Extension Connections
Summary
Extension Connections enable secure authorization between your Zoho Writer extension and third-party services. Connections act as bridges for authentication and data exchange, with Zoho Writer handling all authorization processes.
Overview
Connections are authorization configurations that:
- Enable Integration — Connect extensions with third-party services
- Secure Authentication — Manage secure credential handling
- Abstract Complexity — Zoho handles OAuth and auth details
- Simplify Development — Developers focus on functionality, not security
How Connections Work
Extension → Connection → Zoho Writer → Third-Party Service
↓
(Authorization & Security)- Create Connection in Zoho Sigma
- Copy Connection JSON from Sigma
- Paste in plugin-manifest.json under "connectors" attribute
- Use in Extension by referencing the connection link name
- Zoho Handles Authorization automatically
Security Benefits
- Credentials are never exposed to extension code
- Zoho Writer manages OAuth flows
- Prevents malicious access to sensitive information
- Routes requests through secure proxies
- Supports CORS for cross-origin requests
Authorization Methods
| Method | Description |
|---|---|
| OAuth 2.0 | Modern, token-based authentication |
| Basic Authentication | Username/password-based |
| Custom Services | Define your own authentication |
Sub-Sections
- Create Connections — Create connections with default and custom services
- Use Connections — Utilize connections within your extension code
- Update Connections — Modify existing connections
- Delete Connections — Remove connections no longer needed
Connection Lifecycle
- Create — Set up connection in Sigma
- Configure — Add to plugin-manifest.json
- Use — Reference in extension code
- Update — Modify connection details when needed
- Delete — Remove when no longer needed
Best Practices
- Use descriptive connection link names
- Document which connections are required
- Test all connections before publishing
- Never hardcode credentials in extension code
- Request only necessary scopes
- Handle cases when a connection is unavailable
Troubleshooting
| Problem | Solution |
|---|---|
| Connection not working | Verify connection created successfully, check JSON in manifest, confirm connectionLinkName spelling |
| Authorization failures | Verify user has connected the service, check credentials are valid, review scope requirements |
| Request failures | Verify API endpoint is correct, check request method and parameters, review error logs |