box / box-salesforce-sdk

This is the Salesforce SDK for integrating with the Box Platform.
https://developer.box.com/guides/tooling/sdks/salesforce/
Apache License 2.0
58 stars 51 forks source link

Consider using signWithCertificate when building the JWT signature #2

Open cmortimore opened 8 years ago

cmortimore commented 8 years ago

Instead of passing in the private key as base64, you can sign by reference to a private key managed by the platform.

Check out this method: https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_classes_restful_crypto.htm#apex_System_Crypto_signWithCertificate

bassman531 commented 8 years ago

@cmortimore Sorry for the delay in responding here.

That's a good idea and should definitely be worked on.