-
What is difference between user agent flow, web server flow and Username-Password OAuth Authentication Flow in Salesforce?
In Salesforce, what is the difference between user agent flow, web server flow and Username-Password OAuth Authentication Flow?
-
1 Reply
-
- Web server flow (In OAuth spec terms, Authorization Code Grant) tends to be used for web applications where server-side code needs to interact with Force.com APIs on the user's behalf, for example DocuSign:Tokens are sent directly from the Authorization Server to the OAuth Client app, providing a high level of security.
- Username-Password flow (Resource Owner Password Credentials Grant) can be used for testing, or for apps that operate non-interactively, such as legacy integrations, without a user to actively give authorization:
$ curl -d 'grant_type=password&client_id=3MV_CLIENT_ID&client_secret=1234&username=user@example.com&password=password' \
https://login.salesforce.com/services/oauth2/token{
"id":"https://login.salesforce.com/id/ORG_ID/USER_ID",
"issued_at":"1385271368428",
"instance_url":"https://na15.salesforce.com",
"signature":"Vcz4TlGBQJCwJzNtH3AHT/kUFLM4N/sFrJODX2ZNuyE=",
"access_token":"00D_ACCESS_TOKEN"
}Username-password is generally discouraged and should be used only where no other alternative is available, due to the inherent problems with passwords.
- User-Agent flow (Implicit Grant) tends to be used for mobile or desktop applications, for example Salesforce1 or Mobile SDK apps:Tokens are returned to the Client app via a 'hash fragment' on a URL.
Log In to reply.
Popular Salesforce Blogs
Benefits of Salesforce Native Applications for The Growth of Businesses
Salesforce has emerged as a key player, providing a versatile platform for organizations to manage their customer relationships, streamline processes, and drive growth. One of the…
Salesforce Winter ‘20 Release Updates - Everything You Need To Know
It may still be summer, but winter is coming. It’s already time to start preparing for the Winter ‘20 release. With just over 3 weeks…
What are Apex Triggers? | All You Need to Know
Before reading this blog, you must have basic knowledge of Apex Language and SOQL. Apex triggers can invoke apex code and enable you to perform…
Popular Salesforce Videos
Welcome to the New World of Data Collection | Salesforce
Secure data collection built for your needs. With FormAssembly, your organization can streamline outdated processes and power important business initiatives. Click the link below to…
How To Set Up A Site On Salesforce | Salesforce Development Tutorial
Learn how to set up a site on Salesforce. This tutorial will cover the following points - 1. Create Public Websites Choose a branded URL…
How to Learn Salesforce Fast? Explained.
How to learn Salesforce in six months and get your first job in the industry. Learning Salesforce these days is challenging because the platform is…
