FusionAuth
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    • Login
    1. Home
    2. Categories
    3. Q&A
    Log in to post
    Load new posts
    • Recently Replied
    • Recently Created
    • Most Posts
    • Most Votes
    • Most Views
    • Y

      Unsolved Common change email process

      • • yurochkoyura
      2
      0
      Votes
      2
      Posts
      510
      Views

      danD

      @yurochkoyura I can't think of any way to implement this via FusionAuth configuration alone.

      Seems like a cool feature request, though. Please consider submitting a feature request and if there's community support, we'll look at putting it into the roadmap: https://github.com/fusionauth/fusionauth-issues/issues

      From a scan there, though, it looks like this may be part of this long standing issue: https://github.com/FusionAuth/fusionauth-issues/issues/1

      So if you want to add a comment or vote that up, that'd be helpful to us as well.

    • danD

      Unsolved Permit.io?

      • • dan
      1
      0
      Votes
      1
      Posts
      2.6k
      Views

      No one has replied

    • N

      Customers accounts vs internal company accounts for a SaaS app

      • • nick
      5
      0
      Votes
      5
      Posts
      700
      Views

      M

      @nick said in Customers accounts vs internal company accounts for a SaaS app:

      Hello,

      I'm trying to understand how FusionAuth would work best for a SaaS app with two kinds of accounts: customers and internal admins.

      The internal company logins are e.g. sales people, developers, customer services, etc. They need to be able to access an internal admin portal, and in addition, a sandbox customer account for testing.

      It seems like it could be convenient to let internal admins share one user account and an app-switcher to toggle between their admin-view and their customer-view.

      Is it a best practice? Is it unsafe in any way?

      Thanks,

      You should look into FusionAuth.io to see if it fits your needs. It has a more adaptable model than the big SaaS solutions and could meet your needs both now and in the future.

    • A

      What is the best practice for differentiating free-tier users from the paid subscribers

      • • atakan
      4
      0
      Votes
      4
      Posts
      5.6k
      Views

      M

      @atakan You shouldn't remove the main features that current users have already paid for if you're switching your app to a subscription-based business model. For instance, after you introduce a subscription model for new customers, allow customers who have already purchased a "full game unlock" to continue having access to the full game.

      This, in my opinion, applies to Notability, and if enough users raise awareness of it, it might be possible for us premium users to continue using it without a subscription.

    • danD

      Does FusionAuth support high availability database configurations?

      database availability faq • • dan
      7
      0
      Votes
      7
      Posts
      6.8k
      Views

      K

      @dan 160ms

    • E

      Using Slack as Identity Provider with OpenID for Federated Identity Management with Aspnet Core App

      external identity oidc idp federation • • etienne.lorthoy
      4
      0
      Votes
      4
      Posts
      2.5k
      Views

      danD

      @eirikur That is awesome, thanks so much for sharing your settings.

    • M

      Unsolved Error when trying to log with Google at FusionAuth admin control panel

      • • marcos.fernandez
      3
      1
      Votes
      3
      Posts
      2.0k
      Views

      M

      Hi @dan, thanks for your answer. In our case, we are accessing directly to the FusionAuth instance and we started to get this error after the last upgrade to 1.36.8.

      I will fill an issue.

      Thank you very much,
      regards

    • L

      Unsolved Disable IP Address logging in "Recent Logins"

      • • lTyl
      2
      0
      Votes
      2
      Posts
      1.6k
      Views

      danD

      @ltyl I think that you could use a proxy that would set the X-Forwarded-For: header to a known bogus value. If you put that in front of FusionAuth, it should happily set every ip address to that value.

      https://fusionauth.io/docs/v1/tech/admin-guide/proxy-setup#headers-to-set

      This will mean that you can't use IP based access control lists, however.

    • D

      Unsolved Unable to stop redirect after successful password reset flow

      • • dee.lalwani
      3
      1
      Votes
      3
      Posts
      4.6k
      Views

      danD

      @dee-lalwani Hmmm. That is almost a 2 year old post, so things could definitely have changed.

      I might scan the release notes for relevant changes: https://fusionauth.io/docs/v1/tech/release-notes

      Either way, if you see behavior that is different, you can open a feature request. We rank future work in a variety of ways, but popular feature requests from the community are definitely high on the list.

      FYI, providing step by step repro steps for this feature would be most helpful, as well as your current version.

      You could also spin up a version from Sep 2020, maybe Version 1.19.8, and see if it has the behavior you want.

    • danD

      Unsolved Can FusionAuth be used instead of Active Directory?

      • • dan
      2
      0
      Votes
      2
      Posts
      292
      Views

      danD

      Depends on the use case. If you need a user management tool with OAuth, SAML and all the bells and whistles, then “yes!”

      If you need LDAP connected to servers or wifi, then “no”.

    • A

      Unsolved Do we have API for checking if email verificationId is expired or not without using it

      • • akash 0
      2
      0
      Votes
      2
      Posts
      3.9k
      Views

      S

      @akash-0

      Hi!

      FusionAuth does not currently have such an API. If you'd like to request this feature, you can file an issue in the fusionauth-issues GitHub repository that includes details for your use case. Developers can show their support/interest for a feature by giving it a thumbs up reaction. We use this to plan the FusionAuth product roadmap.

      Thanks,
      Spencer

    • danD

      Solved Is there a FusionAuth laravel socialite provider?

      • • dan
      2
      0
      Votes
      2
      Posts
      347
      Views

      danD

      Yes. Here's the PR merging it:

      https://github.com/SocialiteProviders/Providers/pull/877

      Thanks to https://github.com/danilopolani for adding it.

      Should show up here: https://socialiteproviders.com/about/ once this has been merged: https://github.com/SocialiteProviders/website/pull/28

    • B

      Unsolved SAML2 is failing due to "rsa-sha1" and "secured validation"

      • • bryan.odaly
      2
      0
      Votes
      2
      Posts
      5.5k
      Views

      danD

      @bryan-odaly

      The http://www.w3.org/2000/09/xmldsig#rsa-sha1 algorithm has been removed as of Java 17.

      More details:
      https://github.com/FusionAuth/fusionauth-site/issues/1202
      https://fusionauth.io/docs/v1/tech/release-notes#version-1-32-0

      This error means you are using an SAML v2 IdP that is signing their Authn response with RSA-SHA1. The best way to solve this is to change the signing configuration if you have access to that, or request the owner of that IdP sign their response using a more secure, modern algorithm.

    • C

      Unsolved Sign In With Apple request property clarifications (appleUser and redirect_uri)

      • • chalk
      2
      0
      Votes
      2
      Posts
      630
      Views

      danD

      @chalk Did you get this sorted out or are you still looking for guidance?

    • T

      Unsolved API to search for users by username?

      • • theogravity-sb
      2
      0
      Votes
      2
      Posts
      1.2k
      Views

      danD

      @theogravity-sb

      Hiya,

      You should be able to specify the property to search when using the queryString.

      username:test will exactly match users with that username

      username:tes* will match any users that have a username that starts with tes.

      Does that help?

    • F

      Unsolved Upgrade from Version 1.26 to 1.36.4 introduced error with response_type=id_token token

      • • fred.fred
      6
      0
      Votes
      6
      Posts
      4.6k
      Views

      J

      @johnathon

      Also, if you are using Graal, using let and const will not be supported until version 1.37.0.

      https://github.com/FusionAuth/fusionauth-issues/issues/179

    • danD

      Unsolved conditionally disabling the submit button on the hosted login pages

      • • dan
      2
      0
      Votes
      2
      Posts
      1.5k
      Views

      danD

      This is a job for javascript and customizing the theme.

      For the registration page, modify the oauth register template. Edit that theme, then find where we create the form, marked by this comment in the default theme.

      [#-- Begin Self Service Custom Registration Form Steps --]

      From there, find the 'register' button.

      [@helpers.button icon="key" text=theme.message('register')/]

      Change it to disabled by default:

      [@helpers.button icon="key" text=theme.message('register') disabled=true/]

      Then you need to build the JS which adds/removes the disabled attribute and the disabled CSS class based on the fields that are required. Luckily, we have those fields as a template variable, fields and can iterate that in freemarker.

      Here is some javascript. It needs to be below the register button as it references elements in the form above. It builds a list of required fields and then adds a listener to each required field checking to see if any of the fields are empty. I'm no JS expert, so feel free to modify as needed.

      <script type="text/javascript"> let reqFields = []; // build a list of required fields in JS from the freemarker template variable. [#list fields as field] [#assign fieldId = field.key?replace(".", "_") /] [#if field.required] reqFields.push("${fieldId!''}"); [/#if] [/#list] [#list fields as field] [#assign fieldId = field.key?replace(".", "_") /] [#if field.required] ( () => { // we're doing this in an anonymous function so we don't get variable collisions. we could have 0 to N required fields. let inputElt = document.getElementById('${fieldId!''}'); let btn = document.querySelector("form.full button"); inputElt.addEventListener("input", function() { let disabled = false; const keys = reqFields.keys(); for (let x of keys) { let reqFieldEmpty = document.getElementById(reqFields[x]).value === ''; if (reqFieldEmpty == true) { // console.log("found: "+reqFields[x]+" to be empty"); disabled = true; break; // any one empty field will mean button is disabled. } } // we've determined if the button should be disabled, now apply it btn.disabled = disabled; if (!disabled) { btn.classList.remove("disabled"); } else { btn.classList.add("disabled"); } }); } )(); [/#if] [/#list] </script>

      Feel free to modify this logic as needed to fit your theme.

    • danD

      Solved Can a single user have multiple "passwords"?

      • • dan
      2
      0
      Votes
      2
      Posts
      513
      Views

      danD

      We have application passwords that are intended for this purpose. More here:
      https://fusionauth.io/docs/v1/tech/tutorials/application-authentication-tokens

    • X

      Problems logging in user through C# API call

      • • xan
      16
      0
      Votes
      16
      Posts
      6.4k
      Views

      B

      @xan said in Problems logging in user through C# API call:

      when I do "http://localhost:5000", currently it just gets a "localhost refused to connect."?

      Generally this happens when the service running on your localhost has some problem resolving the request. If you have access to logs, please see logs for more details on the error. Also, make sure the application interface, server, and services are running. There are many situations that might trigger “this site can't be reached” error in browsers. Sometimes the server is still running but the interface application is closed or the database is down. If your application interface and server is up but a dependent service is down then restart your computer/server and restart services. Make sure the app is bound to localhost. It may just be bound to an individual interface. netstat -na will give you the clues you need. Run a port scan on your computer and make sure the port is opened.

      The problem may happens for failing on DNS lookup . DNS is that network address that translates the website name to its internet address. Most often it causes for not getting the internet connection or misconfigured internet or network settings. Another reason could be the firewall preventing Google Chrome to load the webpage. However, other reasons, such as insufficient permissions or the Apache web server not running properly might also cause the error.

    • B

      Unsolved Authenticate user with super admin

      • • babar
      2
      0
      Votes
      2
      Posts
      611
      Views

      Y

      Hi babar,

      As you said your third-party authenticator deliver access tokens, I guess it is an oauth2/openid provider.
      You may use it to authenticate to FA: https://fusionauth.io/docs/v1/tech/identity-providers/