Integrations
Calendars, video and payouts.
Connections
What connecting actually grants
Connections to the tools you already use. Each one is a specific grant you can withdraw, not a standing key to your account.
- Connected
- Active, and revocable from here at any time.
- Disconnected
- The grant is withdrawn and the credential revoked.
Where does the access token live?
On the server, never in a URL. The legacy portal started its OAuth flow by putting your auth token in the query string, which writes it into browser history, server logs and any referrer header sent to a third party. This flow uses a short-lived, single-use value held server-side instead, so nothing sensitive is ever in an address bar.
Why is disconnecting confirmed when connecting is not?
The same rule as everywhere else here: the direction that breaks something asks first. Connecting again is a click; a disconnect can interrupt something you had running.