How to enforce oauth scope for lightning apps?

To enforce oauth scope for lightning apps-

Salesforce

Enforce OAuth Scope for Lightning Apps [closed]

Asked 1 year, 7 months ago

Modified 1 year, 7 months ago

Viewed 847 times

-1

Closed. This question is off-topic. It is not currently accepting answers.

Questions about requirements or objectives should demonstrate the work or research you’ve done so far and ask a specific question. Providing complete implementations based on a list of requirements is not a goal of this community. This question can be reopened when it is edited to include the needed information.

Closed 1 year ago.

How to find if any of the lightning apps in my org uses oauth. Can anyone please guide me with this.

lightningoauthappwinter22

Share

Improve this question

Follow

asked Aug 31, 2021 at 6:41

Sindhuja's user avatar

Sindhuja

13311 gold badge77 silver badges1919 bronze badges

Add a comment

1 Answer

Sorted by:

Highest score (default)

3

What you're looking for is within ConnectedApp metadata. If you pull down this metadata type from the metadata API you'll be able to identify your apps. This should be a good first step for you to identify your apps. That being said, I am not sure what aspects of a ConnectedApp (if anything) identifies it as a "Lightning app" specifically. Check for a startUrl property - that may be informative.

Per the Salesforce release notes they can be identified by their URL:

Lightning apps include Lightning Experience and any resource with a URL that ends with .app before any optional query string.

For each app, check the OAuth scopes under oauthConfig:





    test@example.com

    My App

    

        https://www.test.com

        the key will be here

        false

        false

        false

        true

        Lightning

    

    

        ENFORCE

        infinite

    

In order for your Lightning app to continue to provide permissions to authenticated users correctly, it must use one of the following 4 scopes (per the release notes). I have placed the actual scope name in bold for emphasis.

• Allow access to Lightning applications (lightning)
  
• Provide access to custom applications (visualforce)
  
• Provide access to your data via the web (web)
  
• Full access (full). Use this option only if none of the other options are sufficient.