Skip to main content
The Todoist app must issue short-lived access tokens with refresh tokens. Apps created now have this enabled already. An app created before Todoist made it the default shows a Token refresh section that has to be enabled first, and that change cannot be reversed.

​
Creating a Todoist app

Todoist integrations are registered in the App Management console, which issues the Client ID and Client secret used to connect.

1

Sign in to Todoist

Sign in to your Todoist account.

  • Enter your Email and Password, then click Log in.
  • You can also use Continue with Google, Continue with Facebook, or Continue with Apple.
The Todoist sign-in page with the Email and Password fields and the Log in button highlighted
2

Open the App Management console

Open the App Management console, listed under Settings > Integrations.

  • Click Add new integration.
The App Management page with the Add new integration button highlighted
3

Create the app

Click Add new integration to open the Create App dialog.

  • App name: StackOne Integration
  • Click Create App.
The Create App dialog with the App name field filled in and the Create App button highlighted

​
Enabling token refresh

The connector renews access tokens automatically, which requires the app to issue refresh tokens. An app created now already does this and shows no setting to change.

1

Enable token refresh on an older app

Open the app settings and look for a Token refresh section, between OAuth redirect URL and Verification token. If Verification token follows OAuth redirect URL directly, the section is absent because the app already issues refresh tokens, and nothing needs changing.

  • Click Enable token refresh.
  • Todoist describes the change as follows. Switch this app to use short-lived access tokens with refresh tokens. Access tokens will expire after 1 hour, and your app will need to use a refresh token to request a new one. This is a one-way change and cannot be reversed.
  • Tokens issued before the change stay long-lived, so any account already connected keeps working until it is reconnected.
The Token refresh section with the Enable token refresh button highlighted

​
Configuring the redirect URL

Todoist sends the authorization response to a redirect URL that has to be registered on the app.

1

Register the StackOne callback URL

In the OAuth redirect URL field, enter the StackOne callback URL.

  • Value: https://api.stackone.com/connect/oauth2/todoist/callback
  • You can add multiple redirect URLs, separated by commas.
The OAuth redirect URL field containing the StackOne callback URL

​
Configuring OAuth scopes

Scopes decide which Todoist data the connector can reach. They are requested when an account authorizes the app, not configured on the app itself.

1

Select the scopes to grant

Enables actions: Archive Project, Archive Section, Close Task, Create Comment, Create Label, Create Project, Create Section, Create Task, Delete Comment, Delete Label, Delete Project, Delete Section, Delete Task, Delete Upload, Get Activity Logs, Get Comment, Get Label, Get Productivity Stats, Get Project, Get Project Permissions, Get Section, Get Task, Get Tasks By Filter, Get Tasks Completed By Completion Date, Get Tasks Completed By Due Date, Get Unified Credentials, Get Unified Organization, Get Unified Role, Get Unified User, Get User Info, IAM Auth Test, Join Project, List Archived Projects, List Comments, List Labels, List Project Collaborators, List Projects, List Sections, List Shared Labels, List Tasks, List Unified Organizations, List Unified Resource Types, List Unified Resource Users, List Unified Roles, List Unified Users, Move Task, Quick Add Task, Remove Shared Label, Rename Shared Label, Reopen Task, Search Labels, Search Projects, Search Sections, Unarchive Project, Unarchive Section, Update Comment, Update Label, Update Notification Setting, Update Project, Update Section, Update Task, Upload File

Grant the permissions the connector’s actions require.

2

Enter the scopes in StackOne

Enter the scopes in the Application Scopes field in the StackOne Connector profile.

  • Format: comma-separated, with no spaces
  • Example: data:read_write,data:delete,project:delete
  • Leaving the field empty applies the connector’s default scopes.

​
Copying your credentials

The app settings page shows the credentials the connector authenticates with.

1

Copy the Client ID and Client secret

Copy both values into the StackOne Connector profile.

  • Copy Client ID into the Client ID field.
  • Copy Client secret into the Client Secret field.
  • Store the Client secret securely. Anyone holding it can authorize apps against your integration, and replacing it with Reset the client secret invalidates the old value.
The app settings page with the Client ID and Client secret fields highlighted, both values hidden

​
Creating the StackOne Connector Profile

To create the Connector Profile in StackOne for Todoist:
1

Navigate to Connector Profiles

Login to StackOne and navigate to Connector Profiles
2

Create New Connector Profile

  • Click + Connector Profile
  • Search for and select Todoist
  • Select Type as OAuth 2.0
  • Fill out the fields using details retrieved from your provider:
    • Client ID
    • Client Secret
    • Application Scopes (Optional)
  • (Optional) Select Actions to be enabled for this Connector Profile
  • Click Create profile
Congratulations! The new Connector Profile will now show up in your project ready to be used. You can now continue to Link Accounts for Todoist.