Is Digital Signature mandatory for the oauth JWT token flow ? If not, how do I implement the flow without the certificate.A web server is supposed to send a request for the access token and I need to implement the flow without the certificate. Please share insights/thoughts/experiences.

  • welcome to SFDC! prior to posting a question, we recommend doing some research and asking a specific question in regards to whatever documentation you might have read and refer it in your post. Please take some time to review How to Ask and take the tour. – glls May 16 '17 at 2:10
  • as per your question, i would recommend reading help.salesforce.com/…… at the very least, and if you have specific questions on it, please edit your post. Thanks! – glls May 16 '17 at 3:17
  • Thanks @glls. I read the above document. I will edit the question to be more specific. – Sid455 May 16 '17 at 11:59

Yes, digital signature is mandatory, as this is a required part of JWT principle. Read more about.

There is an interesting question, where you will find to ways of using JWT: by means of new Auth.JWT class in combination with Auth.JWS, and custom by using basic apex classes

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.