Overview
The GoMeddo API docs allow you to explore and test the GoMeddo REST API directly from your browser. To use it, you need to authenticate against your own Salesforce org using OAuth 2.0.
This guide walks you through the full setup: creating an External Client App in Salesforce, configuring CORS, and authorizing via the API docs portal.
Prerequisites
-
A Salesforce org with GoMeddo installed
-
System Administrator access (or equivalent permissions to manage App Manager and CORS settings)
-
A Salesforce user account you will use to authenticate
Step 1: Create an External Client App
Note: Salesforce has replaced Connected Apps with External Client Apps for OAuth integrations. If you previously used a Connected App for this purpose, you will need to migrate to an External Client App.
-
In Salesforce, go to Setup → search for App Manager and open it.
-
Click New External Client App (top right).
-
Fill in the required fields:
-
Label: e.g.
GoMeddo API Docs -
Name: auto-filled
-
Contact Email: your email address
-
-
Under OAuth Settings, enable Enable OAuth Settings.
-
Add the following Callback URL:
https://apidocs.gomeddo.com/oauth2-redirect.html -
Under Selected OAuth Scopes, add at minimum:
-
Access and manage your data (api) -
Perform requests at any time (refresh_token, offline_access)
-
-
Save the app. Salesforce may take a few minutes to provision it.
Step 2: Retrieve Your Client ID
-
In External Client Applications, find your newly created External Client App and click View.
-
Copy the Consumer Key. You will need this when authorizing in the API docs.
Step 3: Configure a CORS Whitelist Entry
The API docs portal makes browser-based requests to your Salesforce org, so your org must allow cross-origin requests from the docs domain.
-
In Salesforce, go to Setup → search for CORS and open it.
-
In 'Allowed Origins List', Click New and add:
https://apidocs.gomeddo.com -
Save.
Step 4: Find Your Salesforce Instance URL
The instance URL you need is not always the same as what appears in your browser's address bar (especially for orgs using My Domain). To get the exact URL:
-
Open the Developer Console in Salesforce (from the top-right gear menu).
-
Go to Debug → Open Execute Anonymous Window.
-
Run the following Apex:
System.debug(URL.getOrgDomainUrl()); -
Open the Logs tab, select the log entry, and look for the
DEBUGline. Copy the URL shown there (e.g.https://yourorg.my.salesforce.com).
Step 5: Authorize in the API Docs
-
Click the Authorize button (lock icon, top right of the page).
-
In the authorization dialog:
-
Paste your Salesforce Instance URL into the instance URL field.
-
Paste your Client ID into the client ID field.
-
-
Click Authorize — this will redirect you to Salesforce to log in and approve access.
-
Log in with your Salesforce user credentials and click Allow.
-
You will be redirected back to the API docs, now authenticated.
Step 6: Use the API
With authorization in place, you can now use the Try it out button on any endpoint in the API docs to send live requests against your Salesforce org.
Troubleshooting
|
Issue |
Likely cause |
Fix |
|---|---|---|
|
|
Callback URL in External Client App doesn't match exactly |
Make sure |
|
CORS error in browser console |
CORS whitelist not configured |
Add |
|
"Invalid client" error |
Wrong Client ID pasted |
Double-check the Client ID from the External Client App's detail page |
|
Authorization succeeds but requests fail |
OAuth scopes too restrictive |
Ensure |
|
Instance URL not working |
Using the wrong org URL |
Use the URL from |