-
What is difference between user agent flow, web server flow and Username-Password OAuth Authentication Flow in Salesforce?
In Salesforce, what is the difference between user agent flow, web server flow and Username-Password OAuth Authentication Flow?
-
1 Reply
-
- Web server flow (In OAuth spec terms, Authorization Code Grant) tends to be used for web applications where server-side code needs to interact with Force.com APIs on the user's behalf, for example DocuSign:Tokens are sent directly from the Authorization Server to the OAuth Client app, providing a high level of security.
- Username-Password flow (Resource Owner Password Credentials Grant) can be used for testing, or for apps that operate non-interactively, such as legacy integrations, without a user to actively give authorization:
$ curl -d 'grant_type=password&client_id=3MV_CLIENT_ID&client_secret=1234&[email protected]&password=password' \
https://login.salesforce.com/services/oauth2/token{
"id":"https://login.salesforce.com/id/ORG_ID/USER_ID",
"issued_at":"1385271368428",
"instance_url":"https://na15.salesforce.com",
"signature":"Vcz4TlGBQJCwJzNtH3AHT/kUFLM4N/sFrJODX2ZNuyE=",
"access_token":"00D_ACCESS_TOKEN"
}Username-password is generally discouraged and should be used only where no other alternative is available, due to the inherent problems with passwords.
- User-Agent flow (Implicit Grant) tends to be used for mobile or desktop applications, for example Salesforce1 or Mobile SDK apps:Tokens are returned to the Client app via a 'hash fragment' on a URL.
Log In to reply.
Popular Salesforce Blogs
Top Salesforce Acquisitions of All-Time-Updated 2021
Salesforce is growing at an inconceivably quick rate. The cloud computing company is on a quest to recognize gaps in their existing portfolio and fill…
No Code Salesforce and WhatsApp Integration
Businesses are increasingly using messaging as their primary channel for customer communication. Each week, more than a billion users connect with a business account using…
How Does Salesforce for Small Businesses Help to Get Leads?
You all have heard that Salesforce for small businesses is changing the gear of every operation. But you might not be aware of the actual…
Popular Salesforce Videos
Replicate Salesforce Data in Real-Time with Change Data Capture
In this video, we will see how to replicate Salesforce data Migrate your batch processing, scheduled ETL, and nightly workloads to event-driven, real-time integrations using…
Introducing the New gRPC-based Pub Sub API | Salesforce Developer Quick Takes
Learn about the Pub Sub API, a new gRPC-based API that exposes the power of the Salesforce Event Bus. Discover the technology, its use cases,…
Code Review in Salesforce
Code Review and Code Quality in Salesforce 0:00 Introduction 0:44 What is code review? 1:22 Why we need code review 3:33 Basic code review 4:12…
