How to create one FusionAuth application with many oauth clients with scopes

Question

I want to have a main application where all users are registered and create many oauth clients with limited scopes to access user data.

I tried to solve this with applications, but it seems that them don't know about each other.

Is this possible with fusion auth? If so, how can I implement that.

score 1 · Answer 1 · answered Aug 15 '20 at 16:55

1

This feature is not available yet.

answered Aug 15 '20 at 16:55

Natan Deitch

Also related : https://github.com/FusionAuth/fusionauth-issues/issues/155 – robotdan Aug 18 '20 at 15:43

score 0 · Answer 2 · answered Aug 17 '20 at 16:53

You can create as many applications as you want. User grants of custom OAuth scopes are not fully implemented, as mentioned in that GitHub issue.

You could work around that by creating an application for each type of access, or by using roles within an application. If you had a blog, for example, you could create an admin role, an editor role, a contributor role, and a subscriber role. You could use a lambda to assign the roles to the JWT ( see example here: https://fusionauth.io/community/forum/topic/281/implementing-a-role-based-access-system-for-authorization/2 ).

Then your application could examine roles in the JWT and provide appropriate access.

Hope that helps. Feel free to respond here or in the forum if you'd like to discuss further.

2 Answers2