Chemilla Labels

Integration credentials

Provision a dedicated service account for an external print client and manage its secret lifecycle safely.

About 5 minutes

What is supported

The Integrations page creates tenant-scoped Doorman service accounts with permission to enqueue print jobs. It also exposes the token URL, audience, scope, tenant header value, and Labels print endpoint.

No built-in Odoo connector or generic webhook workflow is documented here. External software integrates through OAuth client credentials and POST /v2/jobs.

Create credentials

  1. 1

    Open Integrations

    Use the tenant that owns the templates, printers, and jobs the client should access.

  2. 2

    Choose Create credentials

    Give the client a specific name such as ERP production print.

  3. 3

    Copy the API key and secret

    The secret is displayed only once. Store it in the external system's secret manager before closing the dialog.

  4. 4

    Copy the public configuration

    Save the token URL, audience, scope, tenant ID, and print endpoint alongside the client configuration.

  5. 5

    Test one print

    Use a non-sensitive template and payload, then verify the returned job from Jobs.

Store the client configuration

dotenv
LABELS_API_KEY=replace-with-api-key
LABELS_API_SECRET=replace-with-secret
LABELS_TENANT_ID=replace-with-tenant-id
DOORMAN_TOKEN_URL=https://your-doorman.example/oauth2/token
DOORMAN_AUDIENCE=urn:doorman:app:replace-with-app-id
DOORMAN_SCOPE=doorman
LABELS_PRINT_ENDPOINT=https://your-labels.example/v2/jobs

Rotate or revoke

  • Rotate secret creates a new secret and immediately invalidates the old one. Update the client before its next print request.
  • Delete revokes the service account. Existing tokens stop being suitable for future access as authorization expires or is re-evaluated.
  • Use the Active status and creation date to audit which credentials are still expected.
  • After any change, send one controlled print and confirm the resulting job.