I would like to have the profiles of the Users in my organization to be displayed on a public-accessible website.

According to the developerforce documentation, it seems as though this requires an oauth access_token in order to access these pictures, which is less than desirable since it could be ripped out of the resultant HTML.

Amazon s3 has always stood out to me as the canonical place to host assets, and since Salesforce has an Amazon Toolkit available, I thought I'd try to see if I could find an open-source / app-exchange utility that could do the following:

• Store a Salesforce User's profile picture in S3 as a publicly readable asset.
• Store the resulting Amazon S3 asset URL in a custom attribute on the User object.
• Retain the functionality of native salesforce file operations, like displaying the profile picture in default visual force views, etc.

Does anyone know of a utility that could help me provide the features listed above? Is this currently only possible by writing additional APEX code?

Thanks in advance!

Attribution to: kelly.dunn

Possible Suggestion/Solution #1

I'm not sure that OAuth is less-desirable than something else, especially since it is pretty much the security method of choice. If you're passing the token in HTML (and I'm not sure how that would be done) then maybe you're doing something wrong?

I think that your best option is, indeed, to set up something to authenticate into Salesforce for the images. OAuth is a good method.

Attribution to: DavidSchach
This content is remixed from stackoverflow or stackexchange. Please visit https://salesforce.stackexchange.com/questions/32699