Can this be true that if we use Salesforce OAuth to grant login to a desktop app, then after validating and receiving tokens -> access, refresh etc) if client workstation switches Internet Connections i.e switching from a LAN to Wireless (different ISPs) it will throw errors when accessing data via those tokens?
- Anybody can ask a question
- Anybody can answer
- The best answers are voted up and rise to the top
There is nothing OAuth specific, however there are salesforce features that related to networks, e.g. if "Lock sessions to the IP address from which they originated" is turned on, and you used your refresh token to get an access token while on the LAN, that access token is not going to work when you change ISPs.
Also, using the token endpoint to get a new access token is subject to the users profile IP range restrictions, and also login time windows.
The OAuth access token is just passed as a bearer token in the HTTP request and hence there is no reason this should throw errors. Yes, if the time period of the access token has expired then the error may occur and then we can always use the refresh token to again obtain the access token.