I developed a standalone application using REST API to extract Salesforce data using a Connected App. The application uses OAuth 2.0 Web Server Flow to authenticate users. I am following the specified guidelines for extraction such as the maximum number of API Calls.

The Connected App was created in my organization, therefore I have access to Secret Key and Client ID. This is not a Canvas Connected App, as I need to trigger the extraction from outside of Salesforce. I know how to package a Canvas Connected app, but I haven't found information regarding how to distribute a Connected App.

1. How can I distribute this Connected App to my clients?
2. How will this standalone application be tested during the security review?
3. In case it is not possible to distribute the connected app. Every client needs to create their own Connected App, and introduce the Client ID + Secret Key in the standalone application?

Thanks in advance!

I developed a standalone application using REST API to extract Salesforce data using a Connected App. The application uses OAuth 2.0 Web Server Flow to authenticate users. I am following the specified guidelines for extraction such as the maximum number of API Calls.

The Connected App was created in my organization, therefore I have access to Secret Key and Client ID. This is not a Canvas Connected App, as I need to trigger the extraction from outside of Salesforce. I know how to package a Canvas Connected app, but I haven't found information regarding how to distribute a Connected App.

1. How can I distribute this Connected App to my clients?
2. How will this standalone application be tested during the security review?
3. In case it is not possible to distribute the connected app. Every client needs to create their own Connected App, and introduce the Client ID + Secret Key in the standalone application?