Call salesforce api from react without exposing access token
You should not store Salesforce credentials in React client code. Vault-inject OAuth or integration tokens at the edge; React calls one public client token URL. RealComposer Secret Vault injects headers on Cloudflare Workers so only your edge URL is public.