CommunityProgramação e Desenvolvimentogithub.com

forcedotcom/configurando-apps-conectadas

Configuração de OAuth para Connected Apps e External Client Apps no Salesforce com pontuação de 120 pontos. Use esta skill para configurar fluxos OAuth, autenticação JWT bearer, Connected Apps e External Client Apps no Salesforce.

O que é configurando-apps-conectadas?

Esta skill especializada auxilia desenvolvedores e administradores na configuração de Connected Apps e External Client Apps (ECAs) no Salesforce, abrangendo desde fluxos OAuth 2.0 até autenticação JWT bearer. Ela é acionada automaticamente quando o usuário manipula arquivos `.connectedApp-meta.xml` ou `.eca-meta.xml`, ou quando discute tópicos como configuração de fluxos OAuth, Connected Apps e ECAs. A skill segue um sistema de pontuação de 120 pontos para avaliar a completude e correção das configurações, garantindo boas práticas de segurança e integração. É importante não acioná-la ao configurar Named Credentials (use a skill `building-sf-integrations`), revisar políticas de permissão (use `deploying-metadata`) ou escrever código Apex para manipulação de tokens (use `generating-apex`). Compatível com ambientes Salesforce Development, ela oferece orientação passo a passo para cenários comuns como OAuth 2.0 Client Credentials, Authorization Code Grant e JWT Bearer Flow.

Funciona com~Claude Code~Codex CLI~Cursor
npx skills add https://github.com/forcedotcom/sf-skills/tree/main/skills/configuring-connected-apps

Installed? Explore more Programação e Desenvolvimento skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →

Ver original→Navegar por todas as habilidades

Perguntar na sua IA favorita

Abre um novo chat com esta habilidade de agente já pré-carregada.

OpenAIChatGPTClaudeClaudeGeminiGeminiGrokGrokPerplexityPerplexityDeepSeekDeepSeek

Documentação

O que configurando-apps-conectadas faz?

Configuração de OAuth para Connected Apps e External Client Apps no Salesforce com pontuação de 120 pontos. Use esta skill para configurar fluxos OAuth, autenticação JWT bearer, Connected Apps e External Client Apps no Salesforce. ACIONAR quando: o usuário configurar fluxos OAuth, autenticação JWT bearer, Connected Apps, ECAs, ou tocar em arquivos .connectedApp-meta.xml / .eca-meta.xml. NÃO ACIONAR quando: configurar Named Credentials para callouts (use building-sf-integrations), revisar políticas de permissão (use deploying-metadata), ou escrever código Apex para manipulação de tokens (use generating-apex).

Visão Geral

Esta skill fornece orientação detalhada para configurar Connected Apps e External Client Apps no Salesforce, garantindo que os fluxos OAuth estejam corretamente implementados e seguros. Ela cobre os seguintes tópicos:

  • Criação e configuração de Connected Apps
  • Configuração de External Client Apps (ECAs)
  • Fluxos OAuth 2.0 (Authorization Code Grant, Client Credentials, JWT Bearer)
  • Autenticação JWT bearer
  • Políticas de permissão e escopos OAuth
  • Manipulação de arquivos de metadados (connectedApp-meta.xml, eca-meta.xml)

Quando Usar

Use esta skill quando:

  • Você está criando ou modificando uma Connected App no Salesforce
  • Você está configurando um fluxo OAuth para integração externa
  • Você está implementando autenticação JWT bearer
  • Você está configurando uma External Client App para APIs REST ou SOAP
  • Você está editando arquivos .connectedApp-meta.xml ou .eca-meta.xml

Não use esta skill quando:

  • Configurando Named Credentials para callouts (use building-sf-integrations)
  • Revisando políticas de permissão (use deploying-metadata)
  • Escrevendo código Apex para manipulação de tokens (use generating-apex)

Pontuação (120 pontos)

A skill avalia a configuração com base nos seguintes critérios (total de 120 pontos):

CritérioPontos
Configuração correta do Consumer Key/Secret20
Escopos OAuth apropriados15
Configuração de certificados JWT20
Políticas de IP e refresh token15
Permissões de perfil/permission set15
Configuração de callback URLs10
Documentação e boas práticas15
Testes de fluxo OAuth10

Plataformas Suportadas

  • Salesforce Development
  • Salesforce Sandbox
  • Salesforce Production
  • Salesforce Scratch Org

Como Funciona

  1. Identificação do contexto: A skill detecta automaticamente quando arquivos .connectedApp-meta.xml ou .eca-meta.xml estão sendo editados ou quando o usuário discute configurações de Connected Apps/ECAs.

  2. Geração de configuração: Com base no contexto, a skill sugere configurações de arquivos de metadados, incluindo:

    • Definições de Connected App no formato de metadados do Salesforce
    • Configurações de JWT bearer com certificados
    • Mapeamento de escopos OAuth
    • Políticas de segurança (IP relaxado, refresh token, etc.)

  3. Validação: A skill verifica a configuração contra regras de boas práticas e requisitos comuns de integração.

Exemplo de Uso

<!-- Exemplo de connectedApp-meta.xml -->
<?xml version="1.0" encoding="UTF-8"?>
<ConnectedApp xmlns="http://soap.sforce.com/2006/04/metadata">
    <label>Minha App Conectada</label>
    <contactEmail>[email protected]</contactEmail>
    <oauthConfig>
        <callbackUrl>https://meudominio.com/callback</callbackUrl>
        <certificate>meu_certificado_jwt</certificate>
        <scopes>Api,RefreshToken,Web</scopes>
    </oauthConfig>
</ConnectedApp>

Para mais detalhes, consulte a documentação oficial do Salesforce.

Individual skills in this repo

This repo contains 20 individual skills — each has its own dedicated page.

forcedotcom/building-sf-integrations

Salesforce integration architecture and runtime plumbing with 120-point scoring. Use this skill to set up Named Credentials, External Credentials, External Services, REST/SOAP callout patterns, Platform Events, and Change Data Capture. TRIGGER when: user sets up Named Credentials, External Services, REST/SOAP callouts, Platform Events, CDC, or touches .namedCredential-meta.xml files. DO NOT TRIGGER when: Connected App/OAuth config (use configuring-connected-apps), Apex-only logic (use generating-apex), data import/export (use handling-sf-data), or CDC channel-membership metadata such as PlatformEventChannel, PlatformEventChannelMember, or EnrichedField (use managing-cdc-enablement).

forcedotcom/building-ui-bundle-app

MUST activate when the user wants to build, create, or generate a React application, React app, web application, single-page application (SPA), or frontend application — even if no project files exist yet. MUST also activate when the project contains a uiBundles/*/src/ directory or sfdx-project.json and the prompt says create, build, construct, or generate a new app, site, or page from scratch — even if the prompt also describes visual styling. MUST also activate when the task spans more than one ui-bundle skill. Use this skill when building a complete app end-to-end. Do NOT use for Lightning Experience apps with custom objects (use generating-lightning-app). Do NOT use for single-concern edits to an existing page (use building-ui-bundle-frontend).

forcedotcom/building-ui-bundle-frontend

MUST activate before editing ANY file under uiBundles/*/src/ for visual or UI changes to an EXISTING app — pages, components, sections, layout, styling, colors, fonts, navigation, animations, or any look-and-feel change. Use this skill when modifying pages, components, layout, styling, or navigation in an existing UI bundle app. Activate when the project contains appLayout.tsx, routes.tsx, src/pages/, src/components/, or global.css. This skill contains critical project-specific conventions (appLayout.tsx shell, shadcn/ui components, Tailwind CSS, Salesforce base-path routing, module restrictions) that override general knowledge. Without this skill, generated code will use wrong imports, break routing, or ignore project structure. Do NOT use when creating a new app from scratch (use building-ui-bundle-app instead).

forcedotcom/debugging-apex-logs

Salesforce debug log analysis and troubleshooting with 100-point scoring. TRIGGER when: user analyzes debug logs, hits governor limits, reads stack traces, or touches .log files from Salesforce orgs. DO NOT TRIGGER when: running Apex tests (use running-apex-tests), generating or fixing Apex code (use generating-apex), or Agentforce session tracing (use observing-agentforce).

forcedotcom/deploying-metadata

Salesforce DevOps automation using sf CLI v2. TRIGGER when: user deploys metadata, creates/manages scratch orgs or sandboxes, sets up CI/CD pipelines, or troubleshoots deployment errors with sf project deploy. DO NOT TRIGGER when: writing Apex code (use generating-apex), building LWC components (use generating-lwc-components), creating metadata definitions (use generating-custom-object or generating-custom-field), or querying org data (use handling-sf-data).

forcedotcom/deploying-ui-bundle

MUST activate when the project contains a uiBundles/*/src/ directory or sfdx-project.json and the task involves deploying, pushing to an org, or post-deploy setup. Use this skill when deploying a UI bundle app to a Salesforce org. Covers the full deployment sequence: org authentication, pre-deploy build, metadata deployment, permission set assignment, data import, GraphQL schema fetch, and codegen. Activate when files like *.uibundle-meta.xml or sfdx-project.json exist and the user mentions deploying, pushing, org setup, or post-deploy tasks.

forcedotcom/developing-agentforce

Build, modify, debug, and deploy agents with Agentforce Agent Script. TRIGGER when: user creates, modifies, or asks about .agent files or aiAuthoringBundle metadata; changes agent behavior, responses, or conversation logic; designs agent actions, tools, subagents, or flow control; writes or reviews an Agent Spec; previews, debugs, deploys, publishes, or tests agents; uses Agent Script CLI commands (sf agent generate/preview/publish/test). DO NOT TRIGGER when: Apex development, Flow building, Prompt Template authoring, Experience Cloud configuration, or general Salesforce CLI tasks unrelated to Agent Script.

forcedotcom/fetching-salesforce-docs

Official Salesforce documentation retrieval skill. Use when you need authoritative Salesforce docs from developer.salesforce.com, help.salesforce.com, architect.salesforce.com, admin.salesforce.com, or lightningdesignsystem.com, especially when pages are JS-heavy, shell-rendered, or hard to extract with naive fetching. Use to ground answers in official Salesforce sources instead of third-party blogs or summaries. TRIGGER when: user asks for official Salesforce documentation, Apex or API reference, LWC docs, Agentforce docs, setup or help articles, or any doc from a Salesforce-owned domain. DO NOT TRIGGER when: user is asking for a code change, deployment task, or anything not requiring documentation retrieval — use the appropriate sf-* skill instead.

forcedotcom/generating-apex

Primary Apex authoring skill for class generation, refactoring, and review. ALWAYS ACTIVATE when the user mentions Apex, .cls, triggers, or asks to create/refactor a class (service, selector, domain, batch, queueable, schedulable, invocable, DTO, utility, interface, abstract, exception, REST resource). Use this skill for requests involving SObject CRUD, mapping collections, fetching related records, scheduled jobs, batch jobs, trigger design, @AuraEnabled controllers, @RestResource endpoints, custom REST APIs, or code review of existing Apex.

forcedotcom/generating-apex-test

Generate and validate Apex test classes with TestDataFactory patterns, bulk testing (251+ records), mocking strategies, assertion best practices, and disciplined test-fix loops. Use this skill when creating new Apex test classes, improving test coverage, debugging and fixing failing Apex tests, running test execution and coverage analysis, or implementing testing patterns for triggers, services, controllers, batch jobs, queueables, and integrations. Triggers on *Test.cls, *_Test.cls files, sf apex run test workflows, coverage reports, test-fix loops. Do NOT trigger for production Apex code (use generating-apex) or Jest/LWC tests.

forcedotcom/generating-custom-application

Use this skill when users need to create or configure tab-based Salesforce Custom Applications with navigation, branding, and action overrides. Trigger when users mention custom apps, application metadata, app navigation, or organizing tabs into applications. Use when users want to create app containers for tabs and pages. Do NOT use when the goal is hosting a React UI bundle in the App Launcher — use generating-ui-bundle-custom-app for that case.

forcedotcom/generating-custom-field

Use this skill when users need to create, generate, or validate Salesforce Custom Field metadata. Trigger when users mention custom fields, field types, Roll-up Summary fields, Master-Detail relationships, Lookup relationships, formula fields, picklists, or field metadata. Also use when users encounter field deployment errors, especially around Roll-up Summary format, Master-Detail constraints, or formula issues. Always use this skill for any custom field metadata work, field generation, or field troubleshooting.

forcedotcom/generating-custom-lightning-type

Use this skill when users need to create Custom Lightning Types (CLTs) for Einstein Agent actions or structured input/output schemas. Trigger when users mention CLT, Custom Lightning Types, Custom Lightning Types (CLTs) with widget/mosaic/fragment rendition/renderer, JSON schemas for agents, type definitions, lightning__objectType, or editor/renderer configurations. When widget renditions are requested, you MUST first read the widget-rendition.md reference file in this skill's references/ directory and follow its complete workflow. This is complex - always use this skill for CLT work.

forcedotcom/generating-custom-object

Use this skill when users need to create, generate, or validate Salesforce Custom Object metadata. Trigger when users mention custom objects, creating objects, object metadata, .object files, sharing models, name fields, or validation rules on objects. Also use when users say things like "create a custom object", "generate object metadata", "set up an object for...", or when they're troubleshooting object deployment errors especially around sharing models and Master-Detail relationships. Always use this skill for any custom object metadata work.

forcedotcom/generating-custom-tab

Use this skill when users need to create or configure Salesforce Custom Tabs. Trigger when users mention tabs, navigation tabs, object tabs, web tabs, Visualforce tabs, Lightning component tabs, app page tabs, or tab configuration. Also use when users want to add navigation to custom objects, create tabs for external content, or set up Lightning page tabs. Always use this skill for any custom tab work.

forcedotcom/generating-flexipage

Use this skill when users need to create, generate, modify, or validate Salesforce Lightning pages (FlexiPages). Trigger when users mention RecordPage, AppPage, HomePage, Lightning pages, page layouts, adding components to pages, or page customization. Also use when users say things like 'create a Lightning page', 'add a component to a page', 'customize the record page', 'generate a FlexiPage', or when they're working with FlexiPage XML files and need help with components, regions, or deployment errors. Always use this skill for any FlexiPage-related work, even if they just mention 'page' in the context of Salesforce.

forcedotcom/generating-flow

Generate Salesforce Flows using the MCP tool execute_metadata_action. Use when the user asks to create, build, or generate a flow — including Screen, Autolaunched, Record-Triggered (before/after-save), Scheduled. Also trigger for flow-like requests such as "when a record is created", "trigger daily at", "send an email when", "update the field when", "automate", "workflow", or "flow XML/metadata". This is the only skill for Salesforce Flow generation.

forcedotcom/generating-lightning-app

Build complete Salesforce Lightning Experience applications from natural language descriptions. Use this skill when a user requests a "complete app", "Lightning app", "business solution", "management system", or describes a scenario requiring multiple interconnected Salesforce components (objects, fields, pages, tabs, security). Orchestrates all required metadata types in proper dependency order to produce a deployable application.

forcedotcom/generating-list-view

Use this skill when users need to create, generate, or validate Salesforce List View metadata. Trigger when users mention list views, filtered record lists, creating views, setting up record columns, filtering records by criteria, or ask about list view visibility. Also use when users say things like "I need a view that shows...", "filter records by...", "create a list view for...", or when they're working with ListView XML files and need validation or troubleshooting.

forcedotcom/generating-lwc-components

Lightning Web Components with PICKLES methodology and 165-point scoring. Use this skill when the user creates or edits LWC components, builds wire service patterns, or writes Jest tests for LWC. TRIGGER when: user creates/edits LWC components, touches lwc/**/*.js, .html, .css, .js-meta.xml files, or asks about wire service, SLDS, or Jest LWC tests. DO NOT TRIGGER when: Apex classes (use generating-apex), Aura components, or Visualforce.

Habilidades Relacionadas

steipete/bluebubbles

Send and manage iMessages via BlueBubbles, including attachments, tapbacks, edits, replies, and groups.

community

steipete/eightctl

Control Eight Sleep pods (status, temperature, alarms, schedules).

community

steipete/blucli

BluOS CLI (blu) for discovery, playback, grouping, and volume.

community

steipete/bear-notes

Create, search, and manage Bear notes via grizzly CLI.

community

steipete/camsnap

Capture frames or clips from RTSP/ONVIF cameras.

community

steipete/gifgrep

Search GIF providers with CLI/TUI, download results, and extract stills/sheets.

community
← More Programação e Desenvolvimento skills