Questions tagged [cloudfoundry-uaa]

User Account and Authentication (UAA) is a web service provided by Cloud Foundry to manage users and OAuth2 clients.

The UAA is a multi tenant identity management service, used in Cloud Foundry, but also available as a stand alone OAuth2 server. It's primary role is as an OAuth2 provider, issuing tokens for client applications to use when they act on behalf of Cloud Foundry users. It can also authenticate users with their Cloud Foundry credentials, and can act as an SSO service using those credentials (or others). It has endpoints for managing user accounts and for registering OAuth2 clients, as well as various other management functions.

141 questions
1
vote
2 answers

unlock local Cloud Foundry user. uaac?

Howto unlock local Cloud Foundry user. Didn't found an option on uaac Gem? Our users use CI/CD tools with wrong passwords and then their CF users get locked.
Sybil
  • 2,503
  • 3
  • 25
  • 36
1
vote
1 answer

CloudFoundry Trace and the case of the Private Data

I'm trying to write a client in NodeJS to exercise my applications on a Cloud Foundry server. I have already discovered many of the steps to actually login, but a few are elusive. Using the CF_TRACE=true cf auth command I can see the HTTP Requests,…
Breedly
  • 12,838
  • 13
  • 59
  • 83
1
vote
1 answer

How can I get security token from uaa server using Python or Postman

How can I get security token from uaa server with user name and password. Can you give me working examples that I can use from Python and/or Postman to do three following things: 1. Log in. 2. Get the token. 3. Validate the token. the endpoints from…
1
vote
1 answer

Cloudfoundry UAA resource app (/api) access denied when run in different domains

I had no problem running the /uaa with /api and /app all on localhost:8080. Both the authorization code flow and implicit flow works flawlessly. However, I found running all apps on the same domain hardly realistic so I decided to test them out on…
0
votes
0 answers

Any Rest api to verify if user is first time user in cloudfoundary UAA

i am New to cloud foundary UAA, and i am trying to check on if user is a first time user or not. if user is first time i need to make the user to reset the password. so for that i am trying to check on any rest apis that already available in cloud…
0
votes
0 answers

cf set-org-quota get the error: You are not authorized to perform the requested action

I am trying to assign a new quota to the org using the "cf set-org-quota" command, but I keep getting "You are not authorized to perform the requested action" The user I used is already an OrgManager, OrgAuditor, a Space developer, and a Space…
0
votes
0 answers

How to retrieve a client secret from UAA

I am using UAA as an OAuth2 provider. I created a client using /oauth/client API endpoint with a client_secret that I have forgotten. I tried the list clients API endpoint but it did not provide me the client secret in the response. How can I find…
Ayush Ujjwal
  • 149
  • 9
0
votes
0 answers

unset application environment variable in cloud foundry using bash script without hardcoding the variables in script

while IFS= read -r line do IFS=':' read -r -a values <<< "$line" echo ${values[0]} ${values[1]} cf unset-env ${values[0]} ${values[1]} //here if we hardcode the value the variables gets unset else won't app_list+=(${values[0]}) done < "$UNSET_FILE"
0
votes
1 answer

Spring boot security application is not showing Thread link in PCF, in browser console 'cloudfoundryapplication' is 503

I am deploying two different application in same Org -> Space in PCF. Both are Spring Boot application with Spring Security Actuator enabled. In PCF, if spring app is deployed with actuator enabled, then a Thread link will be displayed with few…
0
votes
1 answer

Spring cloud gateway with open source IDP

Looking for examples to implement integrating Spring cloud gateway with an open source IDP like keycloak, UAA for REST APIs. There are some examples like below which use authorization code flow which in turn requires browser…
0
votes
1 answer

Fetch Current Access Token in JHipster UAA based Microservice Applications

I have a JHipster Microservices having UAA based authentication (OAuth 2.0). I have set certain claims in token through IatTokenEnhancer. I want to use the value of these claims in each request. How can I fetch the access token from current request?
0
votes
0 answers

SSO (Single Sign-On) using JHipster UAA

How can I implement 3rd party Single Sign-On (SSO) with JHipster UAA? 3rd party authentication uses OWIN based auth in .Net. Do I need keycloak in place on JHipster UAA?
Hushen Savani
  • 346
  • 6
  • 18
0
votes
1 answer

Spring Cloud Data Flow Security Issue

We want to test Spring data cloud security using uaa server(cloud foundry).Please help us with authentication failure. Step 1 : Download uaa server war from maven Step 2 : Set up uaa bundled spring boot project a. git clone…
0
votes
1 answer

How spring boot actuator heapdump behave in cloudfoundry

I am using cloudfoundry with multiple instances. I am trying to generate heapdump using /actuator endpoint of spring. My doubt is in case of cloudfoundry env where at a time 2 instances running , for which instance it will generate the heapdump. How…
0
votes
1 answer

Logout functionality is not working properly in SAP Cloud Foundry authentication with XSUAA

I'm trying to implement authentication using XSUAA. I can able login with my SAP CF credential and login is working fine. The problem is with logout. When I try to logout, it gets redirect to the logout page but the session is not cleared. After…
Guru
  • 411
  • 3
  • 20