Authorized access

Getting your access token

A secure token is required to authenticate your access to Trello. To obtain it, login to Trello and visit https://trello.com/app-key. You will need to do two things there:

• Check the value of Allowed origins. Every API request comes from an “origin”, i.e. a URL. Trello API will only accept authorized requests if they come from the allowed origins list, which makes communication with web apps more secure. If you are using trelloR locally (eg. from your laptop or PC) then http://localhost:1410 is a good value to use.

• Copy both “key” and “secret”.

Back in R, feed the key and secret to the get_token() function. This will trigger first-time authorization in the browser, allowing you to cache your token locally. You only have to do it once for a given project, unless you opt out of using cache or the cache file is deleted.

library(trelloR)
my_token = get_token("my-app", key = your_key, secret = your_secret)

This will create an object of class Trello_API_token. Functions in the TrelloR package will always try to read cached token when needed, unless you supply a token object directly. For example, any of these will work with local cache in place:

my_boards = get_my_boards()
my_boards = get_my_boards("path/to/cache/file")

# Works without a cache file, if `my_token` is a Token object.
my_boards = get_my_boards(my_token)

You can create multiple tokens with different names, scope and expiration. See ?get_token for additional arguments.

Keep your credentials safe

Keep your key, secret and any token cache in a safe, non-shared location. Using environment variables or packages like askpass are good options.

Token cache is by default stored in a file called .httr-oauth. You should avoid accidentally copying or exporting this file along with other files. To make this easier, the cache file path is automatically added to .gitignore.

If you think the token might have been compromised or you simply do not want to use it anymore, you should revoke it. Log in to Trello and access your account settings. To make it easier to recognize tokens you have created, use the appname argument when creating a token.

Built with

sessionInfo()
#> R version 4.4.1 (2024-06-14)
#> Platform: x86_64-pc-linux-gnu
#> Running under: Ubuntu 24.04.1 LTS
#> 
#> Matrix products: default
#> BLAS:   /usr/lib/x86_64-linux-gnu/openblas-pthread/libblas.so.3 
#> LAPACK: /usr/lib/x86_64-linux-gnu/openblas-pthread/libopenblasp-r0.3.26.so;  LAPACK version 3.12.0
#> 
#> locale:
#>  [1] LC_CTYPE=en_US.UTF-8       LC_NUMERIC=C              
#>  [3] LC_TIME=en_US.UTF-8        LC_COLLATE=C              
#>  [5] LC_MONETARY=en_US.UTF-8    LC_MESSAGES=en_US.UTF-8   
#>  [7] LC_PAPER=en_US.UTF-8       LC_NAME=C                 
#>  [9] LC_ADDRESS=C               LC_TELEPHONE=C            
#> [11] LC_MEASUREMENT=en_US.UTF-8 LC_IDENTIFICATION=C       
#> 
#> time zone: Etc/UTC
#> tzcode source: system (glibc)
#> 
#> attached base packages:
#> [1] stats     graphics  grDevices utils     datasets  methods   base     
#> 
#> other attached packages:
#> [1] rmarkdown_2.28
#> 
#> loaded via a namespace (and not attached):
#>  [1] digest_0.6.37     R6_2.5.1          fastmap_1.2.0     xfun_0.49        
#>  [5] maketools_1.3.1   cachem_1.1.0      knitr_1.48        htmltools_0.5.8.1
#>  [9] buildtools_1.0.0  lifecycle_1.0.4   cli_3.6.3         sass_0.4.9       
#> [13] jquerylib_0.1.4   compiler_4.4.1    sys_3.4.3         tools_4.4.1      
#> [17] evaluate_1.0.1    bslib_0.8.0       yaml_2.3.10       jsonlite_1.8.9   
#> [21] rlang_1.1.4