Hi,
We're running a sync against the Dentally API and hit a problem we'd like your advice on.
We were authenticating with a personal access token. The user that token belonged to was deleted, and our sync stopped working.
We looked at using application tokens instead, but /oauth/token/info shows a user_id, so those appear to be tied to a specific user as well.
Two questions:
- If the user who authorised an application is deleted, is that application token also invalidated?
- Is there a way to authenticate that isn't tied to an individual user, so the sync doesn't break when someone leaves the practice?
Thanks