We are implamenting a chatbot using the OAuth 2.0 JWT Bearer Token Flow and see the above errors in the browser client degugger. We already have a valid access token and the origin has already been white-listed in SalesForce. Has anyone else ran across these errors?
To Summerize what fixed this issue for us:
- We added the Integration User to the Site (Community).
- Selected the Orgwide session setting - Setup > Security > Session Settings - "Activate the Lock sessions to the IP address from which they originated"