function readOnly(count){ }
Sign Up ›
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
Learn More

Browse by Topic
ShowAll Questionssorted byDate Posted
+ Start a Discussion
Brian SloaneBrian Sloane 

Compromised consumer_key, consumer_secret

Hello,

We have no reason to believe but are acting as if the consumer_key and secret to our app have been compromised.  Is there any way we can rotate these values to get new credentials?  I am assuming that if we could get a new secret the secret + a user's current refresh_token would be capable of acquiring a new access token.  Finally is the risk of impersonation mitigated by the callback URLs being set in Salesforce itself?

Thanks!
Amit Chaudhary 8Amit Chaudhary 8
Consumer Key: A value used by the consumer to identify itself to Salesforce. Referred to as client_id in OAuth 2.0.

Consumer Secret: A secret used by the consumer to establish ownership of the consumer key. Referred to asclient_secret in OAuth 2.0.


 
asagarwal.comasagarwal.com
Don't think this can be reset or refreshed. But you can always create a new connected App and remvoe the old one.