-
What is difference between user agent flow, web server flow and Username-Password OAuth Authentication Flow in Salesforce?
In Salesforce, what is the difference between user agent flow, web server flow and Username-Password OAuth Authentication Flow?
-
1 Reply
-
- Web server flow (In OAuth spec terms, Authorization Code Grant) tends to be used for web applications where server-side code needs to interact with Force.com APIs on the user's behalf, for example DocuSign:Tokens are sent directly from the Authorization Server to the OAuth Client app, providing a high level of security.
- Username-Password flow (Resource Owner Password Credentials Grant) can be used for testing, or for apps that operate non-interactively, such as legacy integrations, without a user to actively give authorization:
$ curl -d 'grant_type=password&client_id=3MV_CLIENT_ID&client_secret=1234&username=user@example.com&password=password' \
https://login.salesforce.com/services/oauth2/token{
"id":"https://login.salesforce.com/id/ORG_ID/USER_ID",
"issued_at":"1385271368428",
"instance_url":"https://na15.salesforce.com",
"signature":"Vcz4TlGBQJCwJzNtH3AHT/kUFLM4N/sFrJODX2ZNuyE=",
"access_token":"00D_ACCESS_TOKEN"
}Username-password is generally discouraged and should be used only where no other alternative is available, due to the inherent problems with passwords.
- User-Agent flow (Implicit Grant) tends to be used for mobile or desktop applications, for example Salesforce1 or Mobile SDK apps:Tokens are returned to the Client app via a 'hash fragment' on a URL.
Log In to reply.
Popular Salesforce Blogs
What are Salesforce Big Objects? | The Developer Guide
We are all aware that Salesforce objects are used to manage and tinker with our data. Standard objects, custom objects, and external objects are likely…
Validation Rules in Salesforce | A Brief Guide by Salesforce Developer
The main purpose of using Salesforce validation rule verifies that the data a user enters in a record meets the standards you specify before the…
Salesforce Duplicate Management | The key to cut down the roots of duplicity
Duplicity is the bane of any database. On average, 40- 50% of a company’s data has duplicate copies spread all across the organization. These copies…
Popular Salesforce Videos
Can Non-IT People Make their Career In Salesforce?
This video focuses on if non-IT people can make a career in Salesforce. Salesforce is a customer relationship management (CRM) platform that offers various roles…
Introducing the New gRPC-based Pub Sub API | Salesforce Developer Quick Takes
Learn about the Pub Sub API, a new gRPC-based API that exposes the power of the Salesforce Event Bus. Discover the technology, its use cases,…
Salesforce Training Videos For Beginners - 1 | Salesforce Administrator Training
This Salesforce Training Video will help you understand which is the easy and best tool for CRM, Branding, tabs and homepage optimization. This is an…
