Questions tagged [authentication-authorization]
Use it for the user authentication/authorization on Drupal core or third-party modules.
286
questions
0
votes
0answers
13 views
Basic Authentication for migrate plus - unable to authenticate
The XML feed I was using recently updated to basic authentication. I updated my YML configuration with the basic authentication plugin as follows, but nothing seems to work, also there are no errors.
...
0
votes
1answer
19 views
How can I set up Protected Pages so users only have to log in once?
I'm using the Protected Pages module to make an area of the website - which is about 13 pages - password protected. The problem is that users have to enter the password to view every page rather than ...
0
votes
0answers
42 views
+100
Problem with OAuth2 refresh token
I have the following problem with the simple_oauth module.
I can get the initial jwt token with a POST request to /oauth/token with the following form data:
username: user
password: password
...
0
votes
0answers
16 views
How to use oauth2 authorization in feeds importer?
I did it the postman like the following steps
In the authorization tab, I selected OAuth 2.0 as Type.
Then clicked on get new access token.
I selected grant type as Client Credentials. Added access ...
0
votes
0answers
34 views
No AJAX when user is logged in?
I am developing an e-commerce site for one of our customers for the first time with drupal. It is going pretty good so far but there is a weird misbehavior where I have no idea on how to handle it in ...
3
votes
1answer
85 views
Using OAuth2 on non-REST endpoints
I have a custom module which includes a ControllerBase. The controller has a content() function that returns a JsonResponse(). The code for this function returns a complete list of a certain entity ...
1
vote
1answer
38 views
Unable to run update.php or update modules from web interface
I would really like to be able to install module updates through the web interface or run update.php when needed without changing settings.php, but something seems to be broken in my setup because it ...
0
votes
0answers
18 views
2nd Opinion regarding data encryption
I'm managing a smaller project that uses Drupal 8.
The site allows for users to register for an account.
There is a simple feature which sends the user a welcome email along with their 'login ...
1
vote
0answers
30 views
Checking if user logged-in by external script, fails
With a script on an external webpage (same domain), I need to detect whether the user that's visiting the page is or not logged in.
[EDIT]
This occurs when the script is into a subfolder.
If it's put ...
0
votes
1answer
112 views
Before login hook
Is there a Drupal 8 hook for pre-login? I would like to redirect the login information of a user on a web server by URL.
I know there is hook_user_login(), but this one only looks called once the ...
0
votes
0answers
29 views
Migration with SOAP basic auth
I try to create a migration from a webservice but i can't set the authentication...
In my YAML, i have this :
source:
plugin: url
data_fetcher_plugin: http
data_parser_plugin: soap
...
0
votes
1answer
45 views
Simple Oauth oauth/debug?_format=json Internal Server error
When i try to test the ooauth/debug?_format=json endpoint through Postman i get the internal server error and error code 403 forbidden.
Even though i use a valid Authorization header with Bearer and ...
0
votes
0answers
35 views
Login user in browser within vue app
Our Drupal project has been integrated with a Vue app. We want to log in users from Vue. For example, users can submit email and password in Vue. Vue can do a post request to Drupal REST API as ...
0
votes
1answer
78 views
REST login problem
I'm trying to log in to drupal8 via api rest using postman.
POST: https://example.com/user/login?_format=json
Content-type: application/json
{
"name": "admin",
"pass": "password"
}
The problem is ...
0
votes
1answer
23 views
LDAP SSO does not authenticate user on homepage
I have configured ldap sso and it is working so far for all Url paths except for the homepage.
I get authenticated on /user/login/sso and I get authenticated on /whatsoever but I don't get ...
0
votes
1answer
43 views
Custom Access check for module route
I'm working on module that should behave as API endpoint.
I created Controller which handler POST & GET requests from external system, but I need to add user authentication so only authenticated ...
0
votes
0answers
36 views
How do I find the lost administrator login credentials?
How do I find the lost administrator login credentials? I have deployed locally an old Drupal 7 website and I can't find the administrator login credentials since Windows had crashed 3 years ago.
0
votes
0answers
19 views
Server/client permissions/role
I've installed and configured the Oauth2 server module. I have a client and I'm using the grant type 'client_credentials' to obtain an access token from /oauth2/token endpoint
How do I grant roles/...
0
votes
0answers
60 views
drupal_http_request as authenticated user during cron
I have a rule set up that runs during cron. Part of that rule is an action that is supposed to save a PDF (via Entity Print which only authenticated users can access) to my server. It works fine when ...
0
votes
0answers
112 views
What do I need to do to successfully enable Facebook login for my site?
I'm trying to setup Facebook login integration for my Drupal site using the HybridAuth Social login module. It is not working with "Use Strict Mode for Redirect URIs" enabled and I am failing to ...
0
votes
1answer
557 views
User login through JSON request returning HTML instead of JSON
I am using Drupal 8.6.4
http://example.org/user/login?_format=json
When I try to submit a post request, it returns HTML page instead of JSON response.
I am sending headers:
Content-Type: ...
0
votes
1answer
37 views
Trouble redirecting users after implementing LDAP
We had a feature on our site where we redirected users with certain roles to a particular landing page upon logging in. In a custom module, we implemented hook_user_login(\Drupal\user\UserInterface $...
1
vote
0answers
53 views
Google OAuth 2 authentication in custom module
I've created a custom module to use the Google MyBusiness (GMB) API to get reviews etc for a specified location.
The issue I am having at the moment is authenticating. All the examples I have read ...
0
votes
2answers
222 views
“Missing required paramter” with all Social Auth providers
The problem: I've just installed social_auth_google, social_auth_twitter and social_auth_linkedin modules. All the modules are configured (Client ID, Client Secret, and other similar fileds). The ...
0
votes
0answers
99 views
OAUTH2 REST API error: You must set the encryption key
After getting the token and when I call the rest API I got this error.
User deprecated function: You must set the encryption key going forward to improve the security of this library - see this ...
0
votes
1answer
402 views
Drupal8 Oaut2 add a grant type “password” to client
I work on Drupal8 project and created Rest API, everything works fine until I want to add Oauth2 when I try to get a token I got an invalid grant type error.
This is the error code:
{
"error": "...
2
votes
0answers
78 views
Simple OAuth Role assignment within a Scope
I have a web app that has multiple scopes under a single OAuth consumer. I want the user's Drupal role to be used when logging in.
In simple OAuth, I have created 1 consumer that has 2 scopes: ...
5
votes
3answers
448 views
Simple OAuth + JSONapi response when token is expired - Decoupled
We're using the 'Simple OAuth' and 'jsonapi' modules for the front end authentication in Angular of our decoupled Drupal project.
We've noticed that when the user credentials are correct but the ...
0
votes
1answer
25 views
LDAP Feeds example not importing new users - Undefined index: count in FeedsLdapEntryParser
I followed the LDAP Feeds example from the documentation and the query test returns the user fields just fine, but after launching the cron job manually I get "There are no new users." + notice:
"...
0
votes
1answer
37 views
Module ldap_sso lost when updating module to the new version
I am in a process of updating the drupal core and some of the modules (quite deactualized). One of them is ldap module, on this server I have no way to update through the drupal administration page, ...
0
votes
1answer
318 views
Drupal7 REST Basic Authentication not working (Postman)
I configured my rest with services and installed the Basic authentication module.
I used Postman and selected basic authentication gave username and password, I got "Missing required argument ...
1
vote
3answers
74 views
How can I programmaticaly submit the user edit form in Drupal 8?
I need to create a logout button in my app, and I do not know how to revoke simple_oauth tokens programmatically, but I have noticed if the user saves their profile form (form_id: "user_form") in ...
0
votes
1answer
578 views
Google OAuth Login Solutions? [closed]
Can anyone recommend a Google OAuth solution for D8?
I've done some looking, the only real viable solution that I can find is the OneAll Social Login module. This would potentially work for us, but ...
0
votes
0answers
183 views
Oauth2, Duplicate entry '' for key 'name': INSERT INTO {users}
I'm trying to make an object to log user through oauth2. I need to put some conditionnal fields. Here is my code :
public function createUserLocally() {
// Get user datas from api
$...
0
votes
1answer
45 views
Open Id Connect SSO on cross platform sites
I have 3 sites(all were sub domain sites)
Server(id.test.com) - .NET
Client1(client1.test.com) - Drupal
Client2(client2.test.com) - .NET
Am using OpenId Connect for login. My login & logout ...
1
vote
1answer
198 views
what json structure does simple oauth expect?
Drupal 8.
I'm new with simple Oauth.
I had manage to do this:
But I want to do it with the Raw format, cuz my frontend is in Angular, so I will send a Json to Drupal.
This is my first try:
{
...
0
votes
1answer
332 views
Sign out not working properly in OpenID Connect
I have integrated OpenID Connect(Generic), where my Signin was successful(Redirects to destination server, provided credentials, redirect to drupal & authenticated).
While i make Sign out, it ...
0
votes
2answers
507 views
How to use user_external_login_register() with user authenticated by token?
So, I'm working on an Oauth2 implementation, and I'm forced to use a custom module as the existing modules all have slightly differing functionalities than my use case, assume Drupal-to-Drupal ...
1
vote
1answer
181 views
How to handle password field for externally authenticated users (Oauth2)?
I'm working on an Oauth2 authentication implementation where I need to provide content access to external users authenticated against an Oauth2 server which provides me with user info. From my ...
2
votes
0answers
256 views
How to create and login external users authenticated against a third-party Oauth2 server?
I'm working on an SSO implementation where I have to give access to a Drupal 7 site to external users authorized/authenticated by Oauth2. I'm struggling with the process of taking the supplied user ...
0
votes
0answers
109 views
Oauth_server authenticates but subsequent requests return “True” with 403 Unauthorized status
I have successfully setup Oauth2 in Drupal 7 and I am able to get token from the Oauth2/token endpoint. I need to implement, Implicit Flow (Client-Side Flow) as this endpoint will be used by client-...
2
votes
0answers
250 views
How to implement SSO with Oauth2 to login users from another site?
So, I apologize in advance as I'm only now getting familiar with all the Oauth2 terminology.
I have an existing Drupal 7 site with its own active user base. The organization I support has recently ...
2
votes
1answer
647 views
Accessing Drupal REST endpoint using Oauth 2 token
I have successfully installed the Simple OAuth module on my website. I am also able to authenticate to it using Postman. I am getting the access_token and the refresh_token when authenticating. ...
0
votes
1answer
115 views
How to verify a token in the url of a drupal 7 site against an external web service and skip the login form all together?
Context
We have this JSON web service GET https://api.my-domain.com/accounts/me (and a bunch of other endpoints). It takes a token in the header. When that token is valid it will return
{
"email": ...
1
vote
0answers
508 views
How do I configure a site as SSO provider with Salesforce as IdP?
I need allow users to log in on a Drupal site using their Salesforce IDs.
I understand that the Salesforce site will need to be configured as an Identity Provider and will provide a SAML certificate. ...
2
votes
3answers
358 views
How to securely authenticate content embeded in another site?
I need to embed password protected content to a second domain with an iframe. The content itself is a view which will be displayed on a third party site via an iframe and the content is prepared with ...
0
votes
1answer
670 views
Help with LDAP module for user authentication in Drupal 8.3.7
I just installed Drupal 8.3.7 via composer and am trying to get user logins to work against our LDAP server. I added and enabled the following modules:
We are using ldaps on port 636 rather than ...
0
votes
1answer
16 views
Saving 'sub' from Identity Provider
I need to associate sub, which is received as part of $userinfo in openid_connect_save_userinfo, but I don't see it as part of the claim options. I also don't see that it's stored elsewhere.
I am ...
0
votes
1answer
112 views
Is that possible to single sign-on with completely different domains?
we have multilingual Drupal 7 site.
Swedish Domain : www.swedish.com
English Domain : www.english.com
admin/config/regional/language looks like screenshot.
No Domain access is used. I have ...
0
votes
0answers
377 views
Basic authentication for external application making requests to Drupal instance
I have a external application that makes requests for content in my Drupal 8 instance. What I want to do is to make sure Drupal is only talking go my external application to stop traffic being spoofed....
