# CodeCredentialsNamedUserOptions (/docs/auth/api/interfaces/CodeCredentialsNamedUserOptions)



[@kysoql/auth](/docs/auth/api) / CodeCredentialsNamedUserOptions

Options for headless authorization with an explicit Salesforce username
and password.

## Extends [#extends]

* `CodeCredentialsAuthorizationBase`

## Properties [#properties]

| Property                                                             | Modifier   | Type                                 | Description                                                                          | Inherited from                                   |
| -------------------------------------------------------------------- | ---------- | ------------------------------------ | ------------------------------------------------------------------------------------ | ------------------------------------------------ |
| <a id="api-property-username" /> `username`                          | `readonly` | `string`                             | Salesforce username associated with the authorization flow.                          | -                                                |
| <a id="api-property-password" /> `password`                          | `readonly` | `string`                             | Salesforce password supplied to the headless credentials flow.                       | -                                                |
| <a id="api-property-credentialsplacement" /> `credentialsPlacement?` | `readonly` | `"authorization-header"` \| `"body"` | Default: authorization-header. Use body when the app requires POST-body credentials. | -                                                |
| <a id="api-property-loginhint" /> `loginHint?`                       | `readonly` | `undefined`                          | Not accepted in named-user mode; use user-discovery options instead.                 | -                                                |
| <a id="api-property-customdata" /> `customData?`                     | `readonly` | `undefined`                          | Not accepted in named-user mode; only user-discovery requests support custom data.   | -                                                |
| <a id="api-property-siteurl" /> `siteUrl`                            | `readonly` | `string`                             | Experience Cloud site base URL, including a site path when configured.               | `CodeCredentialsAuthorizationBase.siteUrl`       |
| <a id="api-property-clientid" /> `clientId`                          | `readonly` | `string`                             | Connected App consumer key / OAuth client ID.                                        | `CodeCredentialsAuthorizationBase.clientId`      |
| <a id="api-property-redirecturi" /> `redirectUri`                    | `readonly` | `string`                             | Redirect URI registered with the Connected App.                                      | `CodeCredentialsAuthorizationBase.redirectUri`   |
| <a id="api-property-codechallenge" /> `codeChallenge?`               | `readonly` | `string`                             | PKCE S256 challenge paired with the verifier used during code exchange.              | `CodeCredentialsAuthorizationBase.codeChallenge` |
| <a id="api-property-scope" /> `scope?`                               | `readonly` | `string` \| readonly `string`\[]     | OAuth scopes requested from Salesforce.                                              | `CodeCredentialsAuthorizationBase.scope`         |
| <a id="api-property-state" /> `state?`                               | `readonly` | `string`                             | Opaque state value returned unchanged for request correlation.                       | `CodeCredentialsAuthorizationBase.state`         |
| <a id="api-property-uvidhint" /> `uvidHint?`                         | `readonly` | `string`                             | Plain UVID body parameter. Mutually exclusive with uvidHintToken.                    | `CodeCredentialsAuthorizationBase.uvidHint`      |
| <a id="api-property-uvidhinttoken" /> `uvidHintToken?`               | `readonly` | `string`                             | JWT-based access token containing a UVID, sent as the Uvid-Hint header.              | `CodeCredentialsAuthorizationBase.uvidHintToken` |