forcedotcom / forcedotcom/wsc

Support OAUTH 2.0 JWT Bearer auth flow for server to server integrations

Open
#288 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
276
Forks
223
PR merge metrics
No merged PRs in 30d

Description

With the current version of the WSC library there is no support for the JWT Bearer authentication flow as documented by this link:

https://help.salesforce.com/s/articleView?id=sf.remoteaccess_oauth_jwt_flow.htm&type=5

Since support for this is required for security reasons by an application we manage that uses this library would it be possible to create a pull request to add support for this and have it reviewed and approved to be integrated into the library itself??

It would probably require to add a KeyStore management method to the standard ConnectorConfig object so that a client private key + certificate can be added and trigger the above authentication method instead of the regular password based one.

As things stand right now there is no way to directly use this library with the above mentioned auth flow.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the standard ConnectorConfig object and the linked Salesforce OAuth JWT Bearer flow documentation. Determine how private key and certificate material should be configured and how that selection should trigger the JWT Bearer flow instead of password authentication; done means the library supports server-to-server JWT authentication.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authentication
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.