Questions tagged [authorization]
Authorization is the process of determining whether a user, program or device is allowed to access a protected resource in a particular way. Authorization is a key theme in computer security practices.
10,416
questions
0
votes
0
answers
8
views
axios does not sends Authorization header even with withCredentials: true
I have custom hook where I modify axios instance by adding a intercepts which adds Authorization header if missing:
api/axios.js:
import axios from 'axios';
const BASE_URL = 'http://localhost:8080';
...
0
votes
0
answers
6
views
Best way to do the login + authorization step on a OAuth2 flow (authorization_code grant)
I'm implementing a OAuth2 server, and I have a doubt implementing the authorization_code grant type.
The standard says the authorization call should be a GET call with certain parameters (client_id, ...
0
votes
0
answers
63
views
How to read the My roles from the Privileged Identity Management in Microsoft Entry Id using Microsoft Graph Powershell modules?
I have access to the following screen through the Azure Portal:
And I need to activate 5 roles. The GUI is atrocious, it does not allow activating multiple roles at ones.
I would like to script this ...
0
votes
1
answer
26
views
CORS Configuration error for authorization header with Spring/Boot and React.js
I am trying to call this API from my React.js front end using jwt authentication
const getCategory = () => {
const token = localStorage.getItem("user");
return axios
.get(&...
-2
votes
0
answers
28
views
Const doesn't save in JavaScript [duplicate]
I'm developing a WebAuthn authorization and I'm facing a problem. When I'm getting the credentials and I print them in console everything works great. It's shown below:
async function ...
-3
votes
0
answers
16
views
"How can I implement user authentication and authorization in a modern web application using [specific technology or framework]?" [closed]
How do I implement secure user authentication and authorization in a web application using the Django framework? Seeking best practices and code examples to ensure robust user management and access ...
0
votes
1
answer
13
views
How to use the Authorization in the Godspeed framework?
How should one configure the JWT object, and what is the process for utilizing it?
Restrictions should be applied to certain workflows for access.
I configured in custom-environment-variables but not ...
0
votes
1
answer
25
views
.Net 7 Jwt Authorization always return error 500 in the server method decorated with [Authorize] Attribute
This is the jwt builder method in jwt service:
public async Task<string> BuildToken([FromBody] string userName)
{
//AppUser user = await userManager.FindByNameAsync(...
0
votes
0
answers
21
views
Assign a username to one of many PostgesSQL databases
I'm planning a multiple PostgreSQL database application to reside on a single server.
The databases are identical structure and rules etc.
The data contained in each database is unique - belongs to a ...
0
votes
1
answer
32
views
React Context reset to default value
I've tried using React Context for authorization on a website. I appears that whenever I refresh a page or change page, the context reset to default value. I am pretty new to react and web dev and I'...
0
votes
0
answers
42
views
Custom authorization and authentication with old existing database
I want to implement authentication and authorization in my .net 8 project.
The problem is i have an existing old user base, and my own token solution.
I do not want allow any user creation or anything ...
1
vote
2
answers
50
views
How can I authenticate to GCP using a service account key that was uploaded (not generated)?
Im writing a service that requires access to GCP services by different tenants.
My micro-service will run on different host (no GCP).
One of the constraints I have is to authorize api calls by using ...
0
votes
0
answers
29
views
Status 999 when trying to use form login with Spring boot authorization server
Trying to create authorization server using spring boot authorization server. I am able to go to the default login form and when I enter the user credentials I go to a Whitelabel Error Page with a ...
-1
votes
0
answers
40
views
JWT spring boot logout
could You please help me with logout in spring boot security? I made this application in which You can register and login user, but I am not sure how to handle there a logout. When I login I generate ...
1
vote
0
answers
38
views
Wear OS redirect issue PKCE
In our watch app project, we are using the PKCE approach to open a web view on a phone where the user puts login and password, and then using as a redirect url https://wear.googleapis.com/3p_auth/com....
0
votes
0
answers
33
views
Failed to load resource: the server responded with a status of 401 (Unauthorized) error in express.js
index.js:
require("dotenv").config();
const cookieParser = require("cookie-parser");
const express = require("express");
const app = express();
const cors = require("...
0
votes
2
answers
20
views
Unauthorized client when requesting Docusign authorization code through Postman
I have imported the docusign api into Postman through the following URL: https://developers.docusign.com/tools/postman/
However, when trying to request an authorization code I am getting the following ...
0
votes
1
answer
24
views
How to Run FluentValidation Before Authorization Filter in ASP.NET Core
I am working on an ASP.NET Core project where I'm using FluentValidation for DTO validation and have also implemented custom authorization filters. Currently, I'm facing a challenge where the ...
0
votes
0
answers
13
views
How to use Casbin for paginated search
We are currently using casbin in our Java microservices architecture for business authorization. Most of the scenarios are working fine and are afficient, but we have one scenarios that we don't like ...
0
votes
0
answers
11
views
when user Each time navigate, should i do mysql query for checking JWT valid or not valid?
I have a database with a table "users". it is a mysql database.
My question is, when an user is logged in. I store JWT token on database with a column named "isDestroyed"
If admin ...
-1
votes
0
answers
7
views
User unable to fetch employeedetails when included [Authorize] attribute for employee controller
User logged in successfully using bearer token but when clicked on loademployees btn unable to fetch employee records instead status code received as 401-unauthorized. Here's the code for Data.html
...
-1
votes
0
answers
26
views
spring cloud gateway OIDC logout not working after refresh token
i use spring authorization server as oauth2 server and use cloud gateway as oauth2 client that is the BFF (my front is react app)
this is my gateway security config :
@Bean
public ...
0
votes
0
answers
4
views
Shared Google Sheets
I'm creating a sheet for Round Management, which a client should pay for. If I share a sheet with somebody, after they've paid, can they then share it with a third party without my consent?
I've no ...
-1
votes
0
answers
31
views
Spring Boot Security 6.1 , always opens login page
i am making contact manager project using spring boot security 6.1 version , when I hit Url it always redirect to default page login page which spring provide here ,I my code
package config
@...
-1
votes
0
answers
36
views
Microsoft Teams is not responding/working
When attempting to authorize Teams integration from our app
One aspect of our integration involves utilizing the following API to generate an access token from by hitting on following URL
https://...
0
votes
0
answers
17
views
Hosted Blazor Pass Auth Token to API from Javascript Fetch Call
I have a hosted Blazor Webassembly app and I am trying to secure my Paypal API endpoint but it keeps showing that it is being called anonymously and failing with 401 Unauthorized.
I have a shopping ...
0
votes
0
answers
36
views
Implementing Authorization Code Grant Flow with Microsoft Graph API in Angular and Node.js
I am working on integrating Microsoft Graph API into my Angular application, and I need to implement the Authorization Code Grant Flow for secure authentication. I have my own application login page, ...
-1
votes
0
answers
42
views
An error occurred when creating the Laravel 9 login form
here I want to create a login form where I enter the username and password, but when I enter the data according to the database that I have created, it keeps returning to the login page, I have ...
1
vote
0
answers
23
views
Can't access retrieve username and password through req.headers.authorization in SwaggerUi
I am writing the backend using nodejs and express. I have set up the swagger for api documentation. I use the bearer authentication method with the token and it's working in the swagger when put my ...
0
votes
0
answers
49
views
Google Drive Picker API asking for consent everytime even in the same session in authorization code flow approach
The client side implementation is currently this
function initClient() {
client = google.accounts.oauth2.initCodeClient({
client_id: CLIENT_ID,
scope: SCOPES,
...
0
votes
1
answer
53
views
Keycloak OpenID Connect redirect_uri behaves inconsistently
I have Keycloak 22.0.5 deployed via docker on my local machine. I have a custom OpenID client configured with its access as follows:
I don't want to use a password grant, I'm using pkce (...
0
votes
0
answers
28
views
How to handle authentication state in Blazor Wasm Hosted project for client and server side
I am developing an application using .NET7 Blazor Webassembly Hosted project with API endpoints and ASP.NET Core Identity. I am implementing a Custom Authentication State Provider and Policy based ...
0
votes
1
answer
38
views
Best practices and some doubts regarding RESTful APIs authorisation
I'm currently developing a backend server in Express.js where users can log in or register on the client side using either a basic email and password method or a social sign-in method (e.g., Google, ...
0
votes
0
answers
17
views
How should I handle token authentication for calling an API endpoint using oauth token + apikey?
At work we use a dashboard environment, built on Zendesk and supplied to us by a partner company. Every operator has their own login (email/pw) for the dashboard.
When logged in, I can access the API ...
0
votes
0
answers
12
views
How to reduce latency for Cognito globally?
We have a global audience for our service, but since our main market is the USA, we use us-east-1 for our Cognito service.
In many cases, we have to run queries like this cURL query
curl 'https://...
0
votes
1
answer
17
views
How to maintain a gnome-extension collaboratively?
The gnome-shell-extensions site supports only personal accounts for uploading. How can i do collaborative development with multiple maintainers for an extension, without sharing account credentials?
...
0
votes
1
answer
30
views
Laravel Custom User Model Policy Issue
I am working on a Laravel project where I have a custom user model (Admin model). I am attempting to create a policy for the ThirdParty model, but even when returning true from the policy method, I'm ...
0
votes
2
answers
36
views
Business validation rules and microservices
Edit My previous question got edited and it obfuscated the reason for posting the question.
At my company, we use a microservice architecture. The problem I am trying to solve is this:
We have a UI ...
0
votes
0
answers
38
views
I want to create a .NET 7 and Angular 16 authentication and role-based authorisation (admin/customer) for example
I wrote the code of the API, but I don't know how it is linked with the Angular project.
This is the middleware configuraton in the program.cs file:
builder.Services.AddTransient<IAuthService, ...
0
votes
0
answers
19
views
Unable to use Interface with CakePHP Dependency Injection - "Argument must be of type AuthorizationServiceInterface, string given"
I want to create a service class in my app that has the AuthorizationService as a dependency so it can access the user’s identity. I have this constructor:
public function __construct(
private ...
0
votes
1
answer
24
views
Single sign on using facebook/google/ms etc on a multi tenant SAAS software
We have a SAAS software where each Tenant has its own set of users with multiple roles like manager, user, contractor etc with different privileges.
Today we have all these in our own database and ...
1
vote
0
answers
46
views
Receiving 403 error once in a while, when trying to send a request from http client in Go
func PrepareRequest(ctx context.Context, method, endpoint, apiResource, path string, data interface{}, parameter string) (*http.Request, error) {
url := https + ip + "/" + apiResource + &...
0
votes
1
answer
90
views
Custom authorization filter in ASP.NET Core Web API
I have an ASP.NET Core 6.0 Web API which receives request from Angular web UI application. Currently I have implemented JWT token authorization as per this : [https://www.c-sharpcorner.com/article/jwt-...
0
votes
0
answers
19
views
401 error code using GoDaddy available domains API
I am trying to write a script to check whether or not a domain is available on GoDaddy. I am getting a 401 error from GoDaddy, meaning there is something wrong with the authorization/API key.
I tried ...
-1
votes
0
answers
36
views
Spring boot authorization server with frontend
I want to try Spring Boot Authorization Server, but I want to use a client-side application written in Angular. As far as I know, the user using the Angular app should obtain a token to access my ...
1
vote
1
answer
27
views
What would be a good consent description for the openid scope?
When signing in a user using OpenID, typically a consent screen is shown listing the requested scopes and a short description, e.g.:
profile: Allow client X ... to access your profile data
email: ...
0
votes
1
answer
26
views
I'm using AppAuth iOS for login purpose in app. I receives authState nil and error saying "Invalid Client"
Process:
User Opens the app.
Taps on login.
Redirected to login page.
User enter credentials.
Redirected back to app.
Received authState nil and error "Invalid Client".
let ...
0
votes
1
answer
45
views
Authorization for ApiController in Blazor Server
Starting points:
one azure tenant + azure AD/Entra;
one blazor server app deployed on App Service (+ App registration and managed identity)
with an ApiController behind Authorization to be accessed ...
0
votes
1
answer
25
views
Is it possible to "chain" Istio AuthorizationPolicies?
I have a question about using AuthorizationPolicy to accomplish a specific scenario. In particular, I have set things up with a CUSTOM action and OAuth2-Proxy so that traffic hitting my Ingress ...
0
votes
1
answer
37
views
Can I calculate user authorization with Spring's hasAuthority without throwing/catching an exception?
My Java application uses Spring's @PreAuthorize("hasAuthority('SomeScopeName')") on methods to assert that the user is authorized to perform the actions in the methods. This annotation ...