Questions tagged [oauth-2.0]

OAuth (Open Authorization) is an open protocol framework to allow secure API authorization in a simple and standardized way for desktop, mobile and web applications. OAuth 2.0 is the second version of the OAuth protocol.

Filter by
Sorted by
Tagged with
0 votes
0 answers
13 views

OAuth2 - Authenticate a web api (therefore without any frontend) which is at the same time a "client"

I'm implementing a simple OAuth2 server using .NET6, and I would like to understand if there is a way to authorize a Web Api project with protected endpoints but at the same time authenticate itself ...
Matteo Pietro Peru's user avatar
0 votes
0 answers
9 views

How could I keep track of an object in my OAUTH2 flow? [closed]

I have a web app where the user can create an object A and then access an external API from object A. So object A keeps track of the access and refresh tokens. Now, I like to allow the user to create ...
User12234327832's user avatar
0 votes
0 answers
13 views

Add OAuth authentication for HTTP request triggers

Microsoft added a new capability - Add OAuth authentication for HTTP request triggers. I've been trying to trigger the flow by using the @azure/msal-browser package and passing the accessToken ...
Alex Filipovici's user avatar
0 votes
0 answers
4 views

Passing Query or Params to Google Auth routes

the flow i want to implement is that first i will ask the user if he is a company or a candidate. when he choose one, then he will be shown relevant register forms. after then there will be buttons to ...
EHTASHAM TOOR's user avatar
0 votes
1 answer
24 views

How to use OAuth 2.0 for security purpose when its deprecated in Spring Boot?

I have a Spring Boot application. Spring Boot 3 and Java 17. I want to use OAuth 2.0 for security purpose. I checked a few articles. It states that OAuth 2.0 is deprecated. Can anyone suggest how to ...
Clementine's user avatar
-1 votes
1 answer
104 views

How to integrate a Spring MVC application with Spring Cloud Gateway with OAuth2.0 Security?

I have a Spring Boot MVC + Thymeleaf application which talks to a bunch of microservices via Spring Cloud Gateway. mvc_app -> gateway -> (service_a, service_b,...) Now, I want to implement OAuth ...
K. Siva Prasad Reddy's user avatar
0 votes
0 answers
19 views

Youtube Private videos via Google Oauth2?

I am building a closed system for training. It is a login with Google Oauth 2.0 as in the admin panel I have a white list emails that can use the system (log in). I am trying to use YouTube private ...
Todor Markov's user avatar
0 votes
1 answer
23 views

oauth2login with ressourceServer

i have this configuration for my security chain filter: public SecurityFilterChain securityFilterChain(HttpSecurity httpSecurity) throws Exception { return httpSecurity ....
ElieA's user avatar
  • 1
0 votes
0 answers
11 views

VUE+FASTAPI receiving 422 Unprocessable Entity when sending request form object for OAuth2PasswordRequestForm

I developing a site using Vue and FASTAPI. I am currently stuck with the error 422 Unprocessable Entity received from a FASTAPI Sever. As I understand 422 error cause when the request reached server ...
WIsh Suharitdamrong's user avatar
0 votes
0 answers
28 views

Spring Security 5 Oauth configuration with external clientName parameter and ThymeLeaf

Our app has a controller mapping ("/newsociallogin") that takes a request param String type (i.e. "google" or "apple") from an external site and then tries to ...
kpdude's user avatar
  • 1
0 votes
0 answers
8 views

Authorization code flow : how to implement it with an architecture SPA + Front server + BFF ? PKCE and co

I'm facing an issue on how implement the authorization code flow with a complex architecture composed of : a SPA executed on the web browser (Nuxt) a frontend server (Node) use to serve the SPA and ...
LoVas2's user avatar
  • 1
0 votes
0 answers
35 views

Where to get JWT for RequestAuthentication in Istio

Context I am currently in the process of setting up AuthN and AuthZ for Istio. I will have to consume an (external) OIDC Identity Provider. I know that Istio provides RequestAuthentication and ...
Jasper Anders's user avatar
0 votes
0 answers
26 views

Redirecting to other url during Authentication using Next auth

I deployed my site on vercel Link and had configured everything from .env variables to everything. I had set the NEXTAUTH_URL to the site domain which is https://react-intern-assignment-gamma.vercel....
Shaik Mohammed Huzaifa's user avatar
0 votes
0 answers
7 views

Redirecting to other url during Authentication using Next auth

I deployed my site on vercel Link and had configured everything from .env variables to everything. I had set the NEXTAUTH_URL to the site domain which is https://react-intern-assignment-gamma.vercel....
Shaik Mohammed Huzaifa's user avatar
0 votes
0 answers
16 views

NextAuth Azure AD B2C Signin Error - Expected 200 OK, got: 404 Not Found

I am working on a Next.js project where I am integrating OAuth authentication using NextAuth. I have configured both Google and Azure AD B2C as authentication providers. While Google authentication is ...
nithin_sikinam's user avatar
-1 votes
1 answer
19 views

How to grant client credential OAuth 2.0 in slim PHP

I am new and was trying to study API using slim PHP, recently I was introduced to Postman and found out you can test API prior to code which was interesting, and then I got more deep into it and found ...
jameela's user avatar
0 votes
1 answer
20 views

Securely Handling OAuth Tokens and Keys for eLearning Platform Integration with Zoho CRM

I am developing an eLearning platform, and I need to integrate it with Zoho CRM to update payment statuses after the payment process. To achieve this, I am using OAuth 2.0 for authentication with Zoho ...
Shibiliya Ismail's user avatar
-1 votes
0 answers
20 views

Retrieving OAuth response token from redirect URL in Unity C# [closed]

I am attempting to get OAuth2 to work with unity and am having issues retrieving the code from the redirect URL. I am able to complete the authentication in my browser and the redirect URL is called. ...
Nick Hudson's user avatar
0 votes
0 answers
19 views

Login/Signup using LinkedIn api

I want integrate login/signup using Linkedin in Flask but getting errors. I have setup same redirect_URI in LInkedIn developer app and in flask app, but still it is not redirecting me to the ...
Gulay's user avatar
  • 1
0 votes
0 answers
26 views

OpenIdDict Error server_error", error_description="The remote authorization server is currently unavailable or returned an invalid configuration

we are using OpenIdDict with Auth Server and resource server as two separate project and two separate url. It works in local and as alpha1 but fail in stage where we have load balancer. it works with ...
Saroj Ekka's user avatar
0 votes
1 answer
21 views

How to implement Google identity services library in React?

This would be my current code and it stopped working: import React, { Component } from "react"; import Auth from "../../helper/auth"; import PropTypes from "prop-types"; ...
Dženis H.'s user avatar
  • 7,363
0 votes
0 answers
24 views

OAuth2 Single Log Out using python flask

I'm trying to implement OAuth SLO using google IDP. This is just a test application. I couldn't find any proper way to implement SLO in my application. Can Someone suggest me the best way to implement ...
Manoj Kumar's user avatar
0 votes
0 answers
17 views

Spring authorization server: Registration access token rotation

I am using Spring authorization server and have configured the clients to have short lived access tokens. When a new client is registered a registration access token is issued, which then the client ...
acsam's user avatar
  • 63
0 votes
0 answers
10 views

Optain an ID-Token from Microsoft ADFS Server

My system is running in a Citirx environment with a rich client. Now I want to make a request to an (Java) OAuth/OIDC resource server and need an OAuth access or ID token the get access to. My ...
Peter Andres's user avatar
0 votes
1 answer
32 views

How do Oauth tokens get passed back to the browser?

I vaguely understand what Oauth accomplishes, but I'm confused as to how the browser ends up acquiring the auth token when redirecting after a successful authentication. I see diagrams with 'client' ...
0x777C's user avatar
  • 1,003
1 vote
0 answers
15 views

Gocloak: Restropect token API fails with 400 Bad request

I am trying to use the RestropectToken in client.go in gocloak [email protected]. I have created an access token and now using that am trying to call the RestropectToken(). In client.go, if I change from &...
M.P's user avatar
  • 71
0 votes
0 answers
19 views

TikTok API is US only?

Has anyone else implemented TikTok login into their app/web-app? If so, have you found that only users from the U.S. are able to successfully connect? For any user outside of the US, an access_token ...
JSeeger's user avatar
0 votes
0 answers
25 views

Login with Google (the new way)

This is my current component (older codebase): import React, { Component } from "react"; import GoogleLogin from "react-google-login"; import Auth from "../../helper/auth"...
Dženis H.'s user avatar
  • 7,363
0 votes
1 answer
18 views

How to authorize into a downstream API?

We use OAuth 2.0 for authorization. A server side web app first sends client credentials to an authorization server and obtains a JWT token. It then sends a request to API-1. API-1 needs to send a ...
123's user avatar
  • 3
0 votes
1 answer
35 views

Multiple OAuth2AuthorizedClientManagers in a single Spring Boot application in Spring Security 5.8

We are in the process of upgrading to Spring Security 5.8 in preparation for the bigger update to 6 and have the case where we require multiple AuthorizedClientManagers in a single Spring Boot ...
filpa's user avatar
  • 3,682
0 votes
1 answer
33 views

Google OAuth 2.0 token API returns an undocumented field

As part of the OAuth 2.0 flow, I am sending a request from my backend to: POST https://www.googleapis.com/oauth2/v3/token HTTP/1.1. My request is constructed as follows: code=<code>&state=&...
Nom1fan's user avatar
  • 848
2 votes
0 answers
30 views

Trouble with Azure OAuth2 integration in Golang

I am currently working on integrating Azure OAuth2 authentication into my Golang application. Everything seems to work fine for the initial login, but I'm facing an issue when a user logs out and then ...
Sreedevi Devadas's user avatar
0 votes
0 answers
10 views

Asana OAUTH2.0 Integration

const AsanaIntegration = () => { const { isOpen, onOpen, onClose } = useDisclosure(); // Hook for managing modal state const [infoModalContent, setInfoModalContent] = useState("");// ...
MANAV JARAL's user avatar
0 votes
0 answers
20 views

get invalid_grant - Malformed auth code when trying to get access token from authorization code for sign in with Google

I'm creating a Javascript application that allows the users to sign in with Google. When I try to sign in with Google I get redirected to my application with a querystring containing an authorization ...
splunk's user avatar
  • 6,465
0 votes
0 answers
14 views

getting {myTopic=TOPIC_AUTHORIZATION_FAILED} in Kafka

I am following https://medium.com/egen/how-to-configure-oauth2-authentication-for-apache-kafka-cluster-using-okta-8c60d4a85b43 for setting up OAuth2.0 But when I try to produce data I get Error while ...
Nisha Goyal's user avatar
0 votes
0 answers
10 views

Adobe Services API - need Authorize URI and Token URI

I am trying to set up an orchestration app that I'm using (Make.com) to connect to the Adobe PDF Services API. The first step is to set up the OAuth 2.0 connection which requires information that I ...
dgerol's user avatar
  • 1
0 votes
0 answers
10 views

how to use an internal mail server with jira cloud

attempting to connect jira cloud to a mail server for Email this Issue but we have an internal only mail server with AUTH is there a way to use this server or how do I process smtp requests in the ...
Jason Coleman's user avatar
-1 votes
0 answers
24 views

Facebook OAuth2 login not providing email address to application when user changes email address on Facebook

Facebook has critical bug in OAuth2. When you remove email address from facebook options and add new address then OAuth2 login no more works because Facebook does not provide email address to app ...
mikep's user avatar
  • 5,948
-1 votes
0 answers
17 views

Redux not able to get user data after successRedirect in authRouter [closed]

And yes it is working fine in development ie localhost the user was able to login the data was then sent to redux all working fine but when deployed the mentioned problem occurs This was my authSlice....
Gana Sai Teja Velicheti's user avatar
0 votes
0 answers
20 views

Can't retrieve cookie in vueJS frontend from NestJS backend. Doing Oauth authentication

I'm trying to setup an Oauth authentication but I can't retrieve any cookie in the frontend. Here is my stack: vueJS (frontend) nestJS (backend) passport (Oauth) prisma (ORM) postgreSQL (DB) vuetify (...
HSH22's user avatar
  • 1
0 votes
0 answers
15 views

JS: get user in Chrome that is already logged in?

I am developing a Chrome extension that uses a Google account to connect to calendar events. Previously, I used OAuth2 authentication to identify the user and obtain their access token. Now, I no ...
Ilya Konsty's user avatar
0 votes
0 answers
26 views

Google OAuth2 Issue - Error 400: redirect_uri_mismatch

I am making a bidding web application for which I am using Google OAuth2 Authentication in SpringBoot Maven. I have registered the same uri in Google Cloud Console, but still, I am getting Error 400 ...
Pratyush Bindal's user avatar
0 votes
1 answer
14 views

Why can't OIDC authorization code flow be all back channel?

I've been learning OIDC, especially authorization code flow. The front channel just gets the authorization code, and then sends this to the client's back end code which then makes a back channel call ...
David Klempfner's user avatar
0 votes
0 answers
6 views

Stuck getting token from Yahoo Oauth 2.0 Fantasy Football API

I am trying to access data for my Yahoo Football Fantasy League to do further Analysis. I am using this also to learn more about R. So far I followed all the steps in other examples but I am stuck at ...
Pepebuho's user avatar
0 votes
0 answers
8 views

How to implement Client Credentials Grant with Spring WebFlux 6.X and Spring OAuth2 Client ignoring current principal

I am trying to use the native support of Spring WebFlux to setup a WebClient with Client Credentials Grant but I would like to ignore the principal in the Security Context. The problem I am facing is ...
Abbadon's user avatar
  • 2,523
0 votes
0 answers
26 views

How to retrieve oauth2.0 access token for grant type Client Credentials in Groovy

I am using ReadyAPI (SoapUI - pro) and able to manually retrieve the OAuth2.0 Access Token for grant type Client Credentials. How can I make this Access Token retrieval automated in Groovy script so ...
Jamil Rahman's user avatar
0 votes
0 answers
23 views

UPS OAuth LassoReDirect URL Giving Access Denied Response

Reference: Getting token from UPS.com using OAuth Error I am essentially using this document and can't get step 3 to happen in order to move on with generating a token: https://developer.ups.com/api/...
shqalec's user avatar
0 votes
0 answers
15 views

Google Workspace Add-on OAuth authentication and authorization

We have web application which is using OAuth authentication and authorization. We have created and published google cloud project with some scopes which is used in web application. Now we are ...
Dinesh Ravichandran's user avatar
0 votes
0 answers
29 views

Getting Axios Error, status code 400 when trying to implement Oauth with nodejs and react

import axios from "axios"; import "dotenv/config"; import { Router } from "express"; const authRouter = Router(); let codeVerifier: string = ""; // Initialize codeVerifier as an empty string ...
Alucard's user avatar
  • 70
0 votes
0 answers
21 views

What is a recommended grant expiry time in Oauth2?

We've had a longstanding bug with our app that uses the Oauth2 protocol. We have a server running Node with the oidc-provider package, and also a Redis instance which stores refresh tokens, grants etc....
tommaisey's user avatar
  • 449

1
2 3 4 5
478