This is the definitive masterclass covering every social platform API, OAuth flow, rate limit, and troubleshooting scenario for the CRM's Social Media Module.

Understanding OAuth 2.0 for Social APIs

All modern social APIs use OAuth 2.0 for authorization. The basic flow is:

  1. Your app redirects the user to the platform's authorization URL with your Client ID and requested scopes.
  2. The user logs in and grants permission.
  3. The platform redirects back to your CRM with an authorization code.
  4. Your CRM exchanges the code for an access token.
  5. The CRM uses the access token for all subsequent API calls.

Platform Rate Limits Summary

  • Facebook/Instagram: 200 calls per hour per user token
  • X (Twitter): 1,500 tweets/month (Free), 3,000 (Basic)
  • LinkedIn: 100 API calls per day per user
  • Pinterest: 1,000 requests per hour
  • Google My Business: 7,500 requests per day

Token Lifespan by Platform

  • Facebook Page tokens: Never expire (long-lived)
  • Instagram: 60 days (refreshable)
  • LinkedIn: 60 days
  • X (Twitter): Never expire (OAuth 1.0a user tokens)
  • Pinterest: Never expire for most scopes
  • Google: 1 hour (access token), refresh token is permanent
💡 Best Practice: The CRM automatically handles token refresh for all platforms. Simply reconnect when the CRM notifies you of an expired connection.