figma-enterprise-rbac

# Figma Enterprise RBAC ## Overview Figma Enterprise features accessible via the REST API: OAuth 2.0 for user-facing apps, team/project management, and the Variables API (Enterprise-only). This skill covers building OAuth integrations and managing organizational access. ## Prerequisites - Figma Enterprise or Organization plan - OAuth app registered in Figma developer dashboard - Understanding of OAuth 2.0 authorization code flow ## Instructions ### Step 1: OAuth 2.0 App Setup ```typescript // Figma OAuth 2.0 Authorization Code Flow // 1. Build authorization URL function getAuthUrl(state: string): string { const params = new URLSearchParams({ client_id: process.env.FIGMA_CLIENT_ID!, redirect_uri: process.env.FIGMA_REDIRECT_URI!, scope: 'file_content:read,file_comments:write,file_variables:read', state, response_type: 'code', }); return `https://www.figma.com/oauth?${params}`; } // 2. Exchange authorization code for tokens (within 30 seconds!) async function exchangeCode(code: string): Promise<{ access_token: string; refresh_token: string; expires_in: number; user_id: string; }> { const res = await fetch('https://api.figma.com/v1/oauth/token', { method: 'POST', headers: { 'Content-Type': 'application/x-www-form-urlencoded' }, body: new URLSearchParams({ client_id: process.env.FIGMA_CLIENT_ID!, client_secret: process.env.FIGMA_CLIENT_SECRET!, redirect_uri: process.env.FIGMA_REDIRECT_URI!, code, g...