Skip to main content
Topics#SecurityFrage von Elliot MacNeille
Elliot MacNeille (My Company List) fragte in #Security
7. Feb. 2022, 19:47

OpenID and Salesforce

Are there any claims in the ID token that can be reused for the login_hint parameter used to refresh a session, or if it is necessary to use another http request to fetch the email address of the user from the user profile endpoint, and use this for the login_hint parameter?
2 Antworten
  1. Elliot MacNeille (My Company List)
    4. Jan. 2024, 04:13

    Hey Vinay,

     

    The use case here is being able to submit a refresh request via a login_hint (as opposed to a refresh token, which is too sensitive) using data within the payload of the initial response. Yes, we can use the user profile endpoint to access a user's email given the user's OpenID. However this requires an extra HTTP request. 

     

    The application here is implementing SSO with Salesforce via Varnish, an edge logic and caching software. Extra HTTP requests cause overhead and slow down the client's experience.

Antwort schreiben...
0/9000