Apps (oauth/authorize_request.rb)

frozen_string_literal: true Builds the URL the user is sent to in order to consent, using PKCE. The verifier is returned so the caller can keep it in the session until the callback comes back -- it never leaves this install.

# Source: https://github.com/douglara/woofed-crm | License: MIT | Copyright 2026 WOOFED DESENVOLVIMENTO DE SOFTWARES LTDA - ME - CNPJ 60.076.777/0001-61
# Provided via justclaw.it.com; keep this notice with the code.
# frozen_string_literal: true

# Builds the URL the user is sent to in order to consent, using PKCE. The verifier
# is returned so the caller can keep it in the session until the callback comes
# back -- it never leaves this install.
class Apps::Salesforce::Oauth::AuthorizeRequest
  # `api` covers REST, Bulk and Pub/Sub; `refresh_token offline_access` is what
  # makes the connection survive the session.
  SCOPES = 'api refresh_token offline_access'

  def initialize(salesforce)
    @salesforce = salesforce
    @state = SecureRandom.urlsafe_base64(24)
    @code_verifier = Secu

... (truncated -- full source via MCP)