Questions tagged [oauth]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
25 views

How long does Google Cloud OAuth verification need?

I want to use Google ads API, but now Google tells me my project needs to pass Google OAuth verification. I have applied for verification; how long does this verification take ?
0
votes
0answers
40 views

Domains have been verified, but Google still says app has not been verified

Message in the consent screen settings: Comply with domain verification requirements Ensure your application's domains have completed the Search Console verification process But... all my domains on ...
0
votes
0answers
55 views

Authorization Error Error 400: redirect_uri_mismatch for Google Oauth Signin behind nginx load balancer

I hope everyone is safe and well. I have an Nginx load balancer forwarding requests to an Nginx webserver which is reverse proxying requests to a gunicorn/flask application. I am using the Flask-...
0
votes
0answers
109 views

Is there a way to programmatically push to GitHub using an oauth token?

I want to use a bash script to push to a "build repository" for my Symfony app, which can then be deployed directly to a server. I have the following so far: #!/bin/bash cd .. rm -rf ...
0
votes
1answer
249 views

Redirect incoming URL request between basic authentication and openidc in apache

Redirect incoming URL request between basic authentication and openidc. I want to categorize if the request for URL is coming from "wget/curl" then i need it to get authenticated with Basic ...
1
vote
1answer
80 views

401 Unauthorized when trying to log on to Openshift 4.5 with Google identity provider

I recently deployed a version 4.5 OKD cluster and everything seems fine, but I can't get the Google identity provider to work for signing in. I followed the instructions here, but with no success. ...
1
vote
1answer
91 views

Exclude specific web page from access restrictions with GCP / IAP

I have a Node.js/Express web app running on the Google Cloud Platform App Engine. I'm restricting access to this application using the Identity Aware Proxy (IAP), so that only people in my company can ...
1
vote
0answers
52 views

Why does the content owner needs a CMS account to retrieve revenue data from youtube api?

I am trying to retrieve revenue details from YouTube API from content owner's account (using OAuth) but I am getting the same 403 response. Do the content owner needs a CMS account to retrieve revenue ...
1
vote
0answers
32 views

Connect G Suite to Microsoft Cloud App Security

Noob here: Attempting to follow guidance from this article: https://docs.microsoft.com/en-us/cloud-app-security/connect-google-apps-to-microsoft-cloud-app-security?redirectedfrom=MSDN On step 7, the &...
0
votes
1answer
171 views

Configure ADFS to allow access for server application and apply authentication policy

My goal is to delegate authentication from my OIDC Identity Provider (using Identity Server 4) to an ADFS. In ADFS I would like to configure as well that MFA has to be used in that scenario. According ...
0
votes
0answers
113 views

Google Cloud platform - Powerbi : This browser or app may not be secure

I want to connect Powerbi with youtube API To do this I followed the following tutorial https://github.com/migueesc123/YoutubeAnalytics In this tutorial the first step is to create a google console ...
0
votes
1answer
594 views

HAProxy - Redirect HTTPS for OAuth (Azure)

I need help to solve my issue. What I want to achieve is http://abc.contoso.com -> https://abc.contoso.com (Force redirection HTTP to HTTPS) My problem is that the URI needed for Azure OAuth 2.0 ...
1
vote
1answer
191 views

Use user (and not service account) token for kubernetes dashboard

I've a Kubernetes deployment on Azure (AKS) and I also deployed the k8s dashboard. I've connected the k8s deployment to our Azure Active Directory (AAD) so we can use the kubectl command with our AAD ...
2
votes
0answers
531 views

Intermittent OpenID Connect login error in ADFS 4.0

We have a Windows 2016 ADFS 4.0 farm (WID database, not SQL Server) hosted in Azure. We are working with a new OpenID Connect application, and want to use ADFS to authenticate and populate user ...
0
votes
1answer
262 views

How to raise the 100 users cap for GCP OAuth?

I've been trying to setup a "Sign in with Google" button on my WordPress website. In my GCP console I've setup the OAuth consent screen with all the data necessary, I've submitted the app for ...
1
vote
0answers
132 views

Azure AD - App Registration - Creating a new scope

I'm looking for a way to create a new Azure Active Directory application registration via a PowerShell script. I can create the application using the following script: $appName = "CliApp" az ad app ...
1
vote
1answer
1k views

ADFS 2019 OAuth Access Token Lifetime

Is it possible to change the access token lifetime in ADFS? I have an Application Group configured that issues tokens perfectly fine. I just want to know if I can somewhere change the lifetime of ...
0
votes
1answer
82 views

What is the difference between a published and verified oauth app? [closed]

We have an OAuth app to get Youtube Analytics Reports for our users, our app status is "Published", but when a user tried to sign in he gets that our app is not verified. Message shown to users Is ...
0
votes
1answer
160 views

MS turning off Basic Authentication for Exchange Online in 2020 [closed]

MS will be depricating basic auth on pop3 october 2020. Does pop3 will continue to work after that? Is it possible to use OAuth with a pop3 connection ? I can't find any documentation on that.
1
vote
2answers
1k views

Is there a way to setup oAuth with Openvpn or wireguard?

I'm looking to build a set of services that require a single sign on. Basically, you login to my oAuth provider, and you have access to an openvpn connection(or wireguard) and a website, without ...
0
votes
1answer
939 views

OAUTH / OIDC - Client auth using a signed JWT instead of a secret

I'm sending out the signal flare after exhausting my search efforts. I feel I'm real close to getting this working but hit the wall. Below details an example of what I'm trying to accomplish and the ...
0
votes
1answer
110 views

Azure app registration not allowing IDN

I'm trying out Azure AD, to allow users to authenticate with their Microsoft account on my website. Oauth2 works fine when the redirect URI is http://localhost:8080/callback, but it fails when I try ...
0
votes
1answer
131 views

How can we have single user credentials to access multiple projects?

I have a project from which I want to copy few container images to another project using a node application. I use container-image-builder module for the same. The copying works with service account ...
1
vote
1answer
800 views

Azure AD - Unable to Issue Tokens

Using a server back-end web application ("Authroization Code" flow) to allow users to authenticate to my app using Azure/MS logins, I ran into an odd (and google-unhelpful) issue - Following this ...
5
votes
1answer
6k views

Service account does not have storage.buckets.get access to bucket

I'm trying to get a list of buckets in a project, using python like this: from google.cloud import storage storage_client = storage.Client(project='[project-id]') bucket = storage_client.get_bucket([...
1
vote
0answers
225 views

Google Restricted Scopes OAuth verification: project-id does not match

I received the following email from Google a few days ago: Hi Google API Developer, We sent this email because you’re listed as a contact on the following Google Cloud Project(s) using OAuth 2.0 to ...
1
vote
1answer
615 views

Firebase auth: Error getting access token from GOOGLE_OIDC

I have two Firebase projects, with one I can login using Google auth, no problem. But the other gives me this error. I can't find any difference in settings between the two. With both, I'm running the ...
3
votes
1answer
2k views

Why Domain Admin Cannot Enable Domain Wide Delegation for Service Accounts?

We need to use service accounts for our application instead of individually end users to call some Google Apis such as Admin Directory Api. There are 3 members of this project which are me as owner, ...
-1
votes
1answer
385 views

Gitlab OmniAuth multiple gSuite organisations

Is this possibile at all? I have Google Oauth setup. And gitlab login is working fine with domain where I have created API Keys and added Google+ api service. Now I wanted to login with my personal ...
1
vote
1answer
1k views

Is it possible to revoke or invalidate a refresh token in ADFS 4 (ADFS 2016)?

I have searched the documentation and I don't find how or if it is possible to revoke a refresh token in ADFS 4 (ADFS 2016). I'm worried about what may happen if a malicious user steals a refresh ...
1
vote
1answer
773 views

What is the difference between Cloud IAP and Cloud Endpoints OAuth?

With regards to authentication and authorization, what does Cloud IAP do that Cloud Endpoints doesn't? (and vice versa?) Is Cloud IAP doing both Authorization and Authentication? And if so, is it ...
1
vote
1answer
2k views

SSO between gitlab and azure AD doesnt work

### OmniAuth Settings ###! Docs: https://docs.gitlab.com/ce/integration/omniauth.html gitlab_rails['omniauth_enabled'] = true gitlab_rails['omniauth_allow_single_sign_on'] = ['azure_oauth2'] # ...
2
votes
1answer
1k views

ADFS: Convert SAML Assertion to OAuth Token?

We have Microsoft Active Directory Federation Services (ADFS) as our authentication/federation provider. We use it for performing identity federation via SAML to several external vendors, SaaS ...
1
vote
0answers
740 views

Use Gitlab oauth service for Nexus3

I've a brand new Nexus Repository Manager version 3.6.1 and a Gitlab 10.0.3. I'ld like to use Gitlab as a oauth provider for authentification (I'm already doing that for Jenkins & SonarQube). ...
1
vote
1answer
1k views

GitLab and OAuth to Azure AD

I've been tinkering with GitLab and Azure ActiveDirectory with OAuth and allowing AD users to connect to GitLab accounts. This is set up and works just fine. However, GitLab won't create users for ...
1
vote
1answer
2k views

NextCloud as Oauth Provider

I've noticed that in some of the current versions of NextCloud that there is an admin menu option for adding Oauth 2.0 clients. Doing so gives you a Client ID and a Client Secret as you would expect ...
0
votes
1answer
95 views

Difficult logging into SDK for Google Cloud Platform

My intention was to compare GCP with AWS. But had authentication challenge right off the gun. I opened an account and brought up an instance no problem. But then downloaded the SDK (linux version). ...
1
vote
0answers
3k views

Nginx proxy for OAuth2 validation

I have an own OAuth2 provider where you can ask for a token and validate it. I want to protect my REST API (resource server) with OAuth2, so, in every single request, the access token must be ...
2
votes
0answers
607 views

Adfs 3.0 Redirect Uri Length Limit

I'm using ADFS 3.0 on Windows Server 2012 R2. I have an application that uses OAuth2 to request an authorization code and then obtain an access token using that code. The application requires some ...
3
votes
0answers
1k views

IIS - How to force Windows Authentication first then fall back to Anonymous Authentication

I have a website running on IIS, it works on Windows Authentication (intranet ActiveDirectory), and I am planning to open it to Internet with token-based OAuth (anonymous authentication). In my ...
2
votes
1answer
936 views

How do OAuth servers deal with a `refresh_token` requested multiple times?

In the OAuth2 authentication process refresh tokens should be used only once. When the refresh_token is used it will return a new access_token and a new refresh_token. This is also in the RFC6819 ...
0
votes
2answers
894 views

OAuth2 on ADFS with Multiple Claims Provider Trusts

ADFS 3.0 introduced OAuth2 Authorisation Code flow. We have an existing ADFS Server with existing Relying Parties, External Claims Providers and Claims Rules. The new OAuth flow links into all that by ...
1
vote
1answer
6k views

Jenkins login using GitHub Authentication failed being administrator

I was setting up authentication mechanism for our organization jenkins, which had no security mechanism, "ananoumos" can do anything, delete jobs,build etc. I did Install github-oauth jenkins plugin ...
2
votes
1answer
594 views

gcloud service account oauth token timeout causing container service auth failure

First time question, and I am also new to attempting to configure/administer google cloud services. Please be gentle. My employer uses gcloud ontainer registry to store images, and on the client side,...
5
votes
2answers
277 views

How to allow login to a SMTP server better than with password?

I'm planning on creating a mail server, but I don't want to use passwords at all. They seem a wrong security choice to me. I'd love to use a certificate to login. This seems easy to do in HTTP, but I ...
1
vote
2answers
3k views

How to install the PHP OAuth Extension on Amazon Linux

In order to connect to QuickBooks from my PHP application, I need to install OAuth. I was following these instructions (substituting yum for apt-get) but after the first line sudo yum install gcc ...
-1
votes
1answer
2k views

How can I set a url that would work with OAuth? [closed]

I have: a domain hosted outside google (englishcampus.com.br) a VM instance in Google Compute Engine running an application, with a static IP a subdomain (erp.englishcampus.com.br) pointing to that ...
0
votes
0answers
574 views

Captive portal OAuth

Im building a large network of AP with captive portal deployments, each AP has its own internet connection, managed by routers I don't have access to. I can manage the APs through a cloud controller....
3
votes
0answers
181 views

Setting up oauth for JIRA 6.4

I want to setup oauth for third party application to log jira issues in jira 6.4. I am familiar with twitter oauth process. But looking at jira oauth, its taking too much time. I have been able to ...
2
votes
0answers
347 views

Do I need my own oauth and/or openid connect provider [closed]

Sorry .... I want to completely rephrase this question:, and I've asked the same question on Information Security now The system I'm working on will have a mobile application, a web portal and an ...