How to Integrate Replit with QuickBooks

1const express = require('express');
2const OAuthClient = require('intuit-oauth');
3
4const app = express();
5app.use(express.json());
6
7// Initialize Intuit OAuth client from Replit Secrets
8const oauthClient = new OAuthClient({
9  clientId: process.env.QB_CLIENT_ID,
10  clientSecret: process.env.QB_CLIENT_SECRET,
11  environment: process.env.QB_ENVIRONMENT || 'sandbox', // 'sandbox' or 'production'
12  redirectUri: process.env.QB_REDIRECT_URI
13});
14
15// In-memory token storage (use a database in production)
16let authToken = null;
17let companyId = null;
18
19// Load tokens from Replit Secrets if already authorized
20if (process.env.QB_ACCESS_TOKEN && process.env.QB_REFRESH_TOKEN) {
21  authToken = {
22    access_token: process.env.QB_ACCESS_TOKEN,
23    refresh_token: process.env.QB_REFRESH_TOKEN
24  };
25  companyId = process.env.QB_COMPANY_ID;
26  console.log('QuickBooks tokens loaded from Secrets');
27}
28
29// Step 1: Redirect user to QuickBooks authorization page
30app.get('/auth/quickbooks', (req, res) => {
31  const authUri = oauthClient.authorizeUri({
32    scope: [OAuthClient.scopes.Accounting, OAuthClient.scopes.OpenId],
33    state: 'replit-qb-integration'
34  });
35  res.redirect(authUri);
36});
37
38// Step 2: Handle callback — exchange code for tokens
39app.get('/auth/callback', async (req, res) => {
40  const parseRedirect = req.url;
41  try {
42    const authResponse = await oauthClient.createToken(parseRedirect);
43    authToken = authResponse.getJson();
44    companyId = req.query.realmId;
45
46    console.log('QuickBooks authorized! Company ID:', companyId);
47    console.log('Access token expires in 60 minutes');
48    console.log('Store these in Replit Secrets:');
49    console.log('QB_ACCESS_TOKEN:', authToken.access_token);
50    console.log('QB_REFRESH_TOKEN:', authToken.refresh_token);
51    console.log('QB_COMPANY_ID:', companyId);
52
53    res.send('QuickBooks connected successfully! Check your console for tokens to save to Replit Secrets.');
54  } catch (err) {
55    console.error('OAuth callback error:', err);
56    res.status(500).send('Authorization failed: ' + err.message);
57  }
58});
59
60// Refresh the access token when it expires
61async function refreshAccessToken() {
62  try {
63    oauthClient.setToken(authToken);
64    const authResponse = await oauthClient.refresh();
65    authToken = authResponse.getJson();
66    console.log('QuickBooks token refreshed successfully');
67    // In production, persist the new tokens to your database or update Secrets via API
68    return authToken;
69  } catch (err) {
70    console.error('Token refresh failed:', err);
71    throw err;
72  }
73}
74
75// Helper: make authenticated API call with auto-refresh
76async function qbApiCall(url, options = {}) {
77  if (!authToken) throw new Error('QuickBooks not authorized — visit /auth/quickbooks first');
78
79  const makeRequest = async (token) => {
80    const env = process.env.QB_ENVIRONMENT || 'sandbox';
81    const baseUrl = env === 'production'
82      ? 'https://quickbooks.api.intuit.com'
83      : 'https://sandbox-quickbooks.api.intuit.com';
84
85    return fetch(`${baseUrl}${url}`, {
86      ...options,
87      headers: {
88        'Authorization': `Bearer ${token.access_token}`,
89        'Accept': 'application/json',
90        'Content-Type': 'application/json',
91        ...options.headers
92      }
93    });
94  };
95
96  let response = await makeRequest(authToken);
97
98  // Auto-refresh on 401
99  if (response.status === 401) {
100    console.log('Token expired — refreshing...');
101    authToken = await refreshAccessToken();
102    response = await makeRequest(authToken);
103  }
104
105  if (!response.ok) {
106    const error = await response.text();
107    throw new Error(`QuickBooks API error ${response.status}: ${error}`);
108  }
109
110  return response.json();
111}
112
113module.exports = { oauthClient, qbApiCall, getCompanyId: () => companyId };
114
115app.listen(3000, '0.0.0.0', () => {
116  console.log('QuickBooks OAuth server running on port 3000');
117  console.log('Visit /auth/quickbooks to connect your QuickBooks account');
118});

1const { qbApiCall, getCompanyId } = require('./auth');
2const express = require('express');
3const app = express();
4app.use(express.json());
5
6// Find a customer by email
7async function findCustomerByEmail(email) {
8  const companyId = getCompanyId();
9  const query = `SELECT * FROM Customer WHERE PrimaryEmailAddr = '${email}'`;
10  const result = await qbApiCall(
11    `/v3/company/${companyId}/query?query=${encodeURIComponent(query)}&minorversion=65`
12  );
13  const customers = result.QueryResponse?.Customer || [];
14  return customers.length > 0 ? customers[0] : null;
15}
16
17// Create a new customer
18async function createCustomer(displayName, email, phone = '') {
19  const companyId = getCompanyId();
20  const customer = {
21    DisplayName: displayName,
22    PrimaryEmailAddr: { Address: email },
23    PrimaryPhone: phone ? { FreeFormNumber: phone } : undefined
24  };
25  const result = await qbApiCall(
26    `/v3/company/${companyId}/customer?minorversion=65`,
27    { method: 'POST', body: JSON.stringify(customer) }
28  );
29  return result.Customer;
30}
31
32// Create an invoice for a customer
33async function createInvoice(customerId, lineItems, dueDate = '') {
34  const companyId = getCompanyId();
35  const lines = lineItems.map((item, index) => ({
36    DetailType: 'SalesItemLineDetail',
37    Amount: item.quantity * item.unitPrice,
38    SalesItemLineDetail: {
39      ItemRef: { value: item.itemId, name: item.itemName },
40      Qty: item.quantity,
41      UnitPrice: item.unitPrice
42    }
43  }));
44
45  const invoice = {
46    CustomerRef: { value: customerId },
47    Line: lines,
48    DueDate: dueDate || undefined
49  };
50
51  const result = await qbApiCall(
52    `/v3/company/${companyId}/invoice?minorversion=65`,
53    { method: 'POST', body: JSON.stringify(invoice) }
54  );
55  return result.Invoice;
56}
57
58// Record a payment against an invoice
59async function recordPayment(customerId, invoiceId, amount, paymentDate) {
60  const companyId = getCompanyId();
61  const payment = {
62    CustomerRef: { value: customerId },
63    TotalAmt: amount,
64    TxnDate: paymentDate,
65    Line: [{
66      Amount: amount,
67      LinkedTxn: [{ TxnId: invoiceId, TxnType: 'Invoice' }]
68    }]
69  };
70
71  const result = await qbApiCall(
72    `/v3/company/${companyId}/payment?minorversion=65`,
73    { method: 'POST', body: JSON.stringify(payment) }
74  );
75  return result.Payment;
76}
77
78// API endpoints
79app.post('/invoices', async (req, res) => {
80  const { customerEmail, customerName, lineItems, dueDate } = req.body;
81  try {
82    let customer = await findCustomerByEmail(customerEmail);
83    if (!customer) {
84      customer = await createCustomer(customerName, customerEmail);
85      console.log(`Created new QuickBooks customer: ${customer.Id}`);
86    }
87    const invoice = await createInvoice(customer.Id, lineItems, dueDate);
88    res.json({ success: true, invoiceId: invoice.Id, docNumber: invoice.DocNumber });
89  } catch (err) {
90    console.error('Invoice creation error:', err);
91    res.status(500).json({ error: err.message });
92  }
93});
94
95app.post('/payments', async (req, res) => {
96  const { customerId, invoiceId, amount, paymentDate } = req.body;
97  try {
98    const payment = await recordPayment(customerId, invoiceId, amount, paymentDate);
99    res.json({ success: true, paymentId: payment.Id });
100  } catch (err) {
101    res.status(500).json({ error: err.message });
102  }
103});
104
105app.listen(3000, '0.0.0.0', () => console.log('QuickBooks API server running'));

1# Python example for token refresh using requests-oauthlib
2import os
3import requests
4import base64
5from datetime import datetime, timedelta
6
7CLIENT_ID = os.environ["QB_CLIENT_ID"]
8CLIENT_SECRET = os.environ["QB_CLIENT_SECRET"]
9ENVIRONMENT = os.environ.get("QB_ENVIRONMENT", "sandbox")
10
11# Token storage (in production, use a database)
12access_token = os.environ.get("QB_ACCESS_TOKEN", "")
13refresh_token = os.environ.get("QB_REFRESH_TOKEN", "")
14company_id = os.environ.get("QB_COMPANY_ID", "")
15
16def refresh_access_token() -> dict:
17    """Exchange refresh token for new access token."""
18    global access_token, refresh_token
19
20    token_url = "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer"
21    credentials = base64.b64encode(f"{CLIENT_ID}:{CLIENT_SECRET}".encode()).decode()
22
23    response = requests.post(
24        token_url,
25        headers={
26            "Authorization": f"Basic {credentials}",
27            "Content-Type": "application/x-www-form-urlencoded"
28        },
29        data={
30            "grant_type": "refresh_token",
31            "refresh_token": refresh_token
32        }
33    )
34    response.raise_for_status()
35    tokens = response.json()
36
37    access_token = tokens["access_token"]
38    refresh_token = tokens["refresh_token"]  # Save the new refresh token!
39    print(f"Tokens refreshed. New access token expires in {tokens['expires_in']}s")
40    print(f"Update QB_REFRESH_TOKEN in Replit Secrets to: {refresh_token[:20]}...")
41    return tokens
42
43def api_call(endpoint: str, method: str = "GET", body: dict = None) -> dict:
44    """Make an authenticated QuickBooks API call with auto-refresh."""
45    global access_token
46
47    base = "https://sandbox-quickbooks.api.intuit.com" if ENVIRONMENT == "sandbox" \
48           else "https://quickbooks.api.intuit.com"
49    url = f"{base}/v3/company/{company_id}{endpoint}"
50
51    def make_request(token):
52        headers = {
53            "Authorization": f"Bearer {token}",
54            "Accept": "application/json",
55            "Content-Type": "application/json"
56        }
57        if method == "POST" and body:
58            return requests.post(url, headers=headers, json=body, params={"minorversion": 65})
59        return requests.get(url, headers=headers, params={"minorversion": 65})
60
61    response = make_request(access_token)
62
63    if response.status_code == 401:
64        print("Token expired — refreshing...")
65        refresh_access_token()
66        response = make_request(access_token)
67
68    response.raise_for_status()
69    return response.json()
70
71# Example: get company info
72if __name__ == "__main__":
73    result = api_call("/companyinfo/" + company_id)
74    print("Company:", result["CompanyInfo"]["CompanyName"])