<![CDATA[Topics tagged with grant]]>https://fusionauth.io/community/forum/tags/grantRSS for NodeMon, 20 Jul 2026 13:16:21 GMTInvalid Date60<![CDATA[How to create entities with parents?]]>@nikhil-shrivastav

Thanks for the question. I have addressed in our support other related support thread.

Thanks
Josh

]]>https://fusionauth.io/community/forum/topic/1450/how-to-create-entities-with-parentshttps://fusionauth.io/community/forum/topic/1450/how-to-create-entities-with-parentsInvalid Date<![CDATA[MFA with the password grant]]>Thanks for addressing this use case. Your proposal, however, runs counter to any standardization effort: Long live OAuth! 🙂

A better approach would be to switch from a password grant to the use of authorization codes (instead of passwords) to obtain the access token. This is fully within the OAuth framework and does not introduce fusionauth-specific hacks into the solution.

We have created as simple html page that redirects to the fusionauth authorize endpoint with grant_type=authorization_code. The browser handles MFA as usual. Upon redirecting to this page, the page can harvest the authorization code for the user to copy. From there proceed with into authorization code in place of a password.

PS: Long live OAuth!

]]>https://fusionauth.io/community/forum/topic/1348/mfa-with-the-password-granthttps://fusionauth.io/community/forum/topic/1348/mfa-with-the-password-grantInvalid Date<![CDATA[Can I get permissions granted to a user against an Entity in an OAuth grant]]>The ability to search grants for a user was a gap in our documentation. We have since released an update to showcase/describe the use case.

https://fusionauth.io/docs/v1/tech/apis/entity-management/grants/#search-for-grants

Your API endpoint call will look like below:

GET /api/entity/grant/search?userId={uuid}

Additional possible filtering functionality is documented in this feature request.

]]>https://fusionauth.io/community/forum/topic/1118/can-i-get-permissions-granted-to-a-user-against-an-entity-in-an-oauth-granthttps://fusionauth.io/community/forum/topic/1118/can-i-get-permissions-granted-to-a-user-against-an-entity-in-an-oauth-grantInvalid Date<![CDATA[Determining which OAuth grant you are in within the themes]]>The only two grants that are relevant to an interactive flow are the authorization grant, and the implicit grant.

I don’t recommend you use the implicit grant at all, so that leaves only the authorization grant.

If the authorization grant is happening, response_type will be code.

If the authorization grant is occurring due to a device grant, the user_code variable will be set.

]]>https://fusionauth.io/community/forum/topic/1058/determining-which-oauth-grant-you-are-in-within-the-themeshttps://fusionauth.io/community/forum/topic/1058/determining-which-oauth-grant-you-are-in-within-the-themesInvalid Date<![CDATA[Length of time for authorization code]]>It's configurable. If you go to the tenant details page, then to the Advanced tab, you'll see the setting there; it's called Authorization Code. It's also documented in the tenant API, search for tenant.externalIdentifierConfiguration.authorizationGrantIdTimeToLiveInSeconds here: https://fusionauth.io/docs/v1/tech/apis/tenants

Looks like valid durations are between 1 and 600 seconds.

]]>https://fusionauth.io/community/forum/topic/380/length-of-time-for-authorization-codehttps://fusionauth.io/community/forum/topic/380/length-of-time-for-authorization-codeInvalid Date<![CDATA[How can I implement a client credentials grant with FusionAuth?]]>An update! The client credentials grant is now available in paid editions of FusionAuth.

Here is the documentation:

https://fusionauth.io/docs/v1/tech/oauth/#configure-entities

https://fusionauth.io/docs/v1/tech/oauth/#example-client-credentials-grant

]]>https://fusionauth.io/community/forum/topic/85/how-can-i-implement-a-client-credentials-grant-with-fusionauthhttps://fusionauth.io/community/forum/topic/85/how-can-i-implement-a-client-credentials-grant-with-fusionauthInvalid Date