Client grants are now given on installation

Starting September 10th, 2024, all apps will be given an OAuth2 client credentials grant for a Benchling tenant when the app is installed on that tenant.

What's changing?

Previously, client credentials grants were given when the app was activated for apps with an AUTOMATIC lifecycle management, which has now been sunsetted (see changelog).

Effectively, this means the app will be able to exchange the client id and secret for a valid token for the installing tenant without going through the activation flow.

What does this mean for me?

Apps with an AUTOMATIC lifecycle management that were installed prior to this date will still need to be activated in order to be given a client credentials grant.

Note that apps will need to be subscribed to the v2.app.activateRequested webhook in order to be activated.

When is this happening?

This change will go live on on September 10th, 2024.