Linked Questions

0 votes
1 answer
5k views

Salesforce API login limit issue [duplicate]

Our org is hitting total API limit per 24 hour. After reviewing the login event report, we found one of the external application is trying to access salesforce using username , password + security ...
Manish Anand's user avatar
5 votes
2 answers
3k views

JWT bearer token flow in web app

I am building a web app, which should allow my app users to fetch their Salesforce data for analysis. For this, I am using OAUTH2.0 web server flow. TO avoid refresh_token related complexities, I am ...
Manu Singhal's user avatar
3 votes
1 answer
3k views

invalid_grant: expired access/refresh token [closed]

I'm facing a issue and I can't figure out how to fixed it. This month (2021, June) started with a issue, the access token of several clients aren't refreshing, request is getting 400 Bad Request ...
Ana's user avatar
  • 31
1 vote
1 answer
2k views

(400) Bad Request when attempting to use refresh tokens

Our application interacts with our clients' Salesforce instances using the REST API and refresh tokens we have stored on our database. Every API request will use that refresh token to get an access ...
emroc's user avatar
  • 481
0 votes
2 answers
1k views

Authenticated Lightning Out with another Salesforce Org

Immediate Question: Is there a way to use authenticated Lightning Out with another Salesforce Org? We've currently got two Salesforce Orgs: Org A and Org B In Org A, we've created a flow that allows ...
sfdx's user avatar
  • 1,099
2 votes
1 answer
872 views

Connected App for API & Canvas App Settings seem to contradict each other

We're trying to use the same connected app (using Web Server flow) for two purposes: 1) Allow API calls to Salesforce via an external website and 2) Use Canvas App to embed that external website into ...
Brian Miller's user avatar
  • 5,162
0 votes
2 answers
357 views

REST API Authentication for server process

We have a process creating Salesforce leads. The process is server-side and automatic. As a result there isn't a Salesforce user nor a browser for traditional OAuth. What is the most appropriate ...
Brian Low's user avatar
  • 341
0 votes
0 answers
426 views

Is it possible to determine the reason an oauth/access token was revoked or expired?

We're using a 3rd party webform tool (FormTitan) that pushes data into Salesforce using an oauth connection. The connection was reset unexpectedly which caused the form to start failing. The message ...
duncanm's user avatar
  • 35
1 vote
2 answers
211 views

Force.com Rest API checking refresh_token if still valid or not

I am currently developing who requesting a rest api from salesforce. I am successfully getting a refresh_token as a response of my authorization with php curl. I want to know if is there any way to ...
Danryl Tigol Carpio's user avatar
1 vote
1 answer
134 views

Refreshing Access Token generated unexpected 'invalid_grant: expired access/refresh token'

When I authenticated using oAuth, I received an access token and a refresh token, with which I am able to query data from Salesforce. The access token is working correctly, but once it expires, I ...
Z0q's user avatar
  • 155
1 vote
0 answers
51 views

Unable to reliably obtain refresh tokens and expiration times for different customers [closed]

We have a product that allows our customers to do a basic integration with Salesforce. This integration allows them to track time in our software against Tasks and Opportunities in their Salesforce ...
Urkle's user avatar
  • 111