Deprecation of Zendesk Support API Tokens and migration to Oauth

[buheryfi]

How will ZCLI handle the deprecation of Zendesk Support API Tokens and migration to Oauth? https://support.zendesk.com/hc/en-us/articles/10851263566234-Announcing-the-removal-of-API-tokens-as-an-authentication-method-for-API-requests

[miloprice]

The docs claim that OAuth access tokens are supported for zcli login -i (docs). However, as of zcli v1.1.4, you can still only log in with an API token as far as I can tell.

It does appear that you can still deploy apps by setting ZENDESK_SUBDOMAIN and ZENDESK_OAUTH_TOKEN as env vars. You'll need to use a token scoped to both apps:read and apps:write:

curl -sS "https://<subdomain>.zendesk.com/oauth/tokens" \
  -d "grant_type=client_credentials" \
  -d "client_id=<oauth_client_id>" \
  -d "client_secret=<oauth_secret>" \
  -d "scope=apps:read apps:write"

[ahmedsabriz]

I see an oauth branch with last activity 2 months ago https://github.com/zendesk/zcli/tree/feat/oauth-login

[francescopellegrini]

Hi everyone, is there any update on this feature? I guess there's still plenty of time before Zendesk blocks API token creation completely...

[francescopellegrini]

This is implemented in v1.2.0, right?

[ahmedsabriz]

I tested it on v1.2.0. Authentication is now via global client with PKCE flow. I haven't checked if headless credentials still work though. Documentation hasn't been updated yet.