QuickBooks Payment Gateway now require a questionaire to be filled out for all Apps created on developer.intuit.com, in order to gain access to Client ID and Client Secret (API Keys). Some of these questions are company specific questions, some are app specific questions we can answer, but some are specific to the softward accessing the gateway (CartViper). Would you be able to assist in answering some of these questions we are uncertain about:
Authorization and Authentication Page
2. How often does your app refresh access tokens?
- Every time it makes an API Call
- Only when access tokens expire
- More than once a day
- Daily
- Weekly
- Other - specify a time frame
3. Does your app retry authorization and authentication requests that have failed? Yes, No
4. If your app encounters an authorization and authentication error, do you ask customers to reconnect to your app? Yes, No
6. Can your app handle the following scenarios (yes/no):
a. Errors due to expired access tokens: Yes, No
b. Errors due to expired refresh tokens: Yes, No
c. Invalid grant errors: Yes, No
d. CSRF errorsf: Yes, No
Securtity Page
6. Does your app use WebSocket? Yes, No