April 2025

Release notes explain new features and improvements made to ONESOURCE API Administration.

What's new

Angular v11 to v18
ONESOURCE Platform and ONESOURCE API Administration are upgrading their Angular version from v11 to v18. This upgrade is necessary because Angular ended security support for v11 in May 2022. Version 18 has long-term support until November 2025.
We plan to upgrade to v19. However, it is currently on hold because Wijmo has known issues with v19. Once Wijmo resolves these issues, we can proceed with the upgrade to v19 (or v20 when it is released).
This upgrade will only affect people using Internet Explorer (IE) or IE mode on Edge. We're stopping support for IE and IE mode on Edge. If you aren't using IE or IE mode on Edge, you shouldn't notice any changes. There should be no impact on ONESOURCE Platform or ONESOURCE API Administration works for you.
Enhanced token generation
We are improving how we create tokens by adding the use of Refresh Tokens to get a new Access Token. Refresh Tokens make things more secure by letting you use them to get an Access Token, instead of entering your client details every time.
You can use Refresh Tokens to generate Access Tokens when you make small changes to the current request and response set up for the
oauth2/v1/token
token endpoint. If the authorization server generates a Refresh Token to the client, the client then makes a refresh request to the token endpoint. Include the following details in the
application/x-www-form-urlencoded
format with UTF-8 encoding in the HTTP request body:
  • grant_type
    :
    • REQUIRED. The value is
      refresh_token
      .
  • refresh_token
    :
    • REQUIRED. The refresh token given to the client.
The authorization server cancels the old refresh token after giving a new one to the client. The refresh token is valid for 24 hours.
token request
Token example:
{ "success": "approved", "token": "Q6xju6vAldl93dYGHVLRAYYWvfBO", "access_token": "Q6xju6vAldl93dYGHVLRAYYWvfBO", "token_type": "Bearer", "expires_in": "3599", "issued_at": "1731599839259", "client_id": "MhcFTBLWNhYKUnFRntXMYHuctveGn0aX", "refresh_token": "MeYroFkslQKkRh8A3qzDekfuQm+1nVFpJRTSg2wN/5k=" }
Curl of refresh token request:
curl --location 'https://api-cloud-dev2.onesourcetax.com/oauth2/v1/token' \ --header 'Content-Type: application/x-www-form-urlencoded' \ --header 'Cookie: LSLanguage=en-US' \ --data-urlencode 'grant_type=refresh_token' \ --data-urlencode 'refresh_token=BOzu3ValnVOefCDTDeJsUfz8vafe4hSZ9YHCmiEz'