Questions tagged [authentication-authorization]
Use it for the user authentication/authorization on Drupal core or third-party modules.
291
questions
0
votes
0answers
22 views
cant read current user in middleware
i am relatively new to drupal . thus i am trying to make an sso system work . i have this parent domain "domain.com" and the drupal site is running on sub.domain.com . i can read the cookies and all ....
0
votes
0answers
17 views
user_login_submit doesn't work when called in an inner function
We have a shared register function that multiple pieces of our app use. When registration is successful, we log the user in. But for some reason, when a user completes this project via browser in the ...
0
votes
1answer
23 views
How do I construct an authenticated HTTP request in Postman?
I have Drupal 7 installed locally on my computer with the domain set to http://drupal.local.
I am trying to prepare an external script in PHP or Python (or even in pure Bash using curl, if it does ...
2
votes
0answers
127 views
How can I convert oauth2_token.value back to a Bearer token in simple_oauth?
I'm working on a headless Drupal 8 API that offers direct login links via email. For users who forgot their passwords or were invited but have never logged in, it's safe to just reset their password.
...
0
votes
0answers
14 views
simpleSAMLphp Authentication or simplesamlphp-module-drupalauth?
I followed How to Configure Single Sign On across Multiple Drupal 8 Platforms or Websites? I only configured a service provider with simpleSAMLphp and I have some difficulties to make an identity ...
0
votes
0answers
17 views
Basic Authentication for migrate plus - unable to authenticate
The XML feed I was using recently updated to basic authentication. I updated my YML configuration with the basic authentication plugin as follows, but nothing seems to work, also there are no errors.
...
0
votes
1answer
25 views
How can I set up Protected Pages so users only have to log in once?
I'm using the Protected Pages module to make an area of the website - which is about 13 pages - password protected. The problem is that users have to enter the password to view every page rather than ...
1
vote
1answer
81 views
Problem with OAuth2 refresh token
I have the following problem with the simple_oauth module.
I can get the initial jwt token with a POST request to /oauth/token with the following form data:
username: user
password: password
...
0
votes
0answers
21 views
How to use oauth2 authorization in feeds importer?
I did it the postman like the following steps
In the authorization tab, I selected OAuth 2.0 as Type.
Then clicked on get new access token.
I selected grant type as Client Credentials. Added access ...
0
votes
0answers
39 views
No AJAX when user is logged in?
I am developing an e-commerce site for one of our customers for the first time with drupal. It is going pretty good so far but there is a weird misbehavior where I have no idea on how to handle it in ...
3
votes
1answer
88 views
Using OAuth2 on non-REST endpoints
I have a custom module which includes a ControllerBase. The controller has a content() function that returns a JsonResponse(). The code for this function returns a complete list of a certain entity ...
1
vote
1answer
42 views
Unable to run update.php or update modules from web interface
I would really like to be able to install module updates through the web interface or run update.php when needed without changing settings.php, but something seems to be broken in my setup because it ...
0
votes
0answers
18 views
2nd Opinion regarding data encryption
I'm managing a smaller project that uses Drupal 8.
The site allows for users to register for an account.
There is a simple feature which sends the user a welcome email along with their 'login ...
1
vote
0answers
30 views
Checking if user logged-in by external script, fails
With a script on an external webpage (same domain), I need to detect whether the user that's visiting the page is or not logged in.
[EDIT]
This occurs when the script is into a subfolder.
If it's put ...
0
votes
1answer
166 views
Before login hook
Is there a Drupal 8 hook for pre-login? I would like to redirect the login information of a user on a web server by URL.
I know there is hook_user_login(), but this one only looks called once the ...
0
votes
0answers
32 views
Migration with SOAP basic auth
I try to create a migration from a webservice but i can't set the authentication...
In my YAML, i have this :
source:
plugin: url
data_fetcher_plugin: http
data_parser_plugin: soap
...
0
votes
1answer
65 views
Simple Oauth oauth/debug?_format=json Internal Server error
When i try to test the ooauth/debug?_format=json endpoint through Postman i get the internal server error and error code 403 forbidden.
Even though i use a valid Authorization header with Bearer and ...
0
votes
0answers
38 views
Login user in browser within vue app
Our Drupal project has been integrated with a Vue app. We want to log in users from Vue. For example, users can submit email and password in Vue. Vue can do a post request to Drupal REST API as ...
0
votes
1answer
114 views
REST login problem
I'm trying to log in to drupal8 via api rest using postman.
POST: https://example.com/user/login?_format=json
Content-type: application/json
{
"name": "admin",
"pass": "password"
}
The problem is ...
0
votes
1answer
31 views
LDAP SSO does not authenticate user on homepage
I have configured ldap sso and it is working so far for all Url paths except for the homepage.
I get authenticated on /user/login/sso and I get authenticated on /whatsoever but I don't get ...
0
votes
1answer
44 views
Custom Access check for module route
I'm working on module that should behave as API endpoint.
I created Controller which handler POST & GET requests from external system, but I need to add user authentication so only authenticated ...
0
votes
0answers
36 views
How do I find the lost administrator login credentials?
How do I find the lost administrator login credentials? I have deployed locally an old Drupal 7 website and I can't find the administrator login credentials since Windows had crashed 3 years ago.
0
votes
0answers
19 views
Server/client permissions/role
I've installed and configured the Oauth2 server module. I have a client and I'm using the grant type 'client_credentials' to obtain an access token from /oauth2/token endpoint
How do I grant roles/...
0
votes
0answers
68 views
drupal_http_request as authenticated user during cron
I have a rule set up that runs during cron. Part of that rule is an action that is supposed to save a PDF (via Entity Print which only authenticated users can access) to my server. It works fine when ...
0
votes
0answers
120 views
What do I need to do to successfully enable Facebook login for my site?
I'm trying to setup Facebook login integration for my Drupal site using the HybridAuth Social login module. It is not working with "Use Strict Mode for Redirect URIs" enabled and I am failing to ...
0
votes
1answer
769 views
User login through JSON request returning HTML instead of JSON
I am using Drupal 8.6.4
http://example.org/user/login?_format=json
When I try to submit a post request, it returns HTML page instead of JSON response.
I am sending headers:
Content-Type: ...
0
votes
1answer
41 views
Trouble redirecting users after implementing LDAP
We had a feature on our site where we redirected users with certain roles to a particular landing page upon logging in. In a custom module, we implemented hook_user_login(\Drupal\user\UserInterface $...
1
vote
0answers
57 views
Google OAuth 2 authentication in custom module
I've created a custom module to use the Google MyBusiness (GMB) API to get reviews etc for a specified location.
The issue I am having at the moment is authenticating. All the examples I have read ...
0
votes
2answers
243 views
“Missing required paramter” with all Social Auth providers
The problem: I've just installed social_auth_google, social_auth_twitter and social_auth_linkedin modules. All the modules are configured (Client ID, Client Secret, and other similar fileds). The ...
0
votes
0answers
102 views
OAUTH2 REST API error: You must set the encryption key
After getting the token and when I call the rest API I got this error.
User deprecated function: You must set the encryption key going forward to improve the security of this library - see this ...
0
votes
1answer
451 views
Drupal8 Oaut2 add a grant type “password” to client
I work on Drupal8 project and created Rest API, everything works fine until I want to add Oauth2 when I try to get a token I got an invalid grant type error.
This is the error code:
{
"error": "...
2
votes
0answers
85 views
Simple OAuth Role assignment within a Scope
I have a web app that has multiple scopes under a single OAuth consumer. I want the user's Drupal role to be used when logging in.
In simple OAuth, I have created 1 consumer that has 2 scopes: ...
5
votes
3answers
501 views
Simple OAuth + JSONapi response when token is expired - Decoupled
We're using the 'Simple OAuth' and 'jsonapi' modules for the front end authentication in Angular of our decoupled Drupal project.
We've noticed that when the user credentials are correct but the ...
0
votes
1answer
26 views
LDAP Feeds example not importing new users - Undefined index: count in FeedsLdapEntryParser
I followed the LDAP Feeds example from the documentation and the query test returns the user fields just fine, but after launching the cron job manually I get "There are no new users." + notice:
"...
0
votes
1answer
38 views
Module ldap_sso lost when updating module to the new version
I am in a process of updating the drupal core and some of the modules (quite deactualized). One of them is ldap module, on this server I have no way to update through the drupal administration page, ...
0
votes
1answer
358 views
Drupal7 REST Basic Authentication not working (Postman)
I configured my rest with services and installed the Basic authentication module.
I used Postman and selected basic authentication gave username and password, I got "Missing required argument ...
1
vote
3answers
90 views
How can I programmaticaly submit the user edit form in Drupal 8?
I need to create a logout button in my app, and I do not know how to revoke simple_oauth tokens programmatically, but I have noticed if the user saves their profile form (form_id: "user_form") in ...
0
votes
1answer
624 views
Google OAuth Login Solutions? [closed]
Can anyone recommend a Google OAuth solution for D8?
I've done some looking, the only real viable solution that I can find is the OneAll Social Login module. This would potentially work for us, but ...
0
votes
0answers
188 views
Oauth2, Duplicate entry '' for key 'name': INSERT INTO {users}
I'm trying to make an object to log user through oauth2. I need to put some conditionnal fields. Here is my code :
public function createUserLocally() {
// Get user datas from api
$...
0
votes
1answer
48 views
Open Id Connect SSO on cross platform sites
I have 3 sites(all were sub domain sites)
Server(id.test.com) - .NET
Client1(client1.test.com) - Drupal
Client2(client2.test.com) - .NET
Am using OpenId Connect for login. My login & logout ...
1
vote
1answer
206 views
what json structure does simple oauth expect?
Drupal 8.
I'm new with simple Oauth.
I had manage to do this:
But I want to do it with the Raw format, cuz my frontend is in Angular, so I will send a Json to Drupal.
This is my first try:
{
...
0
votes
1answer
359 views
Sign out not working properly in OpenID Connect
I have integrated OpenID Connect(Generic), where my Signin was successful(Redirects to destination server, provided credentials, redirect to drupal & authenticated).
While i make Sign out, it ...
0
votes
2answers
552 views
How to use user_external_login_register() with user authenticated by token?
So, I'm working on an Oauth2 implementation, and I'm forced to use a custom module as the existing modules all have slightly differing functionalities than my use case, assume Drupal-to-Drupal ...
1
vote
1answer
187 views
How to handle password field for externally authenticated users (Oauth2)?
I'm working on an Oauth2 authentication implementation where I need to provide content access to external users authenticated against an Oauth2 server which provides me with user info. From my ...
2
votes
0answers
280 views
How to create and login external users authenticated against a third-party Oauth2 server?
I'm working on an SSO implementation where I have to give access to a Drupal 7 site to external users authorized/authenticated by Oauth2. I'm struggling with the process of taking the supplied user ...
0
votes
0answers
110 views
Oauth_server authenticates but subsequent requests return “True” with 403 Unauthorized status
I have successfully setup Oauth2 in Drupal 7 and I am able to get token from the Oauth2/token endpoint. I need to implement, Implicit Flow (Client-Side Flow) as this endpoint will be used by client-...
2
votes
0answers
268 views
How to implement SSO with Oauth2 to login users from another site?
So, I apologize in advance as I'm only now getting familiar with all the Oauth2 terminology.
I have an existing Drupal 7 site with its own active user base. The organization I support has recently ...
2
votes
1answer
712 views
Accessing Drupal REST endpoint using Oauth 2 token
I have successfully installed the Simple OAuth module on my website. I am also able to authenticate to it using Postman. I am getting the access_token and the refresh_token when authenticating. ...
0
votes
1answer
119 views
How to verify a token in the url of a drupal 7 site against an external web service and skip the login form all together?
Context
We have this JSON web service GET https://api.my-domain.com/accounts/me (and a bunch of other endpoints). It takes a token in the header. When that token is valid it will return
{
"email": ...
1
vote
0answers
528 views
How do I configure a site as SSO provider with Salesforce as IdP?
I need allow users to log in on a Drupal site using their Salesforce IDs.
I understand that the Salesforce site will need to be configured as an Identity Provider and will provide a SAML certificate. ...
