Tell me more ×
Salesforce Stack Exchange is a question and answer site for Salesforce administrators, implementation experts, developers and anybody in-between. It's 100% free, no registration required.
up vote 2 down vote favorite

Can this be true that if we use Salesforce OAuth to grant login to a desktop app, then after validating and receiving tokens -> access, refresh etc) if client workstation switches Internet Connections i.e switching from a LAN to Wireless (different ISPs) it will throw errors when accessing data via those tokens?

share|improve this question

2 Answers

up vote 4 down vote

There is nothing OAuth specific, however there are salesforce features that related to networks, e.g. if "Lock sessions to the IP address from which they originated" is turned on, and you used your refresh token to get an access token while on the LAN, that access token is not going to work when you change ISPs.

Also, using the token endpoint to get a new access token is subject to the users profile IP range restrictions, and also login time windows.

share|improve this answer
Yes from Salesforce perspective of OAuth, I've further refined the error situation to might be occurring due to Trusted IP Range entered in user's Salesforce Instance under Setup -> Security Controls -> Network Access. Do you or anyone know how can we determine if User has been restricted due to Network Access settings of Trusted IP Range via API in .Net? – Varun Chaddha Jan 22 at 16:08
@superfell Thanks for the explanation.Loved It! – Mohith Kumar Jan 22 at 16:16
@vc4u Check out the Metadata API. You can read lockSessionsToIp in the org's SessionSettings and ipRanges in the org and user profile. You can access the Metadata API from .Net via its WSDL. – metadaddy♦ Jan 22 at 17:01
@superfell thanks for the reply. I checked and I found "Lock sessions to the IP address from which they originated" as unchecked. So, by theory, access_token should not cause any trouble even if the ISP is changed at client workstation? The troubling part for me has been that I could test run the same settings perfectly fine at my workstation. I tried checking if Session time out could have caused the SOAP exception when calling SOQL query via api but that also didn't caused the trouble since I fetch new access_token if session has expired using refresh_token. – Varun Chaddha Jan 23 at 8:16
up vote 3 down vote

The OAuth 2.0 Authorization Framework

The OAuth 2.0 Authorization Framework: Bearer Token Usage

The OAuth access token is just passed as a bearer token in the HTTP request and hence there is no reason this should throw errors. Yes, if the time period of the access token has expired then the error may occur and then we can always use the refresh token to again obtain the access token.

share|improve this answer
@metadaddy .thanks for removing the glitches and making the answer look much better. – Mohith Kumar Jan 22 at 16:19

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.