Navigation

    FusionAuth
    • Login
    • Search
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    1. Home
    2. Tags
    3. grant
    Log in to post
    • All categories
    • N

      How to create entities with parents?
      Comments & Feedback • grant entities • • nikhil.shrivastav

      2
      0
      Votes
      2
      Posts
      248
      Views

      joshua

      @nikhil-shrivastav

      Thanks for the question. I have addressed in our support other related support thread.

      Thanks
      Josh

    • dan

      MFA with the password grant
      Q&A • password grant mfa • • dan

      2
      0
      Votes
      2
      Posts
      301
      Views

      dan

      Yes. While we recommend the Authorization Code grant is almost all situations, there are times when you need the password grant, and FusionAuth's MFA works with it just fine.

      When you begin the password grant, if the user has MFA set up, you won't receive the JWT on successful authentication. Instead you'll receive JSON like this:

      {"error":"two_factor_required","error_description":"The user has enabled two factor authentication.","two_factor_id":"gDNV2_fFtl7vhMV5_5bFJUL3ZyZ5Ine69n0xWDXKEGw"}

      You'll then need to use the provided two_factor_id to complete the MFA as documented here: https://fusionauth.io/docs/v1/tech/apis/login/#complete-multi-factor-authentication

      That might look something like this:

      curl https://local.fusionauth.io/api/two-factor/login -H 'content-type: application/json' -d '{"twoFactorId": "gDNV2_fFtl7vhMV5_5bFJUL3ZyZ5Ine69n0xWDXKEGw", "code": "487156"}'

      At that time you'll get a JWT and normal successful login response.

    • dan

      Can I get permissions granted to a user against an Entity in an OAuth grant
      Q&A • entities authorization code grant • • dan

      3
      0
      Votes
      3
      Posts
      344
      Views

      dan

      The ability to search grants for a user was a gap in our documentation. We have since released an update to showcase/describe the use case.

      https://fusionauth.io/docs/v1/tech/apis/entity-management/grants/#search-for-grants

      Your API endpoint call will look like below:

      GET /api/entity/grant/search?userId={uuid}

      Additional possible filtering functionality is documented in this feature request.

    • dan

      Determining which OAuth grant you are in within the themes
      Q&A • theme oauth grant • • dan

      2
      0
      Votes
      2
      Posts
      218
      Views

      dan

      The only two grants that are relevant to an interactive flow are the authorization grant, and the implicit grant.

      I don’t recommend you use the implicit grant at all, so that leaves only the authorization grant.

      If the authorization grant is happening, response_type will be code.

      If the authorization grant is occurring due to a device grant, the user_code variable will be set.

    • dan

      Length of time for authorization code
      Q&A • authorization code grant lifetime duration • • dan

      2
      0
      Votes
      2
      Posts
      210
      Views

      dan

      It's configurable. If you go to the tenant details page, then to the Advanced tab, you'll see the setting there; it's called Authorization Code. It's also documented in the tenant API, search for tenant.externalIdentifierConfiguration.authorizationGrantIdTimeToLiveInSeconds here: https://fusionauth.io/docs/v1/tech/apis/tenants

      Looks like valid durations are between 1 and 600 seconds.

    • dan

      SOLVED How can I implement a client credentials grant with FusionAuth?
      Q&A • grant client creds • • dan

      3
      0
      Votes
      3
      Posts
      639
      Views

      dan

      An update! The client credentials grant is now available in paid editions of FusionAuth.

      Here is the documentation:

      https://fusionauth.io/docs/v1/tech/oauth/#configure-entities

      https://fusionauth.io/docs/v1/tech/oauth/#example-client-credentials-grant