Skip to main content
Filter by
Sorted by
Tagged with
0 votes
0 answers
17 views

How to configure separately running Authetication service with login page while still keeping Keycloak in control of the authorization flow?

I want to implement the OAuth 2.0 authorization code flow for confidential clients. Below is the list of parties involved : User : End user person. Client : Third Party Application acting as ...
Dinesh Solanki's user avatar
0 votes
0 answers
10 views

Persistent Tokens Issue with OpenIddict and MongoDB in .NET Application

I am working on a .NET application using OpenIddict for authentication and MongoDB for token storage. Despite configuring the application to use reference tokens and setting up data protection with ...
Hiren More's user avatar
0 votes
0 answers
15 views

Ping OAuth Token Validation

I am using Ping OAuth authentication for some custom APIs endpoint. We have get token API https://example.com/auth/as/token.oauth2 for external services to get token and make call to our custom API ...
K P's user avatar
  • 13
0 votes
0 answers
34 views

SSO session idle in Keycloak is not refreshed by the activity user

I have app in PHP where I use keycloak to authenticate, after that I have feature which check if access token doesn't expire. If access token expired, another function send request to keykloak to ...
ufo1990's user avatar
-2 votes
0 answers
52 views

How to extend Google login (oauth2) with custom parameters from the screen? [closed]

I don't know how to solve my problem: there are user attributes (fields) that are supplied by Google itself in the token - mail, name and so on. But this data is not enough and I want to get other ...
Дмитрий Дмитриев's user avatar
0 votes
1 answer
47 views

How to map a user attribute to a standard OIDC claim in keycloak

I have a docker container with Keycloak. I am trying to understand how the authentication works, especially with regards to claims mapping. I have created a realm and in Realm Settings > User ...
user23137927's user avatar
0 votes
0 answers
26 views

How to response a access_token for spa front? [closed]

I have three services, first is a vue spa app, second is a spring-security which is a oauth-client role, last is a spring-authorization-server. There authentication use oidc authorization_code flow ...
bruce0828's user avatar
0 votes
1 answer
45 views

How to authenticate GitHub REST API in Azure on behalf of Azure Pipelines GitHub App?

I am trying to make a GitHub PR from my Azure Pipeline. I already have Azure Pipeline GitHub App installed. That's how my Azure Pipeline connects to the GitHub repository. It already has the ...
Ingun전인건's user avatar
0 votes
0 answers
27 views

How to secure OIDC authorisation code flow with PKCE from interception by privileged admin?

I'm really struggling to wrap my head around this. I have a hypothetical flow, which includes 3 entities: The user/browser, AuthServer, client/App. This flow makes use authorisation code flow with ...
Jack Gates's user avatar
0 votes
0 answers
22 views

Guidance performing unobtrusive stepup authentication in blazor web (.net8)

Looking for a discussion on how to perform unobtrusive step-up authentication in blazor web (.net8). I'm specifically trying to do this with Duende idp, but I would assume it would apply to all OIDC ...
gilm0079's user avatar
  • 605
0 votes
0 answers
23 views

Getting the ID and Access Token values in Oracle Apex app after passing OpenID connect SSO against 3rd party Identity Provider

I use Oracle Apex 24.1.0. Configured app, web credentials and authentication scheme to use custom 3rd party Identity Server. It works as expected, I see the "Access Tokens" and "ID ...
Sergey Shafiev's user avatar
0 votes
0 answers
16 views

hashicorp vault oidc keycloak via squid proxy

Is there a way how to configure that Hashicorp vault connects to keycloak oidc via squid proxy? How can I achieve that ? I tried to connect from vault to keycloak oidc directly but the connection is ...
Mink's user avatar
  • 1
0 votes
0 answers
35 views

Issues with cutsom NodeJS OpenID connect provider and Portainer

My Custom NodeJS OpenID Connect Provider app.js require('dotenv').config(); const express = require('express'); const bodyParser = require('body-parser'); const bcrypt = require('bcryptjs'); const ...
Braydan's user avatar
  • 25
0 votes
1 answer
31 views

Can Oauth also gives user's identity?

I am really confused when I read that Oauth is used when you want authorization & OpenId when you want authentication i.e. getting user's identity. What does identity means here ? I feel it is a ...
Yusuf's user avatar
  • 429
0 votes
0 answers
12 views

OKTA Redirect URI error: The 'redirect_uri' does not match the redirection URI

I am building an Web app where i have okta to login using redirect model + OIDC. I am able to successfully login and perform 2fa and create an access and ID token. var createError = require('http-...
Pawan's user avatar
  • 2,004
0 votes
0 answers
27 views

Quarkus OIDC end local session automaticlly

I am using Quarkus 3.14 with Angular as the SPA and Keycloak for authentication. **I want to implement a feature that forces the user to log in again after a specific time period (e.g., 2 hours) by ...
patrikpaco's user avatar
0 votes
1 answer
30 views

Failed to make identity provider oauth callback: javax.net.ssl.SSLHandshakeException:

Im trying to use PingFed as an IDP in Keycloak for my application. Keycloak is a standalone server in localhost. Every thing works fine when redirecting to PingFed for authentication. After the user ...
ManishBharathi's user avatar
0 votes
0 answers
27 views

Invoke EntraID or Okta 2FA on demand after Authenticated Session on certain button clicks

I am looking for suggestion or Approach on the UseCase. When my app launches, I have customer login to our application through SSO. This could be either Okta or EntraID or Any IDP provider. As they ...
Pawan's user avatar
  • 2,004
1 vote
1 answer
70 views

google oauth2 scopes and consent dialog UI

https://developers.google.com/identity/protocols/oauth2/scopes#google-sign-in if I fire off the consent WITHOUT the scopes 'profile' and 'email'. I will still get the UI. Saying "By continuing, ...
developer gubo's user avatar
0 votes
0 answers
15 views

JWT with no claims after refreshing it

I'm using oauth2-proxy as a reverse proxy with IBM ISAM as the identity provider (IdP). When doing the initial token request, (after requesting the /authorization endpoint), the JWT I receive contains ...
Jonathan Rioux's user avatar
0 votes
1 answer
28 views

Proper design for th Keycloak auth with APIs and UI

I’m developing the service with consist with two Web API apps (main and second), and two front apps (Web UI and Mobile app). I’m using the Keycloak for auth purposes (OAuth, OIDC, JWT Tokens). I ...
lebar's user avatar
  • 53
0 votes
0 answers
25 views

Authentication not working in blazor server app

so i am trying to implement authentication with microsoft in an existing blazor server app, that is made to run on an IIS and i also debug the site using IIS express. I have checked out a lot of ...
Temeos's user avatar
  • 46
-1 votes
2 answers
73 views

How to integration Spring-Authorization-Server to OAuth2 authorization_code with No /Login page?

In our case, we need a OAuth2 authorization_code flow with Spring-Authorization-Server to fetch per user tokens. But, we dont need /login page cause we use api to fetch. Such as, a user use customer ...
bruce0828's user avatar
0 votes
1 answer
24 views

How can I access PAR request from KeyCloak custom authenticator code?

I'm using KeyCloak with a custom authenticator written in Java KeyCloak package version is 22.0.1 If a user posts an auth request to the PAR endpoint (https://KC_URL/realms/users/protocol/openid-...
Gil's user avatar
  • 11
1 vote
1 answer
32 views

why we need OAuthHandler when OpenIdConnectHandler can do the job?

OAuthHandler: https://source.dot.net/#Microsoft.AspNetCore.Authentication.OAuth/OAuthHandler.cs,2557205ecf41bef5 OpenIdConnectHandler: https://source.dot.net/#Microsoft.AspNetCore.Authentication....
user25521292's user avatar
0 votes
0 answers
19 views

Update AddMicrosoftIdentityWebApp without restarting application

I have used AddMicrosoftIdentityWebApp in my program.cs class for Microsoft Authentication. builder.Services.AddAuthentication(opts => { opts.DefaultScheme = CookieAuthenticationDefaults....
Amit's user avatar
  • 59
1 vote
1 answer
58 views

events logs show the LOGOUT event as a Success, but the session between Cognito and Keycloak keeps active

I am trying to configure Cognito as an External IDP for my Keycloak, I´ve managed to configure it`s full login methods, etc.. but when it comes to logout it just wont work, the events logs show the ...
Vitor Conti's user avatar
0 votes
0 answers
27 views

How to make sure token always fresh in google new credential manager for Android

is there a property, class, function of Google Credential Manager for android that make sure ID Token always fresh when making API call to backend. this API call will return Bearer Token to ...
Zen Shirayuki's user avatar
0 votes
1 answer
97 views

Spring Auth0 Library With JWK Provider Cannot Verify Token That Obtained From Azure Entra OIDC By React SPA Authorization Code Flow

Note: The values that used in this question are only sample. E.g.: 3d355765-XXX-47cd-9c7a-bf31179f5XXX Hello everyone, I have a ReactJS application and a Spring backend application. However, Backend ...
Ali's user avatar
  • 2,658
0 votes
1 answer
100 views

The required field 'nonce' is missing from the credential. Ensure that you have all the necessary parameters for the login request. [Azure Open ID]

I'm trying to implement Azure AD authentication in a .NET 4.8 project that is developed on the NopCommerce 3.8 framework. But I'm getting this error when the callback happens: OpenIdConnectMessage....
Isanka Thalagala's user avatar
0 votes
0 answers
56 views

Custom OIDC authentication in Azure Functions (without ClientSecret, with extra request parameters)

I need to use OpenID Connect to authenticate to an API. When I'm is not authenticated, I will be redirected to the login screen (*) And after logging in I will be redirected back. (*) Typically I'm ...
realbart's user avatar
  • 3,915
0 votes
1 answer
104 views

Custom Claims in a Multitenant Microsoft Entra App

I have a "multitenant and personal" Entra app that should allow users with all kinds of Microsoft accounts to log into it. I need to add some custom claims to the ID token returned by this ...
Jordan's user avatar
  • 4,442
0 votes
1 answer
46 views

.NET8 Open ID connect required restarting when editing app details

Below is my program.cs class. I placed my Azure app details like clientid, secret and tenant id in appsettings.json file. It is working fine when we initially run the application but I want when we ...
Amit's user avatar
  • 59
0 votes
0 answers
39 views

Restricting Microsoft Identity authentication to only approved devices

I am using Microsoft Identity in an Azure hosted web app and want to restrict authentication to only whitelisted devices that have been issued from our company. Is there any device identifiers sent ...
John's user avatar
  • 313
0 votes
0 answers
21 views

Angular + OidcSecurityService package + Forcing Signup

calling this.oidcSecurityService.authorize(); invokes the LOGIN page in cognito. But my cognito setup also allows for sign-up, showing the "sign up" option below. Once clicked, it changes ...
JasonGenX's user avatar
  • 5,334
0 votes
1 answer
50 views

How to periodically sync and clean up Keycloak users with Entra ID?

I am using Keycloak with Entra ID / Azure AD as an identity provider. I've linked Entra ID via OpenID Connect. The setup automatically syncs accounts on their first login, which is functioning well. ...
hY8vVpf3tyR57Xib's user avatar
0 votes
1 answer
87 views

Issue with PKCE Authentication Flow for Azure AD B2C: "The supplied code_verifier is invalid"

I am currently trying to use the PKCE method of obtaining an access token for Azure AD B2C to pass to my Azure Function APIs in API Management. I am passing the below URL into my browser to generate ...
inkerton123's user avatar
0 votes
0 answers
24 views

Firebase Auth with OIDC

At our company we have our own OpenID Connect server (built using OpenIDDict in C#). I've set the server up as an OIDC provider in Firebase Auth and it seems to work relatively well. I can extract the ...
katkak's user avatar
  • 308
0 votes
0 answers
40 views

Do we need to save OAuth2AuthorizationRequest in OAuth2AuthorizationService.save method?

I am using Spring Authorization Server to create an authorization server. For saving and retrieving authorizations, I have implemented a custom authorization service implementing the ...
Shivesh Kaundinya's user avatar
1 vote
1 answer
36 views

Ping Federate Settings to configure authorization code grant flow using Postman

Can someone please provide Ping Federate settings to configure authorization code grant flow using OAuth2.0 and OIDC protocols from Postman. This is my configuration in postman to make an ...
Suresh Jagirdar's user avatar
0 votes
0 answers
41 views

Angular 18 breakpoints are broken after logging out via OIDC

Summary If I try to debug an angular app with Visual Studio Code after I have logged in, logged out and then logged in again, error messages are displayed or the debugger stops in the wrong places. ...
user3360631's user avatar
0 votes
1 answer
67 views

why offline_access scope is needed to request refresh token in IdentityServer (OAuth2)?

I have to set AllowOfflineAccess = true to get refresh token public static class Config { public static IEnumerable<Client> Clients => new Client[] { new ...
user25521292's user avatar
0 votes
1 answer
42 views

Refreshing webapp session while using OIDC

I'm trying to use OIDC based integration for SSO in my Webapp. The idea is that anyone deploying the app should be able to plugin OIDC configuration (wellknow url, client id and secret) and can ...
user3442754's user avatar
0 votes
0 answers
20 views

OpenID (elytron-oidc-client) with .ear or subdeployment in WildFly 26

Because i have no solution for the main-problem (SSO with OpenID), i tried to use the authentication from the main deployment. But this is an ear-Deployment and the subsystem "elytron-oidc-client&...
Martin Schlesier's user avatar
0 votes
1 answer
40 views

I/O error on GET request for "https://localhost/application/o/{name}/.well-known/openid-configuration": Connection refused

I'm trying to hook up Spring Security to use a basic Authentik setup. Authentik is running in Docker via Docker Compose, as is my Spring Boot service. FYI, I've replaced the name of my application ...
Robert Anderson's user avatar
1 vote
1 answer
53 views

Assume role in different account using an assumed role with web identity

I am using terraform HCP and AWS, I am using what it is considered to be a best practice, using dynamic credentials (Hcp dynamic credentials with aws) This is my setup: in terraform HCP I have an ...
Salvador Lopez's user avatar
0 votes
0 answers
49 views

How to make angular-oauth2-oidc with azure AD return the access_token

I have been trying to implement a the oidc oauth workflow with pkce following this guide 'https://blog.ordina-jworks.io/security/2020/08/18/Securing-Applications-Azure-AD.html'. However, the library ...
Max Podpera's user avatar
0 votes
2 answers
29 views

why Relying Party doesn't honour IdentityServer's `IdentityTokenLifetime` setting?

I set IdentityTokenLifetime (https://github.com/DuendeSoftware/IdentityServer/blob/e9860c6488f90e8fbc11a4452b9dd111dbfae933/src/Storage/Models/Client.cs#L187) to a very small value 60 seconds, but ...
user25521292's user avatar
0 votes
1 answer
21 views

Implementing OIDC for simple delegated auth

I'd like to implement simple delegated authentication for my service with OpenID Connect, but I'm a bit confused what should happen after the client gets the credentials from the auth server. I've got ...
GGG's user avatar
  • 377
0 votes
1 answer
51 views

Not getting authenticated user in middleware with OpenIdConnect in ASP.NET Core 8

I have issues with my ASP.NET Core application that it is trying to retrieve user claims in the middleware. This is my program cs: var builder = WebApplication.CreateBuilder(args); if (builder....
Jasper B's user avatar
  • 438

1
2 3 4 5
114