Introducing one-time Link URLs

You can now send one-time LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat. URL to your customers to improve the reliability of data provided by them.

What's new?

To reduce the risk of LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat. URLs being leaked or reused, we have introduced the option to limit the validity and number of uses of these URLs. When enabled, all companyCompany In Codat, a company represents your customer's business entity. Companies can have multiple connections to different data sources.-specific and connectionConnection A link between a Codat company and a data source (like an accounting platform). Each connection represents authorized access to pull or push data from that platform.-specific LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat. URLs will have a one-time password (OTP) added as a query parameter:

LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat. type	Without OTP	With OTP
CompanyCompany In Codat, a company represents your customer's business entity. Companies can have multiple connections to different data sources.-specific	https://link.codat.io/company/{companyId}	https://link.codat.io/company/{companyId}?link.otp=OTP123
ConnectionConnection A link between a Codat company and a data source (like an accounting platform). Each connection represents authorized access to pull or push data from that platform.-specific	https://link-api.codat.io/companies/{companyId}/connections/{connectionId}/start	https://link-api.codat.io/companies/{companyId}/connections/{connectionId}/start?otp=OTP123

Additionally, you will notice the following behavior changes:

• Your customers won't be able to use the same LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat. URL more than once.
• CompanyCompany In Codat, a company represents your customer's business entity. Companies can have multiple connections to different data sources.-specific and connectionConnection A link between a Codat company and a data source (like an accounting platform). Each connection represents authorized access to pull or push data from that platform.-specific LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat. URLs will expire after one day even if they weren't used.
• You won't be able to use the generic Invite companyCompany In Codat, a company represents your customer's business entity. Companies can have multiple connections to different data sources. button to invite your customers to share their data.

Who is this relevant for?

All clients who want to have stricter rules around LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat. URLs sent to their customers.

How to get started?

To set up one-time LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat. URLs:

1. Enable the One-time LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat. URLs setting in the Codat Portal under Settings > Auth flow > Link > Onboarding.
2. Complete the additional steps for your LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat. flow, as described below.

If using Hosted LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat.

As a prerequisite to enabling one-time LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat. URLs, you also need to enable the new Hosted Link interface.

If using Hosted or build-your-own LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat.

If you are currently adding query parameters to LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat. URLs (for example, by appending ?link.showSandboxIntegrations=false), confirm that your code can handle URLs that already contain query strings.

If using LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat. SDK

The LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat. SDK uses an access token instead of an appended one-time password. To set this up:

1. Register your domain using the Set CORS settings endpoint so the component can make authenticated requests from your site.
2. Get a companyCompany In Codat, a company represents your customer's business entity. Companies can have multiple connections to different data sources. access token. Retrieve it server-side from the Get company access token endpoint (GET /companies/{companyId}/accessToken). Tokens are valid for 24 hours and scoped to a single companyCompany In Codat, a company represents your customer's business entity. Companies can have multiple connections to different data sources..
3. Pass the token to the LinkLink The authorization flow that allows end users to connect their accounting, banking, or commerce platforms to your application via Codat. SDK via the accessToken prop when initializing the component.

Reach out to your account manager or our support team if you'd like help getting set up.