Saasli / saasli-backend

Documentation
https://saasli.github.io/docs/
0 stars 0 forks source link

Move away from User Credential based Auth #13

Open godd9170 opened 8 years ago

godd9170 commented 8 years ago

Yeah sure, we get authorization to Salesforce with credentials and the work done in #5, but it sucks that if the user we auth with changes their password, or their token rotates - we lose auth.

Salesforce has a couple of ways of avoiding this

1) Get Designated User

2) Create an Authorized App

3) Expose Certain tables to anonymous data access via REST calls. Found here http://www.wadewegner.com/2013/03/creating-anonymous-rest-apis-with-salesforce-com/ . Could be a way around relying on a client username and password for Auth each api call.