Hi,

We are currently testing passwordless authentication. The flow works fine, however it seems the lambda we are using to enrich the access token is not called.

We have enabled debugging to ensure the lamda is called when using password authentication. This works fine.

Are we missing a toggle somewhere?

Cheers,

Peter

Okay, so the docs also describe the requirement for testing the applicationId claim:

https://fusionauth.io/docs/v1/tech/core-concepts/authentication-authorization#:~:text=Authorization and Securing Your Application

Unfortunately the application feature Registration->Self-service registration doesn't work for token requests. And OAuth->Require registration doesn't work for password grant type.

Okay, so it seems to be by design. But why consider this successful? https://github.com/FusionAuth/fusionauth-issues/issues/1387

Hi,

We've noticed that users authenticated via the /oauth2/token endpoint are shown in the login records, but the application / application id are not set. Seems strange as the client credentials are provided, so the application should be known.

Is this by design or something in our configuration? Any thoughts?

Cheers,

Peter

Hi,

We are currently testing passwordless authentication. The flow works fine, however it seems the lambda we are using to enrich the access token is not called.

We have enabled debugging to ensure the lamda is called when using password authentication. This works fine.

Are we missing a toggle somewhere?

Cheers,

Peter