HMRC OAuth Flow
The app uses HMRC’s OAuth 2.0 flow to authenticate users.
Steps
- Redirect user to HMRC login
- User signs in with Government Gateway
- HMRC returns an authorization code
- App exchanges the code for an access token
- Token is stored securely
- Token is refreshed automatically when needed
Sandbox vs Production
HMRC provides a sandbox environment for testing.
More details will be added once full submission features are implemented.