5,718 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
0
votes
0
answers
29
views
CIBA Authentication Flow – 403 invalid_token Error
I am implementing the No CONSENT mode for CIBA. After invoking the endpoint:
http://\<host\>/realms/x/protocol/openid-connect/ext/ciba/auth
I successfully received an auth_req_id.
Next, I am ...
2
votes
0
answers
120
views
Okta Next Auth redirect issue
I’m integrating Okta as an OIDC provider in a Next.js (App Router) application using NextAuth.js. My setup is standard: I use the well-known endpoint, client ID/secret, and the recommended scopes (...
0
votes
0
answers
20
views
OpenIddict 4.x ID2043 — Is it possible to support dynamic tenant subdomain redirect_uri?
I’m using OpenIddict 4.x with ASP.NET Core and the authorization code + PKCE flow for a SPA.
I want to support multi-tenant subdomains, where each tenant has its own frontend host, e.g.:
https://...
2
votes
1
answer
53
views
Angular OIDC authentication fails on iOS because of invalid nonce in state
I have an Angular (19) Application which uses the angular-oauth2-oidc (v19) package. I do initialize the OIDC code flow in the provideAppInitializer function. This application is called from inside an ...
1
vote
1
answer
83
views
Spring Boot OAuth2 Client with Keycloak in Docker redirects browser to internal hostname [duplicate]
I am running Keycloak and all my Spring Boot microservices (including a BFF) inside Docker.
The BFF service (port: 8989) is configured as an OAuth2 client (confidential client) using Authorization ...
Advice
0
votes
0
replies
48
views
Get keycloak token with curl and 2fa
I have more totp apps registered for my kc account to login with totp. Private and work smartphone and a passwordstore... just to be able, to remove totp for a phone, in case it get lost.
And i want ...
1
vote
0
answers
81
views
Wildfly 37 + OIDC against WSO2 (aka: not Keycloak)
I am trying to configure a Wildfly 37 standalone instance to authenticate a webapp users against a WSO2 using the elytron-oidc-client subsystem. I managed to make it work, but I had to modify some ...
Advice
0
votes
7
replies
117
views
What's the use of ID token in OIDC?
I only worked with Keycloak so far. After a successful login, I got access token & ID token. Both can be verified with the certs in .well-known path.
I understand that I can send access token to ...
0
votes
0
answers
30
views
No authenticated user when logging out via RP from Duende IdentityServer
I am currently following the 2nd Quickstart of Duende IdentityServer: https://docs.duendesoftware.com/identityserver/quickstarts/2-interactive/
I have created the IdentityServer as well as the RP ...
0
votes
1
answer
81
views
How do I configure ABP as an OIDC provider if it is hidden behind Traefik?
I am trying to use an ABP application as an identity provider using OIDC. When I run the ABP app and my main service app on VS, I have no issues. I can redirect to ABP on trying to access the main ...
0
votes
1
answer
171
views
Claude Desktop + MCP: Can the client open an authorization URL and accept a token without OAuth 2.0/PKCE?
I’m integrating an MCP tool into Claude Desktop and I need to understand which authentication flows the client supports.
Desired flow:
Claude Desktop -> MCP tool call -> MCP server
-> No ...
1
vote
0
answers
60
views
How to identify which IdP a user used to sign in during AWS Cognito PreAuthentication trigger?
How can I determine which Identity Provider (IdP) a user used to sign in during the AWS Cognito PreAuthentication trigger, when multiple federated IdPs (SAML/OIDC) are linked to the same user?
In the ...
0
votes
0
answers
47
views
IAuthenticateResultFeature disappears when specifying schemes with AuthorizeFilter
I have been successfully reading the logged in OIDC authentication scheme from IAuthenticateResultFeature when using OIDC. I need to know this scheme to perform sign out. This is for an ASP.NET Core 8 ...
0
votes
1
answer
124
views
How can I support multiple OIDC authentication providers?
I have built a Blazor standalone webassembly in .NET 9 for a new application that we are building in our company and have successfully integrated it into our Okta system for authentication of the user....
0
votes
0
answers
98
views
AWS ALB - Entra OIDC - Access Token - Custom API Scopes Issue
The request flow for my setup is that first, the requests go to AWS ALB, then authentication will be done by Entra at ALB level and then if auth is successful, then the request with tokens set as ...