FuseWP OAuth Broker

aid: fusewp:oauth-broker
name: FuseWP OAuth Broker
description: 'The hosted OAuth authorization broker FuseWP operates at auth.fusewp.com. The self-hosted
  FuseWP plugin cannot safely hold OAuth client secrets for the partner platforms it connects to, so it
  delegates the authorization-code and refresh-token exchange to this service. GET /{integration_id} (with
  fwpnonce and redirect_url query parameters) issues a 302 to the partner platform''s own authorize endpoint
  carrying FuseWP''s registered client_id, the auth.fusewp.com redirect_uri and the delegated scope set;
  GET /{integration_id}?refresh_token={token} returns a JSON body with a boolean `success` field plus
  refreshed credentials. Eleven integration ids resolve to a live 302 as probed on 2026-08-12: aweber,
  birdsend, campaignmonitor, constantcontact, copper, gohl (GoHighLevel), hubspot, keap, mailchimp, zohocrm
  and zohocampaigns. The service publishes no OpenAPI, no developer documentation and no /.well-known/
  discovery surface; the contract recorded here was derived from the GPL-licensed first-party plugin source
  (src/core/src/Integrations/AbstractIntegration.php) and confirmed by live probe.'
humanURL: https://fusewp.com/docs/
baseURL: https://auth.fusewp.com
tags:
- OAuth
- Authorization
- Integration
properties:
- type: Authentication
  url: authentication/fusewp-authentication.yml
- type: OAuthScopes
  url: scopes/fusewp-scopes.yml
- type: Conventions
  url: conventions/fusewp-conventions.yml
- type: RateLimits
  url: rate-limits/fusewp-rate-limits.yml