Questions tagged [authorization]

Authorization is the process of determining whether a user, program or device is allowed to access a protected resource in a particular way. Authorization is a key theme in computer security practices.

Filter by
Sorted by
Tagged with
0 votes
0 answers
8 views

axios does not sends Authorization header even with withCredentials: true

I have custom hook where I modify axios instance by adding a intercepts which adds Authorization header if missing: api/axios.js: import axios from 'axios'; const BASE_URL = 'http://localhost:8080'; ...
milanHrabos's user avatar
  • 2,064
0 votes
0 answers
6 views

Best way to do the login + authorization step on a OAuth2 flow (authorization_code grant)

I'm implementing a OAuth2 server, and I have a doubt implementing the authorization_code grant type. The standard says the authorization call should be a GET call with certain parameters (client_id, ...
dgnin's user avatar
  • 1,585
0 votes
0 answers
63 views

How to read the My roles from the Privileged Identity Management in Microsoft Entry Id using Microsoft Graph Powershell modules?

I have access to the following screen through the Azure Portal: And I need to activate 5 roles. The GUI is atrocious, it does not allow activating multiple roles at ones. I would like to script this ...
mark's user avatar
  • 59.7k
0 votes
1 answer
26 views

CORS Configuration error for authorization header with Spring/Boot and React.js

I am trying to call this API from my React.js front end using jwt authentication const getCategory = () => { const token = localStorage.getItem("user"); return axios .get(&...
Nikos Chrysafis's user avatar
-2 votes
0 answers
28 views

Const doesn't save in JavaScript [duplicate]

I'm developing a WebAuthn authorization and I'm facing a problem. When I'm getting the credentials and I print them in console everything works great. It's shown below: async function ...
alqueen's user avatar
  • 229
-3 votes
0 answers
16 views

"How can I implement user authentication and authorization in a modern web application using [specific technology or framework]?" [closed]

How do I implement secure user authentication and authorization in a web application using the Django framework? Seeking best practices and code examples to ensure robust user management and access ...
Shivam Kumar's user avatar
0 votes
1 answer
13 views

How to use the Authorization in the Godspeed framework?

How should one configure the JWT object, and what is the process for utilizing it? Restrictions should be applied to certain workflows for access. I configured in custom-environment-variables but not ...
Shirisha Nelapogula's user avatar
0 votes
1 answer
25 views

.Net 7 Jwt Authorization always return error 500 in the server method decorated with [Authorize] Attribute

This is the jwt builder method in jwt service: public async Task<string> BuildToken([FromBody] string userName) { //AppUser user = await userManager.FindByNameAsync(...
mz1378's user avatar
  • 2,091
0 votes
0 answers
21 views

Assign a username to one of many PostgesSQL databases

I'm planning a multiple PostgreSQL database application to reside on a single server. The databases are identical structure and rules etc. The data contained in each database is unique - belongs to a ...
Ray Connon's user avatar
0 votes
1 answer
32 views

React Context reset to default value

I've tried using React Context for authorization on a website. I appears that whenever I refresh a page or change page, the context reset to default value. I am pretty new to react and web dev and I'...
Rasppy's user avatar
  • 1
0 votes
0 answers
42 views

Custom authorization and authentication with old existing database

I want to implement authentication and authorization in my .net 8 project. The problem is i have an existing old user base, and my own token solution. I do not want allow any user creation or anything ...
Simon's user avatar
  • 1
1 vote
2 answers
50 views

How can I authenticate to GCP using a service account key that was uploaded (not generated)?

Im writing a service that requires access to GCP services by different tenants. My micro-service will run on different host (no GCP). One of the constraints I have is to authorize api calls by using ...
Russel Vela's user avatar
0 votes
0 answers
29 views

Status 999 when trying to use form login with Spring boot authorization server

Trying to create authorization server using spring boot authorization server. I am able to go to the default login form and when I enter the user credentials I go to a Whitelabel Error Page with a ...
Kevin 's user avatar
-1 votes
0 answers
40 views

JWT spring boot logout

could You please help me with logout in spring boot security? I made this application in which You can register and login user, but I am not sure how to handle there a logout. When I login I generate ...
GPPiotr's user avatar
  • 11
1 vote
0 answers
38 views

Wear OS redirect issue PKCE

In our watch app project, we are using the PKCE approach to open a web view on a phone where the user puts login and password, and then using as a redirect url https://wear.googleapis.com/3p_auth/com....
Kostya Rudenko's user avatar
0 votes
0 answers
33 views

Failed to load resource: the server responded with a status of 401 (Unauthorized) error in express.js

index.js: require("dotenv").config(); const cookieParser = require("cookie-parser"); const express = require("express"); const app = express(); const cors = require("...
Carasidelt's user avatar
0 votes
2 answers
20 views

Unauthorized client when requesting Docusign authorization code through Postman

I have imported the docusign api into Postman through the following URL: https://developers.docusign.com/tools/postman/ However, when trying to request an authorization code I am getting the following ...
B C's user avatar
  • 3
0 votes
1 answer
24 views

How to Run FluentValidation Before Authorization Filter in ASP.NET Core

I am working on an ASP.NET Core project where I'm using FluentValidation for DTO validation and have also implemented custom authorization filters. Currently, I'm facing a challenge where the ...
esege's user avatar
  • 61
0 votes
0 answers
13 views

How to use Casbin for paginated search

We are currently using casbin in our Java microservices architecture for business authorization. Most of the scenarios are working fine and are afficient, but we have one scenarios that we don't like ...
Cosmin Olteanu 's user avatar
0 votes
0 answers
11 views

when user Each time navigate, should i do mysql query for checking JWT valid or not valid?

I have a database with a table "users". it is a mysql database. My question is, when an user is logged in. I store JWT token on database with a column named "isDestroyed" If admin ...
Freelancer Nasim's user avatar
-1 votes
0 answers
7 views

User unable to fetch employeedetails when included [Authorize] attribute for employee controller

User logged in successfully using bearer token but when clicked on loademployees btn unable to fetch employee records instead status code received as 401-unauthorized. Here's the code for Data.html ...
Pavan Gopal's user avatar
-1 votes
0 answers
26 views

spring cloud gateway OIDC logout not working after refresh token

i use spring authorization server as oauth2 server and use cloud gateway as oauth2 client that is the BFF (my front is react app) this is my gateway security config : @Bean public ...
Moolerian's user avatar
  • 532
0 votes
0 answers
4 views

Shared Google Sheets

I'm creating a sheet for Round Management, which a client should pay for. If I share a sheet with somebody, after they've paid, can they then share it with a third party without my consent? I've no ...
Nigel Hunt's user avatar
-1 votes
0 answers
31 views

Spring Boot Security 6.1 , always opens login page

i am making contact manager project using spring boot security 6.1 version , when I hit Url it always redirect to default page login page which spring provide here ,I my code package config @...
Akshat Udeeniya's user avatar
-1 votes
0 answers
36 views

Microsoft Teams is not responding/working

When attempting to authorize Teams integration from our app One aspect of our integration involves utilizing the following API to generate an access token from by hitting on following URL https://...
Muhammad Hassan's user avatar
0 votes
0 answers
17 views

Hosted Blazor Pass Auth Token to API from Javascript Fetch Call

I have a hosted Blazor Webassembly app and I am trying to secure my Paypal API endpoint but it keeps showing that it is being called anonymously and failing with 401 Unauthorized. I have a shopping ...
David.Warwick's user avatar
0 votes
0 answers
36 views

Implementing Authorization Code Grant Flow with Microsoft Graph API in Angular and Node.js

I am working on integrating Microsoft Graph API into my Angular application, and I need to implement the Authorization Code Grant Flow for secure authentication. I have my own application login page, ...
Jay Patel's user avatar
  • 266
-1 votes
0 answers
42 views

An error occurred when creating the Laravel 9 login form

here I want to create a login form where I enter the username and password, but when I enter the data according to the database that I have created, it keeps returning to the login page, I have ...
abiajustino's user avatar
1 vote
0 answers
23 views

Can't access retrieve username and password through req.headers.authorization in SwaggerUi

I am writing the backend using nodejs and express. I have set up the swagger for api documentation. I use the bearer authentication method with the token and it's working in the swagger when put my ...
VoTheGreat's user avatar
0 votes
0 answers
49 views

Google Drive Picker API asking for consent everytime even in the same session in authorization code flow approach

The client side implementation is currently this function initClient() { client = google.accounts.oauth2.initCodeClient({ client_id: CLIENT_ID, scope: SCOPES, ...
Ashok Budha's user avatar
0 votes
1 answer
53 views

Keycloak OpenID Connect redirect_uri behaves inconsistently

I have Keycloak 22.0.5 deployed via docker on my local machine. I have a custom OpenID client configured with its access as follows: I don't want to use a password grant, I'm using pkce (...
Moder New's user avatar
  • 457
0 votes
0 answers
28 views

How to handle authentication state in Blazor Wasm Hosted project for client and server side

I am developing an application using .NET7 Blazor Webassembly Hosted project with API endpoints and ASP.NET Core Identity. I am implementing a Custom Authentication State Provider and Policy based ...
h.hadid's user avatar
0 votes
1 answer
38 views

Best practices and some doubts regarding RESTful APIs authorisation

I'm currently developing a backend server in Express.js where users can log in or register on the client side using either a basic email and password method or a social sign-in method (e.g., Google, ...
Abhinav Sinha's user avatar
0 votes
0 answers
17 views

How should I handle token authentication for calling an API endpoint using oauth token + apikey?

At work we use a dashboard environment, built on Zendesk and supplied to us by a partner company. Every operator has their own login (email/pw) for the dashboard. When logged in, I can access the API ...
mrtn's user avatar
  • 1
0 votes
0 answers
12 views

How to reduce latency for Cognito globally?

We have a global audience for our service, but since our main market is the USA, we use us-east-1 for our Cognito service. In many cases, we have to run queries like this cURL query curl 'https://...
tobias's user avatar
  • 565
0 votes
1 answer
17 views

How to maintain a gnome-extension collaboratively?

The gnome-shell-extensions site supports only personal accounts for uploading. How can i do collaborative development with multiple maintainers for an extension, without sharing account credentials? ...
ankostis's user avatar
  • 8,739
0 votes
1 answer
30 views

Laravel Custom User Model Policy Issue

I am working on a Laravel project where I have a custom user model (Admin model). I am attempting to create a policy for the ThirdParty model, but even when returning true from the policy method, I'm ...
Firas Miladi's user avatar
0 votes
2 answers
36 views

Business validation rules and microservices

Edit My previous question got edited and it obfuscated the reason for posting the question. At my company, we use a microservice architecture. The problem I am trying to solve is this: We have a UI ...
Logan Cooper's user avatar
0 votes
0 answers
38 views

I want to create a .NET 7 and Angular 16 authentication and role-based authorisation (admin/customer) for example

I wrote the code of the API, but I don't know how it is linked with the Angular project. This is the middleware configuraton in the program.cs file: builder.Services.AddTransient<IAuthService, ...
Oussama hdidou's user avatar
0 votes
0 answers
19 views

Unable to use Interface with CakePHP Dependency Injection - "Argument must be of type AuthorizationServiceInterface, string given"

I want to create a service class in my app that has the AuthorizationService as a dependency so it can access the user’s identity. I have this constructor: public function __construct( private ...
Jamison Bryant's user avatar
0 votes
1 answer
24 views

Single sign on using facebook/google/ms etc on a multi tenant SAAS software

We have a SAAS software where each Tenant has its own set of users with multiple roles like manager, user, contractor etc with different privileges. Today we have all these in our own database and ...
kaushik's user avatar
  • 131
1 vote
0 answers
46 views

Receiving 403 error once in a while, when trying to send a request from http client in Go

func PrepareRequest(ctx context.Context, method, endpoint, apiResource, path string, data interface{}, parameter string) (*http.Request, error) { url := https + ip + "/" + apiResource + &...
baris's user avatar
  • 187
0 votes
1 answer
90 views

Custom authorization filter in ASP.NET Core Web API

I have an ASP.NET Core 6.0 Web API which receives request from Angular web UI application. Currently I have implemented JWT token authorization as per this : [https://www.c-sharpcorner.com/article/jwt-...
Dnyati's user avatar
  • 165
0 votes
0 answers
19 views

401 error code using GoDaddy available domains API

I am trying to write a script to check whether or not a domain is available on GoDaddy. I am getting a 401 error from GoDaddy, meaning there is something wrong with the authorization/API key. I tried ...
Ian S's user avatar
  • 1
-1 votes
0 answers
36 views

Spring boot authorization server with frontend

I want to try Spring Boot Authorization Server, but I want to use a client-side application written in Angular. As far as I know, the user using the Angular app should obtain a token to access my ...
Skazhenyy_enot's user avatar
1 vote
1 answer
27 views

What would be a good consent description for the openid scope?

When signing in a user using OpenID, typically a consent screen is shown listing the requested scopes and a short description, e.g.: profile: Allow client X ... to access your profile data email: ...
shineability's user avatar
0 votes
1 answer
26 views

I'm using AppAuth iOS for login purpose in app. I receives authState nil and error saying "Invalid Client"

Process: User Opens the app. Taps on login. Redirected to login page. User enter credentials. Redirected back to app. Received authState nil and error "Invalid Client". let ...
Engineer's user avatar
0 votes
1 answer
45 views

Authorization for ApiController in Blazor Server

Starting points: one azure tenant + azure AD/Entra; one blazor server app deployed on App Service (+ App registration and managed identity) with an ApiController behind Authorization to be accessed ...
Marty's user avatar
  • 412
0 votes
1 answer
25 views

Is it possible to "chain" Istio AuthorizationPolicies?

I have a question about using AuthorizationPolicy to accomplish a specific scenario. In particular, I have set things up with a CUSTOM action and OAuth2-Proxy so that traffic hitting my Ingress ...
mindcrime's user avatar
  • 697
0 votes
1 answer
37 views

Can I calculate user authorization with Spring's hasAuthority without throwing/catching an exception?

My Java application uses Spring's @PreAuthorize("hasAuthority('SomeScopeName')") on methods to assert that the user is authorized to perform the actions in the methods. This annotation ...
Florian's user avatar
  • 4,881

1
2 3 4 5
209