Hello good afternoon to everyone.
A customer asked to do a salesforce integration for zendesk.
My question is, once I get the barer token from salesforce, how can I store it safely. I can't use localstorage.
The oauth2 client method that zendesk offers only allows me to put the static values in the manifest. but I need the clientid and client secret to be dynamic so that when each user that installs the app can log in through Oauth2.
Hi Eric! thanks for the reply.
The application connects Zendesk tickets with information in salesforce. Each user who downloads it from the market should enter their own Salesforce credentials to authenticate the app.
Zendesk allows you to manage the oauth2 in the manifest with the following:
Hey Cossio,
Thanks for the clarification! Though I'm not sure what you mean by sensible information. The bearer token returned from Salesforce should be hidden as it is only needed for authentication / requests and not for general use by the end user.
Due to that I'd suggest building your oauth configuration and flow into your application itself and use standard text parameters to have the users fill out the necessary criteria.
For example in your manifest file:
"parameters" : [
{
"name": "client_id",
"type": "text",
"secure": false,
"required": true
},
{
"name": "client_secret",
"type": "text",
"secure":false,
"required": true
}
],Then utilize those parameters in your application itself to initiate and handle the oauth flow.
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Hey Javier,
When configuring oauth the client id and client secret are global for the entire account / service. So for your customer they will only need one client id and client secret for all of their users. Can you explain to me why each user would need to have entirely separate oauth clients? As for the bearer token, you could use a hidden parameter to store the bearer token. Then interact / update it via the metadata api method.
Hope this helps,
Have a wonderful day!
Eric Nelson | Manager - Developer Advocacy