Thread by Tushar Bajaj (12 replies)

C

carterReply 1Aug 5, 2025 5:19 PM

You can use the code to exchange for a access token, and then get the portal id from the access token.

C

carterReply 2Aug 5, 2025 5:19 PM

<https://developers.hubspot.com/docs/guides/apps/authentication/oauth-quickstart-guide#3.-handle-the-oauth-server-response>

C

carterReply 3Aug 5, 2025 5:19 PM

If you wanted a slightly easier but definitely less secure option you could pass through a state parameter

C

carterReply 4Aug 5, 2025 5:20 PM

<https://developers.hubspot.com/docs/reference/api/app-management/oauth#get-metadata-for-oauth-2.0-access-token>

T

Tushar BajajReply 5Aug 5, 2025 5:40 PM

<@U01QVR44MEY> yes we can get portalId from access token but the public app will be connected by then to that portal. What i want is to restrict the p...

C

carterReply 6Aug 5, 2025 5:42 PM

The state parameter might be the best play for you because it will return the same value as what you sent when the user was authorizing the app

T

Tushar BajajReply 7Aug 5, 2025 5:46 PM

But how we will pass the selected portalId in state parameter dynamically.

T

Tushar BajajReply 8Aug 5, 2025 5:48 PM

From what I understand, at the time we generate the authorization URL (with `state`), the user hasn’t selected a portal yet — HubSpot shows the portal...

C

carterReply 9Aug 5, 2025 6:08 PM

Understood, how do you decide what portal id to allow to install?

C

carterReply 10Aug 5, 2025 7:01 PM

Another option is you do the token exchange and if you don't like the portal id (still not sure how you validate the portalids) you could force an uni...

T

Tushar BajajReply 11Aug 5, 2025 7:16 PM

Yes i thought this approach as a workaround, but now as we don't have any way to get portalId in callback, I will go with this only then. Thanks <@U01...

C

carterReply 12Aug 5, 2025 8:43 PM

of course!

Thread Discussion

Original Message

Replies