Questions tagged [oauth]
The oauth tag has no usage guidance.
87
questions
0
votes
0
answers
18
views
Multiple domains for login with google
We are adding login in with google to an ecom website which powers multiple domains/locales where we have a different domain for each store.
The problem is we have different privacy policies for each ...
-1
votes
0
answers
35
views
Is there an oAuth2 provider that implements RFC8705?
Everything is in the title. I am looking for a proper implementation, better, cloud provider for oAuth2 supporting mutual TLS (mtls). It seems that Keycloak supports it, but documentation is not very ...
0
votes
0
answers
99
views
How to scrape Prometheus secured with OAuth2-proxy and Keycloak
I have 2 prometheuses, both are with forward-auth via the oauth2-proxy, which have the same client credentials in a single keycloak.
I would like one prometheus to federate the other one. This is my ...
0
votes
0
answers
19
views
Difference between OAuth 2 and 3 legged
Our business uses an application with our EMR system in which they upload PDF documents into a third party EMR. We basically are outsourced healthcare and then upload documents from our EMR to ...
0
votes
0
answers
237
views
How to modify a Kubernetes Ingress to work with oath2-proxy
I'm following this tutorial to expose my Kubernetes dashboard via an Ingress and secure the ingress with basic authentication using oauth2 proxy with GitHub as the identity provider.
Basically, any ...
-1
votes
1
answer
154
views
Keycloak 16 - can it log OIDC access tokens for Open-ID Connect identity providers?
How can I make Keycloak 16 log the access token, when using an Open-ID Connect identity provider? I need to see what claims the OIDC provider sends to Keycloak.
0
votes
0
answers
99
views
How do I can make mTLS using HttpClient to check the certificate on the server
I want to check the SSL/TLS certificate on the server side, so, on the client, when I do
var webHandler = new WebRequestHandler();
var cert = new X509Certificate2(Path, Pass);
webHandler....
1
vote
0
answers
79
views
migrating several accounts from office 365
I need to migrate our mail service from office365 to a local mail server. In the past I did use imapsync to do mail migration but with office and it's ouath2 authentication mecanism I am stuck.
I have ...
0
votes
0
answers
12
views
Ouath2 Consent screen fails in gcloud without providing verification option at the command prompt
I am a newbe & trying to run the Python quickstart sample script from gcloud CLI. The script is here https://developers.google.com/classroom/quickstart/python.
I have the scope set and Oauth2 ...
1
vote
0
answers
21
views
Google cloud OAuth api verification
We submitted our Google cloud OAuth api verification on 21-Nov-2022 and seeing the same status "Verification in progress" for long time.
There is no way to contact support about this inquiry....
0
votes
0
answers
250
views
Login to google chrome profile in a docker container
I am using selenium standalone chrome image to run selenium automation scripts on a docker container. All the websites I am trying to automate have the option to sign in using google. But in order to ...
0
votes
0
answers
876
views
kuberntes oauth2-proxy with github provider return 500 Internal Server Error
I'am trying to add an authentication from Kubernetes ingerss with oauth2-proxy github provider
i have set everything according to the official documentaion
the url works and it redirects me to use my ...
0
votes
0
answers
79
views
reverse proxy with host machine authentication
I have the following situation:
In my company we can access O365 via authenticated devices only using Oauth, but I need to access web email at least from an old industrial PC device that cannot be ...
0
votes
0
answers
196
views
Kubernetes Ingress auth-signin redirect to different port
For me the redirect is happening only to the host (ie metrics.staging.com) and I want to redirect to metrics.staging.com:9099 ? Does anyone know how to redirect it to a host:port?
My ingress:
nginx....
0
votes
0
answers
37
views
IMAP Certificate based auth on iPhone?
I'm looking for a way to authenticate to O365 mailbox using IMAP with OAuth2 on iPhones. Oauth2 auth method on Apple IMAP Default mail is not supported.
I thought of using a certificate based ...
1
vote
0
answers
12
views
what's wrong with my setup on google Oauth? and what is my next action?
I received an email saying Verification Not Required from Google Cloud Platform.
I have confirmed ownership and refused to use the icon, so I received your email as above.
However, there are still ...
0
votes
0
answers
442
views
Kubernetes Ingress controller dual authorization header for oauth proxy
I have the following use case:
An http backend application running behind an oauth proxy
An OAuth proxy that authenticates users before authorizing access to the backend application
In some cases ...
0
votes
0
answers
2k
views
oauth2 on office365 smtp with curl error 530 5.7.57 Client not authenticated to send mail
I am using this curl:
curl -vvv --url 'smtp://smtp.office365.com:587' \
--ssl-reqd \
--mail-from "$user" \
--mail-rcpt "$destuser" \
--upload-file ./mail.txt \
--oauth2-bearer $...
0
votes
1
answer
40
views
What role does session on the Authorization server play?
I was reading about Sessions in this article
https://auth0.com/docs/users/sessions
It says when a user logs in, two types of sessions are create
Two sessions are created:
The local session (storezero....
0
votes
1
answer
1k
views
Redirect URI mismatch error from Google OAuth for flask app
I have a Flask web application which is hosting in Google Cloud Run which is hosted with https://mydomain.run.app.
Now I am trying to add google authentication to it. I have created the API under ...
2
votes
1
answer
1k
views
Configuring Netbox to get authorization information via REMOTE_AUTH?
I'm trying to set up an oauth2 proxy in front of Netbox (to authenticate against a local Keycloak instance). I have the following configuration in the /etc/netbox/config/extra.py:
REMOTE_AUTH_ENABLED=...
0
votes
1
answer
1k
views
How do I change my redirect_uri for Google OAuth 2.0 authentication?
I have been using Google's OAuth 2.0 authentication on my site for years. Recently it stopped working because the redirect_uri I had used http:// and Google now apparently requires https. My site ...
4
votes
2
answers
6k
views
How do I Generate a Bearer Token for cURL to Get Thru IAP (GCP)?
I need to cURL a web app hosted behind IAP on GCP.
Normally, users log in through IAP and use the web app, but I need to run some cURL commands (interactive and non-interactive) that hit the web app ...
0
votes
1
answer
3k
views
MS Exchange: How to enable SMTP to use OAUTH2.0 but with basic AUTH disabled
(I have asked this question also on stackoverflow but I now think that this might be a more useful community to ask hence I am also posting here.)
I am trying to know whether it is possible to enable ...
1
vote
1
answer
393
views
How long does Google Cloud OAuth verification need?
I want to use Google ads API, but now Google tells me my project needs to pass Google OAuth verification. I have applied for verification; how long does this verification take ?
3
votes
0
answers
272
views
Domains have been verified, but Google still says app has not been verified
Message in the consent screen settings:
Comply with domain verification requirements
Ensure your application's domains have completed the Search Console verification process
But... all my domains on ...
0
votes
0
answers
872
views
Is there a way to programmatically push to GitHub using an oauth token?
I want to use a bash script to push to a "build repository" for my Symfony app, which can then be deployed directly to a server. I have the following so far:
#!/bin/bash
cd ..
rm -rf ...
0
votes
1
answer
490
views
Redirect incoming URL request between basic authentication and openidc in apache
Redirect incoming URL request between basic authentication and openidc. I want to categorize if the request for URL is coming from "wget/curl" then i need it to get authenticated with Basic ...
1
vote
1
answer
482
views
401 Unauthorized when trying to log on to Openshift 4.5 with Google identity provider
I recently deployed a version 4.5 OKD cluster and everything seems fine, but I can't get the Google identity provider to work for signing in.
I followed the instructions here, but with no success.
...
3
votes
1
answer
593
views
Exclude specific web page from access restrictions with GCP / IAP
I have a Node.js/Express web app running on the Google Cloud Platform App Engine.
I'm restricting access to this application using the Identity Aware Proxy (IAP), so that only people in my company can ...
1
vote
0
answers
63
views
Why does the content owner needs a CMS account to retrieve revenue data from youtube api?
I am trying to retrieve revenue details from YouTube API from content owner's account (using OAuth) but I am getting the same 403 response. Do the content owner needs a CMS account to retrieve revenue ...
1
vote
0
answers
34
views
Connect G Suite to Microsoft Cloud App Security
Noob here: Attempting to follow guidance from this article: https://docs.microsoft.com/en-us/cloud-app-security/connect-google-apps-to-microsoft-cloud-app-security?redirectedfrom=MSDN
On step 7, the &...
0
votes
1
answer
759
views
Configure ADFS to allow access for server application and apply authentication policy
My goal is to delegate authentication from my OIDC Identity Provider (using Identity Server 4) to an ADFS. In ADFS I would like to configure as well that MFA has to be used in that scenario.
According ...
0
votes
1
answer
1k
views
HAProxy - Redirect HTTPS for OAuth (Azure)
I need help to solve my issue.
What I want to achieve is
http://abc.contoso.com -> https://abc.contoso.com
(Force redirection HTTP to HTTPS)
My problem is that the URI needed for Azure OAuth 2.0 ...
1
vote
1
answer
463
views
Use user (and not service account) token for kubernetes dashboard
I've a Kubernetes deployment on Azure (AKS) and I also deployed the k8s dashboard.
I've connected the k8s deployment to our Azure Active Directory (AAD) so we can use the kubectl command with our AAD ...
3
votes
1
answer
1k
views
Intermittent OpenID Connect login error in ADFS 4.0
We have a Windows 2016 ADFS 4.0 farm (WID database, not SQL Server) hosted in Azure.
We are working with a new OpenID Connect application, and want to use ADFS to authenticate and populate user ...
0
votes
1
answer
850
views
How to raise the 100 users cap for GCP OAuth?
I've been trying to setup a "Sign in with Google" button on my WordPress website.
In my GCP console I've setup the OAuth consent screen with all the data necessary, I've submitted the app for ...
1
vote
1
answer
314
views
Azure AD - App Registration - Creating a new scope
I'm looking for a way to create a new Azure Active Directory application registration via a PowerShell script. I can create the application using the following script:
$appName = "CliApp"
az ad app ...
1
vote
1
answer
3k
views
ADFS 2019 OAuth Access Token Lifetime
Is it possible to change the access token lifetime in ADFS?
I have an Application Group configured that issues tokens perfectly fine. I just want to know if I can somewhere change the lifetime of ...
0
votes
1
answer
108
views
What is the difference between a published and verified oauth app? [closed]
We have an OAuth app to get Youtube Analytics Reports for our users, our app status is "Published", but when a user tried to sign in he gets that our app is not verified.
Message shown to users
Is ...
0
votes
1
answer
202
views
MS turning off Basic Authentication for Exchange Online in 2020 [closed]
MS will be depricating basic auth on pop3 october 2020.
Does pop3 will continue to work after that?
Is it possible to use OAuth with a pop3 connection ?
I can't find any documentation on that.
5
votes
3
answers
3k
views
Is there a way to setup oAuth with Openvpn or wireguard?
I'm looking to build a set of services that require a single sign on. Basically, you login to my oAuth provider, and you have access to an openvpn connection(or wireguard) and a website, without ...
1
vote
1
answer
3k
views
OAUTH / OIDC - Client auth using a signed JWT instead of a secret
I'm sending out the signal flare after exhausting my search efforts. I feel I'm real close to getting this working but hit the wall. Below details an example of what I'm trying to accomplish and the ...
0
votes
1
answer
270
views
Azure app registration not allowing IDN
I'm trying out Azure AD, to allow users to authenticate with their Microsoft account on my website. Oauth2 works fine when the redirect URI is http://localhost:8080/callback, but it fails when I try ...
0
votes
1
answer
305
views
How can we have single user credentials to access multiple projects?
I have a project from which I want to copy few container images to another project using a node application. I use container-image-builder module for the same.
The copying works with service account ...
1
vote
1
answer
1k
views
Azure AD - Unable to Issue Tokens
Using a server back-end web application ("Authroization Code" flow) to allow users to authenticate to my app using Azure/MS logins, I ran into an odd (and google-unhelpful) issue -
Following this ...
15
votes
2
answers
44k
views
Service account does not have storage.buckets.get access to bucket
I'm trying to get a list of buckets in a project, using python like this:
from google.cloud import storage
storage_client = storage.Client(project='[project-id]')
bucket = storage_client.get_bucket([...
1
vote
0
answers
239
views
Google Restricted Scopes OAuth verification: project-id does not match
I received the following email from Google a few days ago:
Hi Google API Developer,
We sent this email because you’re listed as a contact on the following
Google Cloud Project(s) using OAuth 2.0 to ...
2
votes
1
answer
1k
views
Firebase auth: Error getting access token from GOOGLE_OIDC
I have two Firebase projects, with one I can login using Google auth, no problem. But the other gives me this error. I can't find any difference in settings between the two. With both, I'm running the ...
3
votes
1
answer
3k
views
Why Domain Admin Cannot Enable Domain Wide Delegation for Service Accounts?
We need to use service accounts for our application instead of individually end users to call some Google Apis such as Admin Directory Api. There are 3 members of this project which are me as owner, ...