[source-salesforce] Add OAuth 2.0 JWT Bearer authentication
- Lenguaje dominante
- Python
- Estrellas
- 22.1k
- Forks
- 5.3k
- Métricas de merge de PR
- Métricas de PR pendientes
Descripción
## Topic
Add Salesforce's OAuth 2.0 JWT Bearer Token flow as a second authentication method for `source-salesforce`.
## Relevant information
**Connector:** source-salesforce
**Current released version:** 2.7.23
**Type:** Enhancement / feature request (backwards-compatible, additive)
### Problem / motivation
`source-salesforce` only supports the OAuth 2.0 **refresh-token** flow (`client_id` + `client_secret` + `refresh_token`). That flow requires:
* human authorization, which isn't always available
* storing a long-lived client secret + refresh token
Salesforce's [OAuth 2.0 JWT Bearer Token flow](https://help.salesforce.com/s/articleView?id=sf.remoteaccess_oauth_jwt_flow.htm&type=5) is the standard answer for this: the client signs a short-lived RS256 JWT with the connected app's private key and exchanges it for an access token — **no refresh token and no client secret required**.
### Proposed solution
Add JWT bearer as a parallel auth method selected by an `auth_type` field, keeping the existing refresh-token path unchanged
### Scope / impact
- minor version bump: existing OAuth configs remain valid. no config migration, no impact to existing connections
### Willingness to contribute
- [x] Yes, I want to contribute.
Implementation + unit tests + docs are ready; happy to open a PR once this is triaged/assigned. Verified locally: 113 unit tests pass (5 new JWT tests) and `check` against a live JWT-configured connected app returns `SUCCEEDED`.
Guía de contribución
Evaluación
Este issue todavía no se ha evaluado.