pymonzo 0.2.2

Access token

If you want to just play around then you can simply get the access token taken from Monzo API Playground, either pass it explicitly to MonzoAPI() class or save it as an environment variable ($ export MONZO_ACCESS_TOKEN='...') and you’re good to go. Everything works as expected but the token is valid only for couple of hours.

OAuth 2

The second authentication option is to go through OAuth 2, which doesn’t sound bad (everyone is using it!) but from my experience is a PITA when setting up for server side applications. So.

Some technical background: Monzo currently only allows OAuth 2 ‘authorization code’ grant type and automatic token refreshing is only allowed for ‘confidential’ clients.

First, you need to create said client here. Name and logo don’t really matter but you need to set the redirect URL to this repo (https://github.com/pawelad/pymonzo) and set it to be confidential.

Got it? Cool. You now have required ‘Client ID’ and ‘Client secret’ and only need the auth code. You get it by creating a link with your client ID:

https://auth.getmondo.co.uk/?client_id=$ClientID&response_type=code&redirect_uri=https://github.com/pawelad/pymonzo

You then go to the link and authorise the app. You should get an email with a link back to the GitHub repo and the authorization code, something like:

https://github.com/pawelad/pymonzo?code=$AuthCode

You now have all three needed values - client ID, client secret and the auth code. As with the access token, you can either pass them directly to MonzoAPI() class or save them as environment variables:

$ export MONZO_CLIENT_ID='...'
$ export MONZO_CLIENT_SECRET='...'
$ export MONZO_AUTH_CODE='...'

That’s it! The token is then saved on the disk (~/.pymonzo) and is automatically refreshed when needed, so all this (should) be one time only.