Exchange Code For Access Token

To interact with the Finch API, you will need to exchange the short-lived authorization code for a long-lived access_token before it expires. A Finch access token is a long-living, infinite token, i.e. it does not expire unless explicitly disconnected. This exchange should always take place in your back-end to ensure your client_secret and access_token are never publicly exposed.

Making API Requests

An easy way to exchange an authorization code for an access token is to create a /callback API endpoint. The examples provided uses Express.js server. To install Express.js on your own machine, you can follow the Express.js installation steps.

import axios from 'axios'
const express = require('express')
const app = express()
const port = 3000

app.get('/callback', async (req, res) => {
  const code = req.query.code;

  const authRes = await fetch('https://api.tryfinch.com/auth/token', {
    method: "POST",
    body: {
      client_id: '<your-client-id>,
      client_secret: '<your-client-secret>,
      code, 
      //redirect_uri: 'https://tryfinch.com' }, // The redirect_uri is not necessary if you are using Embed Finch Connect Flow
    }
  });

  // Store the newly setup connection's access_token in your database to use for subsequent calls to Finch's APIs.
  await redis.set('current_connection', authRes.data.access_token)

  // Once the token is recived, redirect to another location in your application to display the data
  return res.redirect("/company")
})

app.listen(port, () => {
  console.log(`Example app listening on port ${port}`)
})

Request

Response