Web Server Flow with Client Secret and PKCE

1 Connected App
2 Exchange Auth Code
3 Run Query
4 Success!

Create a Connected App in your Dev Org.

Client ID

Client Secret

Redirect URI (Callback URL)

Authorization Code

Access Token

Refresh Token

ID Token

Audience Matches Client ID : true

Successfully ran a basic query against the Salesforce REST API with the access token received in previous steps.

HTTP/1.1 302 Found
Location:https://login.salesforce.com/services/oauth2/authorize?client_id=3MVG99OxTyEMCQ3gXuX31lysX3RQP4.Vj3EVzlMsVbxFvUe7VjZ0WcjWvGlAU7BPJFZBSyBGPiGyHhojZ2BE3&redirect_uri=https%3A%2F%2Fopenidconnect.herokuapp.com%2Fcallback&response_type=code&state=shns3f12fjqg96ujir6lqcm5no

Request

GET /callback?code=aPrxHstICvfqxw3z7JcpzRkgdqNIh6cCZsdh_PpWGhtXc3BNcl8Bhb5n75sfkOQkNNPluiZdCg== HTTP/1.1
Host: openidconnect.herokuapp.com

Response