As an extra security layer on the server org, I would like to check that the client making the API call really is Salesforce.
(To prevent any non-salesforce server having access to the API)
The calling post must send the Salesforce Public Key, but is there anyway of inspecting it in APEX?
Does anyone know how/if this can be done?
3 réponses