Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [oauth]

84 questions
2
votes
1 answer

Firebase auth: Error getting access token from GOOGLE_OIDC

I have two Firebase projects, with one I can login using Google auth, no problem. But the other gives me this error. I can't find any difference in settings between the two. With both, I'm running the project and logging in from localhost. Error…
rm.rf.etc
  • 161
  • 5
2
votes
0 answers

Adfs 3.0 Redirect Uri Length Limit

I'm using ADFS 3.0 on Windows Server 2012 R2. I have an application that uses OAuth2 to request an authorization code and then obtain an access token using that code. The application requires some context in their redirect uri, and sometimes this…
RMD
  • 131
  • 1
  • 1
  • 6
2
votes
1 answer

How do OAuth servers deal with a `refresh_token` requested multiple times?

In the OAuth2 authentication process refresh tokens should be used only once. When the refresh_token is used it will return a new access_token and a new refresh_token. This is also in the RFC6819 spec: 5.2.2.3. Refresh Token Rotation Refresh…
Wilt
  • 773
  • 9
  • 13
2
votes
1 answer

gcloud service account oauth token timeout causing container service auth failure

First time question, and I am also new to attempting to configure/administer google cloud services. Please be gentle. My employer uses gcloud ontainer registry to store images, and on the client side, we use use gcloud docker pull ... commands to…
user6005293
  • 23
  • 2
2
votes
0 answers

Do I need my own oauth and/or openid connect provider

Sorry .... I want to completely rephrase this question:, and I've asked the same question on Information Security now The system I'm working on will have a mobile application, a web portal and an HTTP-based API. The question that I cannot seem to…
Johan
  • 447
  • 1
  • 5
  • 14
2
votes
1 answer

Configuring Netbox to get authorization information via REMOTE_AUTH?

I'm trying to set up an oauth2 proxy in front of Netbox (to authenticate against a local Keycloak instance). I have the following configuration in the…
larsks
  • 43,623
  • 14
  • 121
  • 180
2
votes
1 answer

Use user (and not service account) token for kubernetes dashboard

I've a Kubernetes deployment on Azure (AKS) and I also deployed the k8s dashboard. I've connected the k8s deployment to our Azure Active Directory (AAD) so we can use the kubectl command with our AAD login (steps here:…
Matthias
  • 21
  • 1
1
vote
1 answer

Azure AD - App Registration - Creating a new scope

I'm looking for a way to create a new Azure Active Directory application registration via a PowerShell script. I can create the application using the following script: $appName = "CliApp" az ad app create --display-name "$appName"…
Matt Ruwe
  • 131
  • 6
1
vote
1 answer

ADFS 2019 OAuth Access Token Lifetime

Is it possible to change the access token lifetime in ADFS? I have an Application Group configured that issues tokens perfectly fine. I just want to know if I can somewhere change the lifetime of access and refresh tokens you get via OAuth. Only…
Thomas Lazar
  • 147
  • 2
  • 7
1
vote
1 answer

OAUTH / OIDC - Client auth using a signed JWT instead of a secret

I'm sending out the signal flare after exhausting my search efforts. I feel I'm real close to getting this working but hit the wall. Below details an example of what I'm trying to accomplish and the steps taken so far. Please point out errors and…
Jarred
  • 21
  • 1
  • 4
1
vote
1 answer

Azure AD - Unable to Issue Tokens

Using a server back-end web application ("Authroization Code" flow) to allow users to authenticate to my app using Azure/MS logins, I ran into an odd (and google-unhelpful) issue - Following this guide (written only a few months ago) -…
Coyttl
  • 111
  • 4
1
vote
0 answers

Google Restricted Scopes OAuth verification: project-id does not match

I received the following email from Google a few days ago: Hi Google API Developer, We sent this email because you’re listed as a contact on the following Google Cloud Project(s) using OAuth 2.0 to access Google…
Jude Hungerford
  • 11
  • 1
1
vote
1 answer

Is it possible to revoke or invalidate a refresh token in ADFS 4 (ADFS 2016)?

I have searched the documentation and I don't find how or if it is possible to revoke a refresh token in ADFS 4 (ADFS 2016). I'm worried about what may happen if a malicious user steals a refresh token that has an expiry time of 1 year for example.
Eloy Roldán Paredes
  • 123
  • 6
1
vote
1 answer

What is the difference between Cloud IAP and Cloud Endpoints OAuth?

With regards to authentication and authorization, what does Cloud IAP do that Cloud Endpoints doesn't? (and vice versa?) Is Cloud IAP doing both Authorization and Authentication? And if so, is it using OAuth to do this?
swigganicks
  • 221
  • 3
  • 8
1
vote
1 answer

SSO between gitlab and azure AD doesnt work

### OmniAuth Settings ###! Docs: https://docs.gitlab.com/ce/integration/omniauth.html gitlab_rails['omniauth_enabled'] = true gitlab_rails['omniauth_allow_single_sign_on'] = ['azure_oauth2'] # gitlab_rails['omniauth_sync_email_from_provider'] =…
Brendan Jennings
  • 13
  • 1
  • 4
1
2
3 4 5 6