5,674
questions
0
votes
0
answers
17
views
How to configure separately running Authetication service with login page while still keeping Keycloak in control of the authorization flow?
I want to implement the OAuth 2.0 authorization code flow for confidential clients.
Below is the list of parties involved :
User : End user person.
Client : Third Party Application acting as ...
0
votes
0
answers
10
views
Persistent Tokens Issue with OpenIddict and MongoDB in .NET Application
I am working on a .NET application using OpenIddict for authentication and MongoDB for token storage. Despite configuring the application to use reference tokens and setting up data protection with ...
0
votes
0
answers
15
views
Ping OAuth Token Validation
I am using Ping OAuth authentication for some custom APIs endpoint. We have get token API
https://example.com/auth/as/token.oauth2 for external services to get token and make call to our custom API ...
0
votes
0
answers
34
views
SSO session idle in Keycloak is not refreshed by the activity user
I have app in PHP where I use keycloak to authenticate, after that I have feature which check if access token doesn't expire. If access token expired, another function send request to keykloak to ...
-2
votes
0
answers
52
views
How to extend Google login (oauth2) with custom parameters from the screen? [closed]
I don't know how to solve my problem: there are user attributes (fields) that are supplied by Google itself in the token - mail, name and so on. But this data is not enough and I want to get other ...
0
votes
1
answer
47
views
How to map a user attribute to a standard OIDC claim in keycloak
I have a docker container with Keycloak.
I am trying to understand how the authentication works, especially with regards to claims mapping.
I have created a realm and in Realm Settings > User ...
0
votes
0
answers
26
views
How to response a access_token for spa front? [closed]
I have three services, first is a vue spa app, second is a spring-security which is a oauth-client role, last is a spring-authorization-server. There authentication use oidc authorization_code flow ...
0
votes
1
answer
45
views
How to authenticate GitHub REST API in Azure on behalf of Azure Pipelines GitHub App?
I am trying to make a GitHub PR from my Azure Pipeline. I already have Azure Pipeline GitHub App installed. That's how my Azure Pipeline connects to the GitHub repository. It already has the ...
0
votes
0
answers
27
views
How to secure OIDC authorisation code flow with PKCE from interception by privileged admin?
I'm really struggling to wrap my head around this. I have a hypothetical flow, which includes 3 entities: The user/browser, AuthServer, client/App. This flow makes use authorisation code flow with ...
0
votes
0
answers
22
views
Guidance performing unobtrusive stepup authentication in blazor web (.net8)
Looking for a discussion on how to perform unobtrusive step-up authentication in blazor web (.net8). I'm specifically trying to do this with Duende idp, but I would assume it would apply to all OIDC ...
0
votes
0
answers
23
views
Getting the ID and Access Token values in Oracle Apex app after passing OpenID connect SSO against 3rd party Identity Provider
I use Oracle Apex 24.1.0. Configured app, web credentials and authentication scheme to use custom 3rd party Identity Server. It works as expected, I see the "Access Tokens" and "ID ...
0
votes
0
answers
16
views
hashicorp vault oidc keycloak via squid proxy
Is there a way how to configure that Hashicorp vault connects to keycloak oidc via squid proxy? How can I achieve that ?
I tried to connect from vault to keycloak oidc directly but the connection is ...
0
votes
0
answers
35
views
Issues with cutsom NodeJS OpenID connect provider and Portainer
My Custom NodeJS OpenID Connect Provider
app.js
require('dotenv').config();
const express = require('express');
const bodyParser = require('body-parser');
const bcrypt = require('bcryptjs');
const ...
0
votes
1
answer
31
views
Can Oauth also gives user's identity?
I am really confused when I read that Oauth is used when you want authorization & OpenId when you want authentication i.e. getting user's identity.
What does identity means here ? I feel it is a ...
0
votes
0
answers
12
views
OKTA Redirect URI error: The 'redirect_uri' does not match the redirection URI
I am building an Web app where i have okta to login using redirect model + OIDC. I am able to successfully login and perform 2fa and create an access and ID token.
var createError = require('http-...
0
votes
0
answers
27
views
Quarkus OIDC end local session automaticlly
I am using Quarkus 3.14 with Angular as the SPA and Keycloak for authentication.
**I want to implement a feature that forces the user to log in again after a specific time period (e.g., 2 hours) by ...
0
votes
1
answer
30
views
Failed to make identity provider oauth callback: javax.net.ssl.SSLHandshakeException:
Im trying to use PingFed as an IDP in Keycloak for my application. Keycloak is a standalone server in localhost. Every thing works fine when redirecting to PingFed for authentication. After the user ...
0
votes
0
answers
27
views
Invoke EntraID or Okta 2FA on demand after Authenticated Session on certain button clicks
I am looking for suggestion or Approach on the UseCase.
When my app launches, I have customer login to our application through SSO. This could be either Okta or EntraID or Any IDP provider. As they ...
1
vote
1
answer
70
views
google oauth2 scopes and consent dialog UI
https://developers.google.com/identity/protocols/oauth2/scopes#google-sign-in
if I fire off the consent WITHOUT the scopes 'profile' and 'email'. I will still get the UI.
Saying "By continuing, ...
0
votes
0
answers
15
views
JWT with no claims after refreshing it
I'm using oauth2-proxy as a reverse proxy with IBM ISAM as the identity provider (IdP).
When doing the initial token request, (after requesting the /authorization endpoint), the JWT I receive contains ...
0
votes
1
answer
28
views
Proper design for th Keycloak auth with APIs and UI
I’m developing the service with consist with two Web API apps (main and second), and two front apps (Web UI and Mobile app). I’m using the Keycloak for auth purposes (OAuth, OIDC, JWT Tokens). I ...
0
votes
0
answers
25
views
Authentication not working in blazor server app
so i am trying to implement authentication with microsoft in an existing blazor server app, that is made to run on an IIS and i also debug the site using IIS express.
I have checked out a lot of ...
-1
votes
2
answers
73
views
How to integration Spring-Authorization-Server to OAuth2 authorization_code with No /Login page?
In our case, we need a OAuth2 authorization_code flow with Spring-Authorization-Server to fetch per user tokens.
But, we dont need /login page cause we use api to fetch.
Such as, a user use customer ...
0
votes
1
answer
24
views
How can I access PAR request from KeyCloak custom authenticator code?
I'm using KeyCloak with a custom authenticator written in Java
KeyCloak package version is 22.0.1
If a user posts an auth request to the PAR endpoint (https://KC_URL/realms/users/protocol/openid-...
1
vote
1
answer
32
views
why we need OAuthHandler when OpenIdConnectHandler can do the job?
OAuthHandler:
https://source.dot.net/#Microsoft.AspNetCore.Authentication.OAuth/OAuthHandler.cs,2557205ecf41bef5
OpenIdConnectHandler:
https://source.dot.net/#Microsoft.AspNetCore.Authentication....
0
votes
0
answers
19
views
Update AddMicrosoftIdentityWebApp without restarting application
I have used AddMicrosoftIdentityWebApp in my program.cs class for Microsoft Authentication.
builder.Services.AddAuthentication(opts =>
{
opts.DefaultScheme = CookieAuthenticationDefaults....
1
vote
1
answer
58
views
events logs show the LOGOUT event as a Success, but the session between Cognito and Keycloak keeps active
I am trying to configure Cognito as an External IDP for my Keycloak, I´ve managed to configure it`s full login methods, etc.. but when it comes to logout it just wont work, the events logs show the ...
0
votes
0
answers
27
views
How to make sure token always fresh in google new credential manager for Android
is there a property, class, function of Google Credential Manager for android that make sure ID Token always fresh when making API call to backend. this API call will return Bearer Token to ...
0
votes
1
answer
97
views
Spring Auth0 Library With JWK Provider Cannot Verify Token That Obtained From Azure Entra OIDC By React SPA Authorization Code Flow
Note: The values that used in this question are only sample. E.g.: 3d355765-XXX-47cd-9c7a-bf31179f5XXX
Hello everyone, I have a ReactJS application and a Spring backend application. However, Backend ...
0
votes
1
answer
100
views
The required field 'nonce' is missing from the credential. Ensure that you have all the necessary parameters for the login request. [Azure Open ID]
I'm trying to implement Azure AD authentication in a .NET 4.8 project that is developed on the NopCommerce 3.8 framework.
But I'm getting this error when the callback happens:
OpenIdConnectMessage....
0
votes
0
answers
56
views
Custom OIDC authentication in Azure Functions (without ClientSecret, with extra request parameters)
I need to use OpenID Connect to authenticate to an API.
When I'm is not authenticated, I will be redirected to the login screen (*)
And after logging in I will be redirected back.
(*) Typically I'm ...
0
votes
1
answer
104
views
Custom Claims in a Multitenant Microsoft Entra App
I have a "multitenant and personal" Entra app that should allow users with all kinds of Microsoft accounts to log into it.
I need to add some custom claims to the ID token returned by this ...
0
votes
1
answer
46
views
.NET8 Open ID connect required restarting when editing app details
Below is my program.cs class. I placed my Azure app details like clientid, secret and tenant id in appsettings.json file. It is working fine when we initially run the application but I want when we ...
0
votes
0
answers
39
views
Restricting Microsoft Identity authentication to only approved devices
I am using Microsoft Identity in an Azure hosted web app and want to restrict authentication to only whitelisted devices that have been issued from our company. Is there any device identifiers sent ...
0
votes
0
answers
21
views
Angular + OidcSecurityService package + Forcing Signup
calling this.oidcSecurityService.authorize(); invokes the LOGIN page in cognito.
But my cognito setup also allows for sign-up, showing the "sign up" option below. Once clicked, it changes ...
0
votes
1
answer
50
views
How to periodically sync and clean up Keycloak users with Entra ID?
I am using Keycloak with Entra ID / Azure AD as an identity provider. I've linked Entra ID via OpenID Connect. The setup automatically syncs accounts on their first login, which is functioning well. ...
0
votes
1
answer
87
views
Issue with PKCE Authentication Flow for Azure AD B2C: "The supplied code_verifier is invalid"
I am currently trying to use the PKCE method of obtaining an access token for Azure AD B2C to pass to my Azure Function APIs in API Management. I am passing the below URL into my browser to generate ...
0
votes
0
answers
24
views
Firebase Auth with OIDC
At our company we have our own OpenID Connect server (built using OpenIDDict in C#). I've set the server up as an OIDC provider in Firebase Auth and it seems to work relatively well. I can extract the ...
0
votes
0
answers
40
views
Do we need to save OAuth2AuthorizationRequest in OAuth2AuthorizationService.save method?
I am using Spring Authorization Server to create an authorization server.
For saving and retrieving authorizations, I have implemented a custom authorization service implementing the ...
1
vote
1
answer
36
views
Ping Federate Settings to configure authorization code grant flow using Postman
Can someone please provide Ping Federate settings to configure authorization code grant flow using OAuth2.0 and OIDC protocols from Postman.
This is my configuration in postman to make an ...
0
votes
0
answers
41
views
Angular 18 breakpoints are broken after logging out via OIDC
Summary
If I try to debug an angular app with Visual Studio Code after I have logged in, logged out and then logged in again, error messages are displayed or the debugger stops in the wrong places. ...
0
votes
1
answer
67
views
why offline_access scope is needed to request refresh token in IdentityServer (OAuth2)?
I have to set AllowOfflineAccess = true to get refresh token
public static class Config
{
public static IEnumerable<Client> Clients =>
new Client[]
{
new ...
0
votes
1
answer
42
views
Refreshing webapp session while using OIDC
I'm trying to use OIDC based integration for SSO in my Webapp. The idea is that anyone deploying the app should be able to plugin OIDC configuration (wellknow url, client id and secret) and can ...
0
votes
0
answers
20
views
OpenID (elytron-oidc-client) with .ear or subdeployment in WildFly 26
Because i have no solution for the main-problem (SSO with OpenID), i tried to use the authentication from the main deployment.
But this is an ear-Deployment and the subsystem "elytron-oidc-client&...
0
votes
1
answer
40
views
I/O error on GET request for "https://localhost/application/o/{name}/.well-known/openid-configuration": Connection refused
I'm trying to hook up Spring Security to use a basic Authentik setup. Authentik is running in Docker via Docker Compose, as is my Spring Boot service.
FYI, I've replaced the name of my application ...
1
vote
1
answer
53
views
Assume role in different account using an assumed role with web identity
I am using terraform HCP and AWS, I am using what it is considered to be a best practice, using dynamic credentials (Hcp dynamic credentials with aws)
This is my setup:
in terraform HCP I have an ...
0
votes
0
answers
49
views
How to make angular-oauth2-oidc with azure AD return the access_token
I have been trying to implement a the oidc oauth workflow with pkce following this guide 'https://blog.ordina-jworks.io/security/2020/08/18/Securing-Applications-Azure-AD.html'.
However, the library ...
0
votes
2
answers
29
views
why Relying Party doesn't honour IdentityServer's `IdentityTokenLifetime` setting?
I set IdentityTokenLifetime (https://github.com/DuendeSoftware/IdentityServer/blob/e9860c6488f90e8fbc11a4452b9dd111dbfae933/src/Storage/Models/Client.cs#L187) to a very small value 60 seconds, but ...
0
votes
1
answer
21
views
Implementing OIDC for simple delegated auth
I'd like to implement simple delegated authentication for my service with OpenID Connect, but I'm a bit confused what should happen after the client gets the credentials from the auth server.
I've got ...
0
votes
1
answer
51
views
Not getting authenticated user in middleware with OpenIdConnect in ASP.NET Core 8
I have issues with my ASP.NET Core application that it is trying to retrieve user claims in the middleware.
This is my program cs:
var builder = WebApplication.CreateBuilder(args);
if (builder....