I am creating an external app, where I need to get the data from Salesforce.
I understand the use of Connected apps, and I won't be using the web based OAuth flow where user is redirected to https://login.salesforce.com with some parameters and provides the credentials, then is redirected back to the client app after successful authentication, so consider it a console application (not salesforce console app).
I have the Salesforce credentials, and connected app client id and secret too, but is there any way I don't need to provide salesforce credentials in my console app. I read some documentations, but there they are providing username, password, client id and secret. I was wondering if any reason is there we provide username and password with client id and secret. There are many systems which provide app id and secret so that we don't need to use the account credentials anywhere.
Can anybody help? Or may be any link to documentation where something like this is mentioned?