AnsweredAssumed Answered

How to access contacts for sugar exchange app with oauth2

Question asked by Rahul Bhondave on Sep 2, 2016
Latest reply on Jan 30, 2017 by admin guy

Hi, I am developing a Sugar exchange app. For accessing contacts and leads, we have to use Oauth2 which requires client id, client secret, user id, and password as per the code in Sugar 7 documentation.

{   "grant_type":"password",   "client_id":"sugar",   "client_secret":"",   "username":"admin",   "password":"password",   "platform":"custom_api"}
Can we ask username and password to account owner? because using the resource owner password credentials requires a lot of trust in the client application.
What can be the other way of authentication for accessing the records?