Results for “JWT”
8 matches across blog posts, projects, case studies and series.
Blog posts
Secure Frontend Auth: The Definitive Guide to JWTs, Cookies, and Storage Strategies
Stop storing JWTs in LocalStorage. This guide breaks down the security trade-offs between storage strategies and walks through implementing a production-grade …
Oct 9, 2026Day 5/15 — OAuth 2.0, PKCE & External Client App Setup
Create the External Client App every MCP client needs: the mcp api and refresh token scopes, PKCE, JWT tokens, and a tested PKCE helper in TypeScript.
Oct 9, 2026Day 15/15 — Build a Complete Headless Salesforce AI Assistant
The capstone: a Next.js assistant that signs in with PKCE, lets Claude call Salesforce hosted MCP servers as the user, and asks before every write.
Oct 9, 2026Day 14/15 — Production Architecture: Governance, Monitoring & Error Handling
Take a Salesforce AI assistant to production: who approves tools, what Salesforce logs, how to classify and retry errors, and which limits and costs to plan fo…
Oct 9, 2026Day 11/15 — Security Architecture: OAuth, Permissions & Least Privilege
A threat model for AI clients on Salesforce, the layers that contain them, where tokens go, why there is no integration user, and a least-privilege permission …
Oct 9, 2026Day 10/15 — Build Your First AI + Salesforce Workflow
Turn a chat into a workflow: a read-only meeting prep brief built with Next.js, the Claude API's MCP connector and Salesforce hosted MCP servers.
Oct 9, 2026Day 6/15 — Connect an AI Client to Salesforce via MCP
Connect Claude to Salesforce's hosted MCP servers: a custom connector in claude.ai and Claude Desktop, a direct server in Claude Code, and your first read-only…
Oct 9, 2026Day 4/15 — Enable & Configure the Salesforce MCP Server
Switch on Salesforce's hosted MCP servers, part of Salesforce Headless 360 (AIforce): the exact Setup path, which server to start with, the right URL for your …