Questions tagged [oauth-provider]

118 questions
2
votes
1 answer

CakePHP 2.0 and mobile application authentication

I'm going nuts over here! I've got a website I am making in CakePHP that will form the back end of a mobile application. It is not a mobile website, it's designed purely to be used for a smartphone application. That being said: The application needs…
Jouva Moufette
  • 370
  • 2
  • 10
2
votes
1 answer

getting error {"error": "invalid_client"} when creating access token in django

I have created Application in my project and its successfully created. and I received Client ID and Client secret from this. but when I am entering command to get access token this gives me an error message {"error": "invalid_client"} I entered this…
2
votes
0 answers

How to select and work with a particular Provider (OIDC provider) added on Google Could - Identity platform by using server side java code

I have added these 2 identity providers (refer attached images) to Google Cloud -->Identity Platform Email/Password OIDC Connect (oidc provider) Now if you see there is a User section as well under Identity Platform So I have added some random…
2
votes
1 answer

Web Server Flow in the Rack OAuth-2 Server

I'm trying to integrate the Rack OAuth-2 server into my sinatra application, to use it in a web-server flow implementation and I can't make it work :(. I the following code in the oauth controller require "rack/oauth2/sinatra" module RestKit …
rodchile
  • 181
  • 1
  • 9
2
votes
1 answer

Via OAuth - should 3:rd party apps be able to retain multiple access tokens per resource owner?

In the API we're developing, the access tokens are unique. With that I mean that there can only be one access token per application and user. The consequence of this is that if a user authenticates the same third party desktop application on two…
Jon Nylander
  • 8,743
  • 5
  • 34
  • 45
2
votes
0 answers

Rails oauth-plugin: multiple strategies causes duplicate nonce error

I have a controller action that may be hit by the client with a oauth client token (no authenticated user), or may be hit by an authorized client with an access token (for a specific user). I want to set up a nice little before filter to…
andrewmitchell
  • 1,559
  • 13
  • 15
2
votes
0 answers

Invalid OAuth request

Hello and sorry for my English. I am using oauth 0.4.4 and oauth-plugin 0.4.0.pre4 gems. When i trying to access my app as an OAuth Provider 8 consumer = OAuth::Consumer.new consumer_key, consumer_secret, 9 :site =>…
2
votes
0 answers

Create "Provider" in Java with Oauth library?

I downloaded the examples (https://code.google.com/p/oauth/) compiled and loaded the provider and consumer WAR files to Apache Tomcat. I configured provider.properties with: Consumer_key=mysecret (i'm not sure if i can set this as…
Winter
  • 1,896
  • 4
  • 32
  • 41
2
votes
2 answers

Android - How to link multiple Auth Providers to an account i.e google and Email/Password

I have checked the documentation however, I do not understand where the link is to connect the accounts. I have a Google login working and a Password/Email version working seperately, however they do not yet work together on the same account. For…
2
votes
1 answer

oauth2 and trusted sites

is there any possibility to work with trusted sites (for example - sites of one developer) using oauth/oauth2 without confirmation of access to user data?
2
votes
0 answers

django-oauth2-provider check user before token authentication

I'm using Django OAuth2 toolkit for providing access tokens in a REST API. (The mobile client uses the tokens for its main authentication scheme) It works pretty well in authenticating users and providing access tokens, but the problem is that not…
2
votes
1 answer

PHP OAuthProvider :: reportProblem "oauth_parameters_absent" but parameters are there

I have set up an OAuthProvider in Zend Framework2 following the guidelines here: https://toys.lerdorf.com/archives/55-Writing-an-OAuth-Provider-Service.html and here: http://www.lornajane.net/posts/2011/php-oauth-provider-request-tokens. Once I add…
Jeremy
  • 195
  • 11
2
votes
1 answer

How to make satellizer use absolute url's?

I'm making a signup form using satellizer. But it does not go to the right url My console displays the following: POST http://localhost:8000/http://104.236.150.55/auth/register 404 (Not Found) view2.js:185 Not found This is my…
2
votes
0 answers

High-level overview of how can I use my own schema and DAL/ORM (not EF) in conjunction with the default Web API 2 ApplicationOAuthProvider

I am rewriting a web service that is already backed by a relatively large database with existing "membership" tables. The reason I put "membership" in quotes is because the database is an Oracle database and these are not very close to the default…
tacos_tacos_tacos
  • 10,277
  • 11
  • 73
  • 126
2
votes
2 answers

Is oauth2 insecure?

I am implementing an oauth2 solution for an API i've created and i'm struggling with the potential insecurites (or my understanding at least). Is it correct that only a single token is generated and used as authentication credentials for an endpoint…
Nick
  • 589
  • 1
  • 7
  • 28