Questions tagged [oauth]
OAuth (Open Authorization) is a specification for client applications to access protected resources on behalf of a user. It was developed as an alternative to users handing out their login credentials to third-party applications.
19,491
questions
0
votes
0
answers
8
views
How to avoid manual sign in using Google Oauth2?
I am writing small API to make me able to use Youtube Api v3. Each time I run the script I need to auth my google account. That is totally okay but there is a need to manually type creds in google ...
0
votes
0
answers
12
views
Symfony oauth this server could not verify that you are authorized to access
I have project symfony bound with other project symfony with aouth authentification , in production authentification works but in other environnement I have problems in authentification not works , I ...
0
votes
0
answers
16
views
Discord OAuth2 make users join a server in python
I've tried working around with OAuth2 in python with requests but I just can't make it work. When I fix an error, another one pops up. Please check it out.
import requests
API_ENDPOINT = 'https://...
0
votes
0
answers
11
views
Handle google oauth in front end (react-admin) and back with fastapi-users (with oauth on back end)
I have some doubts how to handle the front/back flow using FastApi (with FastApi-Users) and React-Admin on front end. (all in their latest versions)
I'm using this part of the documentation as ...
0
votes
0
answers
18
views
Firebase OAuth with Google sends me to a blank page
I am trying to do a simple sign in/register with google using firebase auth for a Vue.js project I am working on. Unfortunately, both signInWithRedirect and signInWithPopup are sending me to blank ...
0
votes
0
answers
36
views
Azure Client Credential Flow API Permissions
I have a service that needs to interact with the users' calendars stored in Office365. We are using client credential flow for service-to-service communication.
The owner of the tenant does not want ...
0
votes
0
answers
17
views
Create OAuth 2.0 Client ID without redirect URIs
I want to read Gmail messages in a node.js program. Since Google removed username+password access on Gmail, I need to use OAuth2.
I've created an OAuth2 Client ID. I'm unsure if I should create ...
0
votes
0
answers
19
views
How to fix 401 status code discord OAuth2 request while using the right access token (Node.js)
I have a problem using the discord OAuth2 requests here is my code:
function fetchDiscord(api, access_token) {
return fetchNode(`https://discord.com/api/${api}`, {
method: "GET",
...
0
votes
1
answer
15
views
Azure/Microsoft Identity Platform - Cannot Retrieve Access Token from Token Endpoint (PHP)
I'm trying to write a custom web app that utilizes the Microsoft Identity Platform to authenticate and authorize users. I'm able to successfully authenticate when calling the /authorize endpoint, and ...
0
votes
0
answers
13
views
Can I get an OAuth refresh token when using Device code flow with OpenIddict?
I have implemented the device code flow using OpenIddict and have no problems getting an access key. But I can't get a refresh key like I can with the normal authorization code flow.
When sending a ...
0
votes
0
answers
24
views
Integrating TWILIO with SAP CAI
This year, SAP CAI started with a new Policy and the form to connect TWILIO with SAP CAI has changed definitely. I've tried for more than 4 days to do it but I haven't managed to do it yet.
I would ...
0
votes
1
answer
20
views
AWS Cognito - Pre-clicking an OAuth provider in hosted UI
We have a provider (Xero) who insist that when we use their site to authenticate a user we must use their OAuth provider process directly, but we're using Cognito to allow users a choice of auth ...
0
votes
1
answer
23
views
Youtube oauth2 without web service - urn:ietf:wg:oauth:2.0:oob
So i created youtube api project on google cloud. I tested getting auth code via urn:ietf:wg:oauth:2.0:oob redirect-uri, i don t want to make webservice to auth my account. Everything is good because ...
0
votes
0
answers
11
views
Linkedin Login Authentication Error in Flutter App
I'm having issues authenticating my app with LinkedIn to get a user's SESSIONID to be stored locally in my flutter app.
when I make a post request with this URL: "https://www.linkedin.com/uas/...
0
votes
0
answers
28
views
Auth0 is showing Callback URL mismatch error in Django app
I have a Django app that is working fine. I wanted to integrate Auth0's OAuth Authentication to my app. I followed their official tutorial, but when I go to my Login Url, I get the error at Auth0 page ...
0
votes
1
answer
23
views
How to get the right ACCESS_TOKEN in YouTube APIv3?
Working with YouTube Data API v3
I want to get Access token using this tutorial: https://developers.google.com/youtube/v3/guides/auth/server-side-web-apps
[[CODE]] :
4%2F0AdQt8qiarZnP_RFvafYA-ABLABLA*...
0
votes
0
answers
21
views
OTP/TOTP string decode
I'm pretty new to this and I wonder if an OTP code cand be decoded from an totp string as
Expected OTP Code: 172411
String: totp=1660222387808.v9LdairpCXQHCxdwxh9a/...
1
vote
3
answers
32
views
oauth-userinfo endpoint only returning "sub" value in #curity
I have tried modifying the scopes and claims settings but to no avail.
I amp attempting to retrieve user info via this curl call:
curl -Ssk \
"http://auth.dev.org/oauth/v2/oauth-userinfo?scope=...
0
votes
0
answers
11
views
Outbound IDOC to an API with OAuth2
I need to implement sending outbound IDOC to an API with oauth2 authentication.
According to the answer in Outbound OAuth connection in S4Hana on-premise possible?, it seems to be possible but I still ...
1
vote
2
answers
44
views
Get gmail authorize token and refresh token
I am using Ruby on Rails to access my Gmail account and read emails. I recently changed the password of my account. Since then, I am unable to access the emails using the credentials I was using ...
2
votes
0
answers
61
views
Tiktok Login Kit Integration for web
I am trying to integrate Login Kit with my Node.js app. I am facing redirect issue while the login is successful using tiktok credentials and when the app redirects. Below is the code i have used to ...
0
votes
0
answers
21
views
Error in Oauth2.0 authentication in R using HTTR (failed to connect: connection refused)
I am trying to create a simple app (in R) using GroupMe's API, which utilizes OAuth2.0. The documentation can be found here. However, I'm getting stuck on the first step of authentication/token ...
0
votes
0
answers
11
views
Django Dropbox BadInputException: OAuth2 access token must be set
I've built a Python application which utilizes the dropbox API to access the amount of files and folders within a given directory. I've been trying to host this on a web portal that my partner and I ...
0
votes
0
answers
28
views
Store data in Django server after redirect to linked in OAuth
I am developing an application with LinkedIn Log In with OAuth. In my view, I send a state (random string) in the linkedin request and then I want to compare it with the state received in the linkedin ...
0
votes
0
answers
30
views
Keycloak spring - incorrect URI
I implemented a KeyCloak client with the following configuration:
keycloak configuration
And I implemented my callback endpoint like that:
@GetMapping("/callback")
@ResponseBody
...
5
votes
0
answers
45
views
How to log in to WebView rendered social logins (Facebook/Google)?
I'm working on an app that (for now) is essentially a WebView wrapper over an existing website.
There are social logins there, but when you click on them in the context of the app, the oAuth providers ...
0
votes
1
answer
46
views
Will PKCE implementation resolve problem with dynamic redirect_uri Oauth 2.0 (Code Grant Flow)
I`d like to use redirect_uri as a dynamic parameter in Code Grant but I know that the redirect_uri must be static for security reasons. If I implement PKCE flow and leave validating of the ...
0
votes
0
answers
30
views
Using refresh and access token with Webview flutter
I am using the official flutter webview_flutter package to create a mobile app out of my existing angular web app.
I have OAuth implemented in my web app. I having troubling passing the refresh token ...
-1
votes
0
answers
17
views
Fetch data in wordpress with Postman php-curl codes
I am working on a wordpress site where I have to map different data from a Netsuite application.
I have successfully created some restlet APIs in POSTMAN and I am getting all the data i need. Now I ...
0
votes
1
answer
27
views
Google login with react using as wordpress backend
Considering having an old app written in WordPress and I want to convert it step-by-step into an app written with modern frameworks React + NodeJS.
Right now my first thought is firstly create a ...
0
votes
1
answer
33
views
Generate oauth_signature and oauth_nonce from OAuth Key and secret
I'm trying to request an API which use OAuth 1.0 protocol for authentification.
I have these informations :
OAuthKey (consumer key) : xxx
OAuthSecret : yyy
To perform my requests I need :
...
0
votes
0
answers
26
views
Secure OAuth client credentials flow during mobile application development
I'm developing a mobile app (using Flutter) which has to communicate with a backend secured with OAuth.
The backend is not accessed in the context of a user so authorization or password grant flow are ...
0
votes
0
answers
22
views
Run rest api calls on a remote server using python [duplicate]
I have a code snippet below.
cert = paramiko.RSAKey.from_private_key_file(self.key)
ssh = paramiko.SSHClient()
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
...
0
votes
0
answers
21
views
How can I access Discord OAuth data inside every page in NodeJS?
So I'm building a dashboard, where you can log in with Discord then it shows your profile picture and username. I use node js as the server side. The problem is that I have got the code, everything ...
0
votes
0
answers
20
views
DotNetOpenAuth - Could not load type 'System.Web.UI.TagPrefixAttribute'
I'm trying to implement a client to access an OAuth 1.0 protected API using DotNetOpenAuth, but I'm getting the following error when making either a new DotNetOpenAuth.OAuth.DesktopConsumer or ...
0
votes
1
answer
15
views
Is it a security risk to link OAuth logins with the same email, but different providers?
I am using Auth0 and OAuth to secure my site. At the moment logging in via email, Facebook and Google all link to the same user account. I essentially login based on email, regardless of the OAuth ...
0
votes
1
answer
28
views
AWS Cognito with OpenID Connect IDP
I am trying to connect AWS Cognito with an OpenID Connect Provider provided by ADFS.
I am using the scopes email openid profile
In Cognito I have set up the connection and authorization ist working. I ...
0
votes
0
answers
17
views
Fetch Apple's public key for verifying token signature
'Verify the JWS E256 signature using the server's pulbic key'.
so i tried to call the public key
headers1 = {'content-type': "application/json"}
test = requests.get('https://appleid.apple....
1
vote
1
answer
52
views
+50
Getting a Refresh Token from NextAuth Okta Provider
We have an existing application use NextAuth to communicate with Okta. This is all working fine, we've just added an API which needs the Okta Access Token, we've used the JWT callback in NextAuth to ...
0
votes
1
answer
18
views
OWIN can't validate token from additional IDP configured in ADB2C
We have a functional app that can authenticate (and thus validate tokens) ADB2C users using OWIN middleware server side.
We have now configured ADB2C with an additional IDP (AD) so that our internal ...
1
vote
1
answer
29
views
OIDC Identity Provider design for SSO: should third party website handle authorization on their own?
Let's say I'd like to develop my own OpenID Connect Identity Provider to let different website add a Single Sign On button to their login pages.
For example, WEB A and WEB B can connect to MyIDP to ...
0
votes
0
answers
10
views
Terminal says is not a directory while jupyter notebook says it is a directory
While authenticating for df2gspread I am receiving this message
InvalidClientSecretsError: ('Error opening file', '/Users/comp/.gdrive_private', 'Is a directory', 21)
and while I am in my bash ...
0
votes
0
answers
41
views
Google OAuth running on remote server and authenticating locally
I'm using Python to interact with Google Sheet API using a library called gspread_pandas.
The flow to let this python script to authenticate on google is basically:
Create a project on GCP;
Create an ...
0
votes
0
answers
20
views
'mail' property of account.main_resource inaccessible from python O365 API?
Is there a way to retrieve the email address of a user using the python O365 API?
The only explicit attribute from the user.read scope i can access seems to be the proper name of the user:
account....
0
votes
1
answer
16
views
Replacing "Please provide password to perform action" pattern under OAuth
In my application, I request the user provide their password for certain actions. This attempts to ensure the person performing the action is reconfirmed as the current user.
However, with OAuth I am ...
0
votes
0
answers
16
views
Allow some controllers to one app and not the others
We are developing a mobile app and this app will call the same APIs as the web one.
We want to create specific controllers for the mobile app and prevent it from calling the ones for the web app and ...
0
votes
1
answer
45
views
How to generate PKCE code verifier and challenge
I'm writing a small C library for my projects to do oauth authentication and I am not sure how to generate the code verifier and challenge and what libraries I should use. I would like to use as few ...
0
votes
0
answers
18
views
Connect Salesforce with Azure service bus using oAuth
I am hosting a Azure Service bus. I want a Salesforce client to connect with this service bus and post a message to a topic. I want to use oAuth for authenticating Salesforce client.
I new to Azure ...
0
votes
1
answer
17
views
Does using a Refresh Token require the original credentials?
I'm writing PowerShell scripts against the Bitbucket API to help manage users/groups/repo access etc. Auth is kicking my behind, however.
I've successfully got an access token and refresh token using ...
1
vote
1
answer
36
views
Spring Boot OAuth2 - Remember given Authorization
i'm currently working on a OAuth2 Authorization Server using Spring Boot and the Spring Security OAuth2 Autoconfigure library.
Everything works so far except the fact that I need to authorize the ...