Hi,
I am trying to call an external app API.
I found on your documentation two types of setting on manifest.json.
Last question, according to what i read, I understood about OAuth flow that an Authorization request should be created with Post request and passing ClientID and Client secret... should be post to grant the token, I found on your documentation that you send the request of Get, you are not requesting the token before you get the data, What if that saved token which you pass it in header is expired. please clarify.
Samer

The oAuth parameter is a controlled type that you need to use if you want oauth to function correctly. We cover this in our documentation here. You shouldn't be inputting the token in advance, the application will create and store this.
Lastly our "get" example is just showing how to call an endpoint that uses oauth. The authorization flow uses a POST to handle the auth. You can read about that here.
Thanks!