuu commented 9 months ago

This isn't a critical issue, but it's one I've found a handful of times dating back at least a year online, so it seems to be something people want. I'm currently implementing the eSignature REST API into a webapp I'm working on. The main functionality involves generating and emailing invoices from job information created and stored on the app. I've been searching for about a week now for a way to use the node SDK to generate a refresh token, however there is only a method to generate the original authorization token. I can use axios to make a post request on my frontend to generate a new token when my endpoints hit a 400 error, however I'd prefer to keep authorization and refresh tokens away from my frontend for security purposes (especially since its every 8 hours). If you could just add a slightly modified generateAccessToken() method to the API which specifies a grant type of refresh_token as opposed to authorization_token I'd greatly appreciate it.

Ivanrenes commented 5 months ago

+1, So much to improve. so much to be done, they seems not actively working on this.

sonawane-sanket commented 1 month ago

@Christofuu

Thanks for flagging this issue and sharing your workaround. We have noted the recurring nature of this problem and its importance for users like yourself.

Regarding the request for a modified generateAccessToken() method to handle refresh tokens securely, We are committed to addressing this in the near future. In the meantime, please continue with your workaround. Your patience and collaboration are appreciated as we work towards a solution.

sonawane-sanket commented 1 month ago

+1, So much to improve. so much to be done, they seems not actively working on this.

We acknowledge the need for improvements and are actively addressing all raised concerns. Rest assured, we're working on implementing solutions to enhance the functionality and security of the SDK. Your feedback is invaluable, and we're committed to delivering improvements moving forward. Thank you for your patience and understanding.