Programmatic Access to v3 API without web sign in

[EmmaH41]

I'm looking to write a script to automate a few tasks with just a single connection with no user interaction.

I can generate the authorization url, and when I do Postman does show me the CC login prompt. However, I don't want to have to log in via a web page to grant access each time I run this script. I know with the v2 API there was a way to just use the access token given through the site along with the client id and secret, but there doesn't seem to be a way to do that in v3. I am fine even with having to use my user credentials to log in somewhere if I knew how to push those credentials within the script to receive the proper authorization code back. It doesn't make sense to try to generate a refresh token as I would have to store the new one somewhere each time I run this script (either scheduled or manually).

I thought it made more sense to do this with v3, since I assume that v2 will be deprecated at some point but otherwise this seems like it is more trouble than it's worth. I also don't understand why there is not a flow for this as it seems like a rather common thing to need to access the endpoints programmatically without needing a web interface.

[AjayS62]

I am also interested in signing in without a web sign in. It does not make sense to me that I can't. I'm trying to manage my own contacts, list and email delivery via my own services, no UI.

[Jimmy_D]

Hello Everyone,

Thank you for reaching out to Constant Contact's API Support.

We are looking in to other options to authenticate. As of right now you will need to go through the oAuth flow listed in the v3 documentation to get the Access Token and Refresh Token. Please keep in mind the need to enter the Constant Constact username/password and clicking Allow/Deny only occurs once. After you do that you just need to track/save the Access and Refresh Tokens.

[ChrisE3168]

I am looking to do some of my own automation.  This would be a case where there is not a user, there is not a browser to allow the access.  OAuth2 is great when you have a user doing the work and using a browser.  When you do not have this, it does not work very well.

[EmmaH41]

This is the first time I've checked this thread in awhile. Disappointing they still have done nothing with this apparently, since it seems like a very common use case.

[HitPredictor]

Almost a year later and nothings changed.

[LGFBNews_Main]

Anything with this issue? I've got same problem, our application uses api to create new contacts programatically, but now we can't do it with OAuth...

[Courtney_E]

Hello EmmaH41,

Thank you for reaching out to Constant Contact API Developer Support. My team is here to assist outside software developers with questions about building into Constant Contact's API.

There is currently no way to bypass the initial Authorization Request screen, which can only be accessed/authorized via a browser window, but you should only need to authorize/connect an account once. 

After you complete the OAuth2 Authorization Code Flow for V3, Constant Contact returns an access token and refresh token. You can use access tokens to make requests using the V3 API, and you can use the refresh tokens to obtain new access tokens without any user input. This ensures that you only need to authenticate the account you’ll be connecting to once. After the initial authentication, you’ll just use the refresh token and access token to complete your future requests.

V3 OAuth2 Authorization Code Flow

https://v3.developer.constantcontact.com/api_guide/server_flow.html

V3 OAuth2 Tokens Overview

https://developer.constantcontact.com/api_guide/auth_overview.html#get-the-access-token

Please have a look and let us know if you have any other questions!

[user9863]

For this use-case why can't Constant Contact develop a flow in the developer portal that does the OAuth flow for us and presents us with an access token and long-lived refresh token so we can use it in our app? That would solve the problem for all of us.

We really shouldn't have to hand-roll an entire oauth flow just so that we can get the one refresh and access token that we will be needing for our automation.

[Courtney_E]

Hello user9863,

Thank you for reaching out to Constant Contact API Developer Support. My team is here to assist outside software developers with questions about building into Constant Contact's API.

API connections that use basic authentication to access the account via your username and password are no longer considered a secure enough option to protect our customers' data. Our current V3 API uses OAuth2.0, which is the current industry-standard for authorization. 

OAuth2.0 is more secure and does a much better job of keeping your Constant Contact account data safe. Additionally, when you give their integration permission to access your account, it will show you exactly which permissions the integration is requesting to be granted (rather than just granting all permissions). V3 also uses tokens that are continuously refreshed to keep the connection encrypted and secure. 

We know the authorization process for V3 can seem a little daunting when first getting started, but you should be able to fully automate your integration with the exception of the initial Authorization Request screen and redirect, which can only be accessed/authorized via a browser window and cannot be bypassed, but you should only need to authorize your account once (grant permission and exchange auth code for first token set). After the initial connection, your application will use the access token to make calls, and the refresh token to generate a new token set once the access token expires (24 hours).

While our expertise is with our API itself as opposed to its implementation within any particular programming language, we are happy to answer any questions pertaining to Constant Contact’s API endpoints, functionality, and documentation. If you need any help getting started with authorization, feel free to reach out to our team directly by email at webservices@constantcontact.com. 

Otherwise, if you have a specific use case or OAuth flow that you feel would better meet your needs, we’d love to hear from you. If possible, please include what specific solution(s) you’re looking for, whether your app would only access your own Constant Contact’s account data or if it would also be used by other accounts, and whatever other specific use case details you are able to provide. These details allow our developer team to consider whether your request is a good fit for future development. Your feedback and experience with this request is essential to improving our product, so thank you for reaching out to us regarding this matter.

Please have a look and let us know if you have any other questions!

[EdR]

I am looking to see if i can develop a tool to get my client's link data. This report i usually access via manually, i log in go to reports go to a date and get and download the pdf. The report i choose has no contact contact user data, only links and a count. Firstly i would like to know if this is available as an "end point" for a request via a script. secondly it seems the oauth2 + implicit flow would be the simplest solution, if i can. secondly the documents that seem most appropriate are the one titled oauth2 overview, and oauth2 authorization code flow. Thirdly, the examples i have seen are php , java, and curl. the most current language and seems the most popular to me are python.  Can you direct me to a solution using your product in python, with the aforementioned use of authorization and flow?

[Courtney_E]

Hello EdR,

Thank you for reaching out to Constant Contact API Developer Support. My team is here to assist outside software developers with questions about building into Constant Contact's API.

It looks like we've already followed up with you directly via email, but I wanted to close the loop here as well. If you haven't received our reply, please let us know via email at webservices@constantcontact.com, and reference case number 32554033.

While our expertise is with our API itself as opposed to its implementation within any particular programming language, we are happy to answer any questions pertaining to Constant Contact’s API endpoints, functionality, and documentation.

Please have a look and let us know if you have any other questions!

[EdR]

in v2 there is a campaign method to get the data i need, links clicked, and the count, per campaign id. But there doesn't seem to be the same data in v3, no method for campaigns per id ( whether campaign id v2 or v2 campaign activity id ), as far as i can tell. Is there a v3 method that results in such data? example ( partial ) of a v2 return would be: }, {
"url": "https://canopymortgage.com/tech-demo",
"url_uid": "711629854966",
"click_count": 295

i get this type of data using v2 calls ( not on the api reference panel ) but in a mashery at https://constantcontact.mashery.com/io-docs

i have looked at also trying to reference trying to find v2 campaign id before dates but i can't get those numbers that occur after Jan 1, no matter what dates i use for before and after. i always get the latest 50 campaign id, counting back from the day i use it.

[Courtney_E]

Hello EdR,

Thank you for reaching out to Constant Contact API Developer Support. My team is here to assist outside software developers with questions about building into Constant Contact's API.

If you are just looking for  summary report rather than a detailed report which includes contact details, the most direct endpoint to use would be the Email Campaigns Summary Report:

V3 - GET an Email Campaigns Summary Report
https://v3.developer.constantcontact.com/api_reference/index.html#!/Email_Reporting/getAllBulkEmailC...

Please have a look and let us know if you have any other questions!