In October 2025, the TestDome's API authentication changed to the OIDC client credentials (CC) grant type instead of the now deprecated resource owner password credentials (ROPC) grant. The deprecated flow is still functional but we recommend migrating from it as it's less secure than the CC flow.


The API guide provides detailed instructions on how to generate client credentials and use them. It includes code samples and downloadable projects in JavaScript and C#.


We plan on discontinuing the ROPC flow in November 2026. If you have enabled API access, you are likely to have received an email notification about the deprecation. We will continue to send periodic reminders to partners and customers and help them migrate to the new flow.


This guide is intended to help you migrate to the new flow, it covers all the uses of the deprecated ROPC flow.


Zapier

When we make changes to our integration with Zapier, we release a new version of the app (Or "Zap" to use Zapier's term) to give customers time to upgrade. Here are the active versions of TestDome's integration with Zapier:

  • 1.1.0 (Deprecated): Uses the old TestDome API V2. It will stop working on 2025-12-01. You should have received a notification from Zapier about this.
  • 3.0.0 (Legacy): Uses the new TestDome API V3 which provides more fields and better flexibility. It uses the deprecated ROPC flow and will soon be deprecated as well. It will be discontinued in April 2026.
  • 4.0.0 (Active): Has the same features as 3.0.0 but uses Client Credentials for authentication. This is the recommended version.

The migration to the latest app version on Zapier is simple:

  1. Enable API access via client credentials on TestDome:
    1. Go to the Integrations & API page.
    2. Under the API section, click "Generate Credentials".
  2. Upgrade to the latest app version on Zapier by following this guide.


Integration with TalentLyft or Recruitee

If you set up integration with TalentLyft and Recruitee, then you did so using the deprecated ROPC flow. TalentLyft and Recruitee haven't yet implemented support for the new CC flow. No action is required from your end for now. When TalentLyft or Recruitee migrate to the new flow, you should receive the news from them.


TestDome API

It's important to note that the new Client Credentials flow works on both TestDome API V2 and V3, migrating to it only affects the authentication (access token generation). Migrate by following these steps:

  1. Generate client credentials (Client ID and client secret) on the Integrations & API page. Store them in a password manager for example. Note that you can always generate new client credentials, which invalidates the current ones.
  2. Optional: Test the client credentials on the API docs page. You can set the API version depending on the version you are currently using.
  3. Update the authentication request in your code to use the new grant_type, client_id and client_secret fields. Please check the docs for more details and examples: https://www.testdome.com/integrations/api#authentication.

Please note that the properties of the generated access tokens haven't changed:

  • The validity period is still 30 minutes.
  • The token is obscure, not JWT.