Implementing a JWT Server to Server OAuth between Salesforce and Heroku

[@SalesforceUSA]

Thank you for covering a vast and difficult area. You did the best.

[@tanmaysharma2757]

Thank you so much sir your videos have made my life easier tried JWT multiple times always failed after watching your video succeeded in first attempt to authorize my org

[@MrBulletok]

Thank you

[@igor-sharevich]

You are welcome )))

[@SalesforceDevs]

No problem

[@SalesforceUSA]

Good presentation.

[@cemsaracoglu4242]

Thank you for this session. It helps a lot. Really enjoy watching

[@afraz-khan]

thanks man, this is great session. simple and easy to understand.

[@chadelofson1637]

What are the typical approaches to handling the expiration of the access token? I know JSForce handles it when a refresh token is sent. Would it be typically handling a 400 error? Or would you normally track the expiration of the token after you receive it?

[@gunjansaxena2802]

How can we use JWT tokens to get data from Heroku to Salesforce with out Heroku connect? Please Help on reverse scenario and Thank you for well explaining this vast topic step by step.

[@oalexandrino]

Very nice! thanks! just a question, when you are working with third party software vendors, why would I share the private key to them? which approach I could use to avoid this?

[@javajavelin1]

Have you got your question, answered from somewhere else?

[@sridharbachu]

Great video. Just a question what is the purpose of client secret from connected app. I noticed we referred only consumer key as client Id for jet tokens from node App

[@msrivastav13]

The client secret is not used except if you use username and password type OAuth flow, which we do not recommend using. Check this article for more details help.salesforce.com/s/articleView?id=sf.remoteaccess_oauth_username_password_flow.htm&type=5

[@aneekaatrocities2489]

Hi Thanks for this video. I have been searching for this type of video for long time and I got this. By the way, why do we need to specify our username? I thought client id and secret will be used instead of username as this will be a personal one like mine or yours as in the video and may not be useful for any app that need to be productionised. Is it not?

[@bopakitebalo]

Got this error: { "error": "unsupported_grant_type", "error_description": "grant type not supported" }

[@SDNK79]

@Mohith can we follow same steps to generate private key & certificate on PRODUCTION environment also? or we need get it from certificate authority?

[@msrivastav13]

You can follow the same process

[@anujsaxena5461]

instead of using heroku , can I use this at local ?

[@msrivastav13]

Yes you can use your local host too.