I am trying to set up SSO with a Blazor WebAssmebly app (.NET 7). On the Azure AD side of things, I have registered an application (SPA) with a login callback URI of https://localhost/authentication/login-callback . I have disabled implicit and…
I am trying to use oauth-proxy to provide authentication on the kubernetes dashboard using keycloak in EKS. I have managed to get to a point where oauth-proxy will forward the authorization header to the dashboard, however I am getting 'unauthorized'…
I have implemented resource owner administration in a database. The same resource owners are present in the hwi_oauth.yaml file, so I can directly use them. However, I am facing a difficulty. I want to use the name of the resource…
instead of returning hello it requires a sign in. I have tried to pass tokens etc. this works fine in the browser[cannot seem to replicate openID connect auth flow] services.AddMicrosoftIdentityWebAppAuthentication(Configuration) .EnableTokenAcquisitionToCallDownstreamApi() .AddMicrosoftGraph(options => { Configuration.Bind("AzureAd", options); options.Scopes = AppSettings.GetScopes(); })…
I'm using React and IdentityServer for Authentication. I use 'code' grant with 'PKCE'. When my React app tries to hit an endpoint, If it gets 401 (UNAUTHORIZED), It'll start the login process with OIDC client. Everything works very well. Except…
I have a Go HTTP Server. I want to protect my routes using Azure JWT Token. I am able to generate the token but I am not able to verify it. This is how I am doing it: package main…
The credentials are stored in Azure AD. Azure AD supports OpenID Connect. The clients use a modern browser using Android/iPhone or Windows Hello. Is it possible to implement the WebAuthn API with your website. And when a user has no…
The page https://developers.google.com/identity/openid-connect/openid-connect advises how can we maintain state in session on the service for retrieving it and validating later once we obtain auth code from OP. But how to do maintain state in a RESTful service which is stateless…
I want to authenticate users with Azure Active Directory (AD) in a mobile app that calls its own REST API and possibly, make it simple. Looks like the documented way (here or here) to do so is to register the…
I'm currently learning about OAuth2. I went through two different courses and none of them answered how OAuth should be implemented in microservices world. Let's say there is an app for uploading photos after user registration. I would let users…