navan-install-auth

# Navan Install & Auth ## Overview Configure OAuth 2.0 client credentials for the Navan REST API. Navan has **no public SDK** — all API access uses raw REST calls with bearer tokens obtained via the client_credentials grant. **Purpose:** Obtain a working OAuth 2.0 bearer token for calling Navan API endpoints. ## Prerequisites - **Navan admin access** — you need the Admin or Travel Admin role - **Node.js 18+** (for TypeScript) or **Python 3.8+** (for Python) - A `.env`-aware project (dotenv for Node, python-dotenv for Python) - Navan Business tier or higher (free for up to 300 employees) ## Instructions ### Step 1: Create OAuth Credentials in Navan Dashboard Navigate to: **Admin > Travel admin > Settings > Integrations > Navan API Credentials > Create New** Save the `client_id` and `client_secret` immediately — credentials are **only viewable once**. If lost, you must revoke and regenerate. ### Step 2: Store Credentials Securely Create a `.env` file in your project root: ```bash # .env — NEVER commit this file NAVAN_CLIENT_ID="your-client-id-here" NAVAN_CLIENT_SECRET="your-client-secret-here" NAVAN_BASE_URL="https://api.navan.com" ``` Ensure `.env` is in your `.gitignore`: ```bash echo ".env" >> .gitignore ``` ### Step 3: Token Exchange (TypeScript) Install dependencies and implement the OAuth 2.0 client credentials flow: ```bash npm install dotenv ``` ```typescript import 'dotenv/config'; interface TokenResponse { access_token: string; token_type: strin...