canva-install-auth

# Canva Connect API — Install & Auth ## Overview Set up a Canva Connect API integration with OAuth 2.0 Authorization Code flow with PKCE (SHA-256). The Canva Connect API is a REST API at `https://api.canva.com/rest/v1/*` — there is no SDK package. All calls use `fetch` or `axios` with Bearer tokens. ## Prerequisites - Node.js 18+ (for native `crypto.subtle` and `fetch`) - A Canva account at [canva.com](https://www.canva.com) - An integration registered at [canva.dev](https://www.canva.dev/docs/connect/creating-integrations/) ## Instructions ### Step 1: Register Your Integration 1. Go to **Settings > Integrations** at [canva.com/developers](https://www.canva.com/developers) 2. Create a new integration — note your **Client ID** and **Client Secret** 3. Add redirect URI(s): e.g. `http://localhost:3000/auth/canva/callback` 4. Enable required scopes under **Permissions** ### Step 2: Store Credentials ```bash # .env (NEVER commit — add to .gitignore) CANVA_CLIENT_ID=OCAxxxxxxxxxxxxxxxx CANVA_CLIENT_SECRET=xxxxxxxxxxxxxxxx CANVA_REDIRECT_URI=http://localhost:3000/auth/canva/callback ``` ```bash echo '.env' >> .gitignore echo '.env.local' >> .gitignore ``` ### Step 3: Implement OAuth 2.0 PKCE Flow ```typescript // src/canva/auth.ts import crypto from 'crypto'; // 1. Generate PKCE code verifier and challenge export function generatePKCE(): { verifier: string; challenge: string } { const verifier = crypto.randomBytes(64).toString('base64url'); // 43-128 chars const cha...