airbytehq / airbytehq/airbyte

[source-salesforce] Add OAuth 2.0 JWT Bearer authentication

Abierto
#80,782 2 comentarios 1 reacción 0 asignados Ver en GitHub
autoteam community connectors/source/salesforce hyd-review team/use
Lenguaje dominante
Python
Estrellas
22.1k
Forks
5.3k
Métricas de merge de PR
Métricas de PR pendientes

Descripción

## Topic

Add Salesforce's OAuth 2.0 JWT Bearer Token flow as a second authentication method for `source-salesforce`.

## Relevant information

**Connector:** source-salesforce
**Current released version:** 2.7.23
**Type:** Enhancement / feature request (backwards-compatible, additive)

### Problem / motivation

`source-salesforce` only supports the OAuth 2.0 **refresh-token** flow (`client_id` + `client_secret` + `refresh_token`). That flow requires:
* human authorization, which isn't always available
* storing a long-lived client secret + refresh token

Salesforce's [OAuth 2.0 JWT Bearer Token flow](https://help.salesforce.com/s/articleView?id=sf.remoteaccess_oauth_jwt_flow.htm&type=5) is the standard answer for this: the client signs a short-lived RS256 JWT with the connected app's private key and exchanges it for an access token — **no refresh token and no client secret required**.

### Proposed solution

Add JWT bearer as a parallel auth method selected by an `auth_type` field, keeping the existing refresh-token path unchanged

### Scope / impact

- minor version bump: existing OAuth configs remain valid. no config migration, no impact to existing connections

### Willingness to contribute

- [x] Yes, I want to contribute.

Implementation + unit tests + docs are ready; happy to open a PR once this is triaged/assigned. Verified locally: 113 unit tests pass (5 new JWT tests) and `check` against a live JWT-configured connected app returns `SUCCEEDED`.

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.