Questions tagged [authorization]

The tag has no usage guidance.

22 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
1answer
219 views

Insufficient Privileges for Public Group Memberships Page

A user is a part of multiple public groups in Salesforce and has a custom profile. When the user navigates to the personal information page and clicks on the 'Go To List' link available under the '...
4
votes
1answer
1k views

OAuth 2.0 JWT Bearer Token Flow - “user hasn't approved this consumer”

I am trying to get JWT Bearer Token Flow to work. But get the error user hasn't approved this consumer. I have read these posts: Salesforce JWT User Hasn't Approved This Consumer (Again) OAuth 2....
3
votes
1answer
671 views

JSForce - getting OAUTH2 refreshToken - variable app is not defined

I am clearly missing something called app here. I am following Authorization Request section from the documentation. It says your app is callbacked from Salesforce with authorization code in URL ...
3
votes
0answers
93 views

Secure communication between InstallHandler and third party application

During the installation of our package we need to fetch data (related to the installer organization) from a third party system (integration part of our solution). Like stated in the documentation ...
2
votes
0answers
582 views

Authorizing soap c# request errors

https://help.exacttarget.com/en/technical_library/api_overview/ In the above link it states "This element contains the customer's API username. A customer who uses the API creates a special user in ...
1
vote
0answers
52 views

Error invalid_grant - expired authorization code while running sfdx force:auth:jwt:grant

I run the command from my build job within Teamcity CI: sfdx force:auth:jwt:grant --clientid '%SFDX_HUB_CONSUMER_KEY%' --jwtkeyfile config/server.key --username %SFDX_HUB_USERNAME% --setalias hub1 --...
1
vote
2answers
105 views

How to incorporate Consumer id and consumer secret in my REST API (Apex class)

I have a requirement where some external web forms would be calling our REST API to submit Lead. I have created a connected app, got the consumer id and consumer secret. I want my apex class to be ...
1
vote
0answers
836 views

Salesforce DX - ENOENT error when trying to login

Recently I came upon an error which I cannot resolve. I have searched through google and did not manage to find the answer. I have installed salesforce CLI and when typing the command: in terminal:...
1
vote
0answers
70 views

Canvas app framing issue (how to define domain of RemoteAccessAuthorizationPage.apexp)

We implemented a tool which uses salesforce oauth. This tool should be included into an opportunity page as canvas app. First of all: The oauth2 workflow works fine when I open the tool in a new ...
1
vote
2answers
511 views

Rest Callout to External Resource, 401 Unauth Error, Cannot Set Api Key

I am having issues giving an API key to an external url for a rest callout. req.setHeader is where I attempt to do so. How should I structure this? I only get 401 unauth errors. I am trying to ...
1
vote
0answers
309 views

Web Browser XSS Protection Not Enabled

I have to scan HTTP Request and got this 2 low level risk. How to resolve this problem coming in ZAP Report?
0
votes
1answer
20 views

API access without username and password

I'm writing a simple nodejs application that signs in to the api with a username, password and security token, obtains an access token which is used to make api calls. Basically, the app is ready for ...
0
votes
0answers
29 views

Where should I carry out Salesforce App Third-Party User Authentication

Context We have developed a Salesforce Lightning App that is powered by our Apis. We are the third party. The App typically sits in a custom tab within the Contact or the Company pages. Our data is ...
0
votes
0answers
36 views

How can I prevent unauthenticated users from downloading an attachment?

I have a community and internal links to attachments. They end with ...servlet/servlet.FileDownload?file={ID} When the user clicks the link, a window.open(fileUrl) is called. This prompts to download....
0
votes
0answers
79 views

Cannot get session id in lightning component

I am trying to call a REST api from lightning, however i am getting 401, Unauthorized error. I know this question has been asked previously, but the solution they offered was to use a visualforce ...
0
votes
1answer
29 views

Can multiple autorization_code co-exist for a single integration user?

I have a single integration User, which is used to authenticate a background integration job. This uses web-server flow. And to avoid storing username/password on the server, I have only supplied ...
0
votes
0answers
23 views

Redirect from visualforce with basic authorization header

Is it possible to send a Basic Authorization header from a visualforce page and redirect a user to a different non-sf site? If not any way on how I can do this? I was able to send a HTTPRequest with ...
0
votes
1answer
34 views

Salesforce community pages url authorization

I am novice to salesforce, i have following usecase in my project developed using salesforce with vlocity. 1, restrict community users accessing URLs to community pages based on a flag (flag is ...
0
votes
1answer
139 views

Community authorization without reloading page

I have a community page with angular js implemented. It is a SPA as expected. Angular calls the apex remote action methods receives a response and does some UI stuff. First page(main page) is ...
0
votes
1answer
158 views

Can we use access token or refresh token as a session id for WebService Callout?

there it is mentioned I want to use sessionID for MetadataService call from an org to other org. I have the other org access token and refresh token both. I tried to use access token, but got the ...
0
votes
2answers
235 views

Guest User requires authorization for sites - unsure of what debug code means!

When the Guest User for my account tries to submit a form it is told that authorization is required and they must login. When I set up a debug log for that user a bug logged with these details and I ...
0
votes
0answers
64 views

Site that should be available to all Internet users gives “Authorization Required” error

I have a site that should be available to any user that hits a site. Debug logs are of no help debugging this issue, as I have tried capturing them while the issue is in process for a user, and there ...