Authorization ways for API

 

https://www.apexhours.com/salesforce-oauth-flows-guidelines-and-tips/

Inbound – you decide! Salesforce supports the following flows

OAuth 2.0 based different time of Authorization - 

1. Web Server Authentication - when user logic through web app and UI is involved , eg - workbench
2. 
   
3. User-Agent - used for desktop/mobile application eg - app/data loader/salesforce1
4. 
   
5. JWT Bearer Token - Ideal for application which access sfdc only through API as there is no  UI involved. For example ETL tools or middleware.
6. based to digital signature in JSON web token (JWT)
7. No refresh token
8. 
   
9. SAML Bearer Assertion
10. User for SSO
11. This flow also return only access token not refresh token

1. SAML Assertion
2. 
   
3. Username-Password
4. 
   
5. Device Authentication

• The OAuth 2.0 device authentication flow is typically used by applications on devices with limited input or display capabilities, such as TVs, appliances, or command-line applications. 

1. Asset Token
2. Refresh Token - 
3. This flow also return only access token not refresh token
4.