Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [authentication-authorization]

Use it for the user authentication/authorization on Drupal core or third-party modules.

Filter by
Sorted by
Tagged with
0
votes
1answer
23 views

How do I construct an authenticated HTTP request in Postman?

I have Drupal 7 installed locally on my computer with the domain set to http://drupal.local. I am trying to prepare an external script in PHP or Python (or even in pure Bash using curl, if it does ...
2
votes
0answers
124 views

How can I convert oauth2_token.value back to a Bearer token in simple_oauth?

I'm working on a headless Drupal 8 API that offers direct login links via email. For users who forgot their passwords or were invited but have never logged in, it's safe to just reset their password. ...
0
votes
0answers
12 views

simpleSAMLphp Authentication or simplesamlphp-module-drupalauth?

I followed How to Configure Single Sign On across Multiple Drupal 8 Platforms or Websites? I only configured a service provider with simpleSAMLphp and I have some difficulties to make an identity ...
0
votes
0answers
17 views

Basic Authentication for migrate plus - unable to authenticate

The XML feed I was using recently updated to basic authentication. I updated my YML configuration with the basic authentication plugin as follows, but nothing seems to work, also there are no errors. ...
0
votes
1answer
25 views

How can I set up Protected Pages so users only have to log in once?

I'm using the Protected Pages module to make an area of the website - which is about 13 pages - password protected. The problem is that users have to enter the password to view every page rather than ...
1
vote
1answer
75 views

Problem with OAuth2 refresh token

I have the following problem with the simple_oauth module. I can get the initial jwt token with a POST request to /oauth/token with the following form data: username: user password: password ...
0
votes
0answers
19 views

How to use oauth2 authorization in feeds importer?

I did it the postman like the following steps In the authorization tab, I selected OAuth 2.0 as Type. Then clicked on get new access token. I selected grant type as Client Credentials. Added access ...
0
votes
0answers
38 views

No AJAX when user is logged in?

I am developing an e-commerce site for one of our customers for the first time with drupal. It is going pretty good so far but there is a weird misbehavior where I have no idea on how to handle it in ...
3
votes
1answer
85 views

Using OAuth2 on non-REST endpoints

I have a custom module which includes a ControllerBase. The controller has a content() function that returns a JsonResponse(). The code for this function returns a complete list of a certain entity ...
1
vote
1answer
39 views

Unable to run update.php or update modules from web interface

I would really like to be able to install module updates through the web interface or run update.php when needed without changing settings.php, but something seems to be broken in my setup because it ...
0
votes
0answers
18 views

2nd Opinion regarding data encryption

I'm managing a smaller project that uses Drupal 8. The site allows for users to register for an account. There is a simple feature which sends the user a welcome email along with their 'login ...
1
vote
0answers
30 views

Checking if user logged-in by external script, fails

With a script on an external webpage (same domain), I need to detect whether the user that's visiting the page is or not logged in. [EDIT] This occurs when the script is into a subfolder. If it's put ...
0
votes
1answer
145 views

Before login hook

Is there a Drupal 8 hook for pre-login? I would like to redirect the login information of a user on a web server by URL. I know there is hook_user_login(), but this one only looks called once the ...
0
votes
0answers
30 views

Migration with SOAP basic auth

I try to create a migration from a webservice but i can't set the authentication... In my YAML, i have this : source: plugin: url data_fetcher_plugin: http data_parser_plugin: soap ...
0
votes
1answer
61 views

Simple Oauth oauth/debug?_format=json Internal Server error

When i try to test the ooauth/debug?_format=json endpoint through Postman i get the internal server error and error code 403 forbidden. Even though i use a valid Authorization header with Bearer and ...
0
votes
0answers
36 views

Login user in browser within vue app

Our Drupal project has been integrated with a Vue app. We want to log in users from Vue. For example, users can submit email and password in Vue. Vue can do a post request to Drupal REST API as ...
0
votes
1answer
103 views

REST login problem

I'm trying to log in to drupal8 via api rest using postman. POST: https://example.com/user/login?_format=json Content-type: application/json { "name": "admin", "pass": "password" } The problem is ...
0
votes
1answer
27 views

LDAP SSO does not authenticate user on homepage

I have configured ldap sso and it is working so far for all Url paths except for the homepage. I get authenticated on /user/login/sso and I get authenticated on /whatsoever but I don't get ...
0
votes
1answer
44 views

Custom Access check for module route

I'm working on module that should behave as API endpoint. I created Controller which handler POST & GET requests from external system, but I need to add user authentication so only authenticated ...
0
votes
0answers
36 views

How do I find the lost administrator login credentials?

How do I find the lost administrator login credentials? I have deployed locally an old Drupal 7 website and I can't find the administrator login credentials since Windows had crashed 3 years ago.
0
votes
0answers
19 views

Server/client permissions/role

I've installed and configured the Oauth2 server module. I have a client and I'm using the grant type 'client_credentials' to obtain an access token from /oauth2/token endpoint How do I grant roles/...
0
votes
0answers
66 views

drupal_http_request as authenticated user during cron

I have a rule set up that runs during cron. Part of that rule is an action that is supposed to save a PDF (via Entity Print which only authenticated users can access) to my server. It works fine when ...
0
votes
0answers
117 views

What do I need to do to successfully enable Facebook login for my site?

I'm trying to setup Facebook login integration for my Drupal site using the HybridAuth Social login module. It is not working with "Use Strict Mode for Redirect URIs" enabled and I am failing to ...
0
votes
1answer
714 views

User login through JSON request returning HTML instead of JSON

I am using Drupal 8.6.4 http://example.org/user/login?_format=json When I try to submit a post request, it returns HTML page instead of JSON response. I am sending headers: Content-Type: ...
0
votes
1answer
39 views

Trouble redirecting users after implementing LDAP

We had a feature on our site where we redirected users with certain roles to a particular landing page upon logging in. In a custom module, we implemented hook_user_login(\Drupal\user\UserInterface $...
1
vote
0answers
56 views

Google OAuth 2 authentication in custom module

I've created a custom module to use the Google MyBusiness (GMB) API to get reviews etc for a specified location. The issue I am having at the moment is authenticating. All the examples I have read ...
0
votes
2answers
241 views

“Missing required paramter” with all Social Auth providers

The problem: I've just installed social_auth_google, social_auth_twitter and social_auth_linkedin modules. All the modules are configured (Client ID, Client Secret, and other similar fileds). The ...
0
votes
0answers
102 views

OAUTH2 REST API error: You must set the encryption key

After getting the token and when I call the rest API I got this error. User deprecated function: You must set the encryption key going forward to improve the security of this library - see this ...
0
votes
1answer
433 views

Drupal8 Oaut2 add a grant type “password” to client

I work on Drupal8 project and created Rest API, everything works fine until I want to add Oauth2 when I try to get a token I got an invalid grant type error. This is the error code: { "error": "...
2
votes
0answers
84 views

Simple OAuth Role assignment within a Scope

I have a web app that has multiple scopes under a single OAuth consumer. I want the user's Drupal role to be used when logging in. In simple OAuth, I have created 1 consumer that has 2 scopes: ...
5
votes
3answers
488 views

Simple OAuth + JSONapi response when token is expired - Decoupled

We're using the 'Simple OAuth' and 'jsonapi' modules for the front end authentication in Angular of our decoupled Drupal project. We've noticed that when the user credentials are correct but the ...
0
votes
1answer
26 views

LDAP Feeds example not importing new users - Undefined index: count in FeedsLdapEntryParser

I followed the LDAP Feeds example from the documentation and the query test returns the user fields just fine, but after launching the cron job manually I get "There are no new users." + notice: "...
0
votes
1answer
38 views

Module ldap_sso lost when updating module to the new version

I am in a process of updating the drupal core and some of the modules (quite deactualized). One of them is ldap module, on this server I have no way to update through the drupal administration page, ...
0
votes
1answer
345 views

Drupal7 REST Basic Authentication not working (Postman)

I configured my rest with services and installed the Basic authentication module. I used Postman and selected basic authentication gave username and password, I got "Missing required argument ...
1
vote
3answers
82 views

How can I programmaticaly submit the user edit form in Drupal 8?

I need to create a logout button in my app, and I do not know how to revoke simple_oauth tokens programmatically, but I have noticed if the user saves their profile form (form_id: "user_form") in ...
0
votes
1answer
607 views

Google OAuth Login Solutions? [closed]

Can anyone recommend a Google OAuth solution for D8? I've done some looking, the only real viable solution that I can find is the OneAll Social Login module. This would potentially work for us, but ...
0
votes
0answers
185 views

Oauth2, Duplicate entry '' for key 'name': INSERT INTO {users}

I'm trying to make an object to log user through oauth2. I need to put some conditionnal fields. Here is my code : public function createUserLocally() { // Get user datas from api $...
0
votes
1answer
47 views

Open Id Connect SSO on cross platform sites

I have 3 sites(all were sub domain sites) Server(id.test.com) - .NET Client1(client1.test.com) - Drupal Client2(client2.test.com) - .NET Am using OpenId Connect for login. My login & logout ...
1
vote
1answer
203 views

what json structure does simple oauth expect?

Drupal 8. I'm new with simple Oauth. I had manage to do this: But I want to do it with the Raw format, cuz my frontend is in Angular, so I will send a Json to Drupal. This is my first try: { ...
0
votes
1answer
353 views

Sign out not working properly in OpenID Connect

I have integrated OpenID Connect(Generic), where my Signin was successful(Redirects to destination server, provided credentials, redirect to drupal & authenticated). While i make Sign out, it ...
0
votes
2answers
539 views

How to use user_external_login_register() with user authenticated by token?

So, I'm working on an Oauth2 implementation, and I'm forced to use a custom module as the existing modules all have slightly differing functionalities than my use case, assume Drupal-to-Drupal ...
1
vote
1answer
186 views

How to handle password field for externally authenticated users (Oauth2)?

I'm working on an Oauth2 authentication implementation where I need to provide content access to external users authenticated against an Oauth2 server which provides me with user info. From my ...
2
votes
0answers
271 views

How to create and login external users authenticated against a third-party Oauth2 server?

I'm working on an SSO implementation where I have to give access to a Drupal 7 site to external users authorized/authenticated by Oauth2. I'm struggling with the process of taking the supplied user ...
0
votes
0answers
110 views

Oauth_server authenticates but subsequent requests return “True” with 403 Unauthorized status

I have successfully setup Oauth2 in Drupal 7 and I am able to get token from the Oauth2/token endpoint. I need to implement, Implicit Flow (Client-Side Flow) as this endpoint will be used by client-...
2
votes
0answers
259 views

How to implement SSO with Oauth2 to login users from another site?

So, I apologize in advance as I'm only now getting familiar with all the Oauth2 terminology. I have an existing Drupal 7 site with its own active user base. The organization I support has recently ...
2
votes
1answer
683 views

Accessing Drupal REST endpoint using Oauth 2 token

I have successfully installed the Simple OAuth module on my website. I am also able to authenticate to it using Postman. I am getting the access_token and the refresh_token when authenticating. ...
0
votes
1answer
119 views

How to verify a token in the url of a drupal 7 site against an external web service and skip the login form all together?

Context We have this JSON web service GET https://api.my-domain.com/accounts/me (and a bunch of other endpoints). It takes a token in the header. When that token is valid it will return { "email": ...
1
vote
0answers
523 views

How do I configure a site as SSO provider with Salesforce as IdP?

I need allow users to log in on a Drupal site using their Salesforce IDs. I understand that the Salesforce site will need to be configured as an Identity Provider and will provide a SAML certificate. ...
2
votes
3answers
373 views

How to securely authenticate content embeded in another site?

I need to embed password protected content to a second domain with an iframe. The content itself is a view which will be displayed on a third party site via an iframe and the content is prepared with ...
0
votes
1answer
700 views

Help with LDAP module for user authentication in Drupal 8.3.7

I just installed Drupal 8.3.7 via composer and am trying to get user logins to work against our LDAP server. I added and enabled the following modules: We are using ldaps on port 636 rather than ...