I am writing an extension for an email client that will integrate emails and contacts from Salesforce.
It looks like the correct way to do the oauth thing will be using the User-Agent Flow method.
Is this the best way?
How do you handle the
redirect_uri in a desktop app?
Is there any open-source example of the procedure using eg. WebKit?
Does the Token Refresh action require a browser window/user intervention again or does it happen behind the scenes?
Why is the
client_secret optional for Token Refresh? What would adding it achieve?