Broadband - Security API

1.0.x
(0 reviews)

To consume Artemis APIs Partners must have an active account in Salesforce and then be given access to Mulesoft. Partners will be given their Client_ID and Client_Secret details for API consumption to generate an access token in the form of a JWT Token (JSON Web Token) specifically a JWS (JSON Web Signature).

Get JWT Token

  • MuleSoft credentials provided by the client are validated: ClientId and ClientSecret
  • The metadata (Salesforce userName, Salesforce ClientId) associated with the Partner is retrieved from the provided ClientId
  • A JWT token is generated from the metadata retrieved and the JWT is signed with the private key associated with the connected App in Salesforce
  • The JWT is obtained using the appropriate Salesforce token endpoint and is encrypted using a symmetric key algorithm. A new partner specific JWT is generated and returned to the Partner to start the API invocation

API Invocation

  • MuleSoft validates the JWT sent by the Partner verifying the JWT is well formed, the expiration time is still valid and the JWT signature is valid
  • Privileges of the Partner are verified by checking the claim of the client_id of the token for the consumption of the API
  • The Salesforce access token is retrieved (which is encrypted within a JWT claim) is decrypted and the request is made to Salesforce with the decrypted access token and a connection is made with Salesforce

Reviews