---
id: "d5af4ff7-5e5b-4088-a528-1a55ebfa383f"
name: "ONEplace OAuth Reset"
micro_summary: "Copy-paste browser-harness reset for oneplace-cs.dev.oncdatahub.com: app-scoped cookies plus that origin's local/session storage only."
status: "resolved"
see_also: []
scope: "Clear only ONEplace app-origin state before a first-user OAuth consent test, preserving the user's Salesforce login state."
---
## Reset command

Run this before starting the real test from the Salesforce utility. It does not navigate, click **Connect Salesforce**, or open an OAuth popup.

```bash
browser-harness <<'PY'
import json

allowed_domains = {
    "oneplace-cs.dev.oncdatahub.com", ".oneplace-cs.dev.oncdatahub.com",
    "dev.oncdatahub.com", ".dev.oncdatahub.com",
    "oncdatahub.com", ".oncdatahub.com",
}

def app_cookies():
    return [
        cookie for cookie in cdp("Network.getAllCookies").get("cookies", [])
        if cookie.get("domain") in allowed_domains
    ]

found = app_cookies()
for cookie in found:
    params = {
        "name": cookie["name"],
        "domain": cookie["domain"],
        "path": cookie.get("path", "/"),
    }
    if cookie.get("partitionKey") is not None:
        params["partitionKey"] = cookie["partitionKey"]
    cdp("Network.deleteCookies", **params)

cdp(
    "Storage.clearDataForOrigin",
    origin="https://oneplace-cs.dev.oncdatahub.com",
    storageTypes="local_storage,session_storage",
)

remaining = app_cookies()
report = lambda cookies: [
    {"name": c["name"], "domain": c["domain"], "path": c.get("path", "/")}
    for c in cookies
]
print(json.dumps({"found": report(found), "remaining": report(remaining)}, indent=2))
if remaining:
    raise RuntimeError("ONEplace app-domain cookies remain after deletion")
PY
```

## Safety boundary

The command selects only the ONEplace app host and its `dev.oncdatahub.com` / `oncdatahub.com` parent scopes. It does not touch `salesforce.com`, `force.com`, `my.salesforce.com`, `cloudforce.com`, or any other domain.


---

### 2026-08-08 01:42 UTC

### 2026-08-08 — live evidence

Used live to reset the sandbox session: this deployment's ALB splits the session into ONEPLACEAuthSession-0 and ONEPLACEAuthSession-1 on oneplace-cs.dev.oncdatahub.com (7-day expiry, sameSite None). Deleting exactly those two removed 2 cookies (3211→3209) and touched no Salesforce or other domains. Keep the generic reset command for first-user consent tests.