FusionAuth
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    • Login
    1. Home
    2. joshua
    3. Best
    • Profile
    • Following 1
    • Followers 4
    • Topics 31
    • Posts 450
    • Best 36
    • Controversial 0
    • Groups 1

    Best posts made by joshua

    • RE: Where to find the option "Require registration"

      @florian,

      You are going to want to make sure that you are on the latest version of FusionAuth (1.29.1), as some versions may not display this option (this was a recent bug fix)

      Located under Applications > OAuth > Toggle

      A screenshot is attached.Screen Shot 2021-08-03 at 11.50.53 AM.png

      Hope that helps!

      Thanks,
      Josh

      posted in General Discussion
      joshuaJ
      joshua
    • RE: maven.org is missing latest Java clients

      @marcus-krassmann Thanks for the info -> we have updated the MVN repo with a more current point release.

      Thanks,
      Josh

      posted in Comments & Feedback
      joshuaJ
      joshua
    • RE: Authentication for an Application with Web Client and Mobile front-ends

      @mehamm,

      It sounds like you are on the right track. A few comments:

      • The Web API should not persist the access token, but the web app definitely can (often in a session). The web app can then present the access token until it expires, in which case the web app can renew the access token with the refresh token.
      • "Web API verifies token against FusionAuth (my app) endpoint" -> You can also verify the claims were signed by FusionAuth without calling the introspect endpoint by using a JWT library.
      • "Web API pulls user claims from token for role(s) and tenant, if verified returns data back to web app." -> Makes sense. Make sure to check the "aud" and "iss" claims to ensure they are what you expect. You should do this even if you are using the introspect endpoint.
      • The correct tenant can be found from the client_id, since all applications are associated with one and only one tenant.
        If you have any specific issues, please feel free to post them in the forum (a new topic might be best).

      By the way, if you are running in FusionAuth in production at scale, we encourage you to get a support contract 🙂 . Having one allows access to the engineering team via opening support tickets. https://fusionauth.io/pricing/. Obviously, this is not a requirement, but should your business needs require a higher support level, it is available 👍

      I hope this helps!

      posted in Q&A
      joshuaJ
      joshua
    • RE: Unable to send email via JavaMailPrime Messaging Exception

      Hi @nileshnandaniya135!

      You may want to review your SMTP settings, as this could indicate something was not set up correctly (prior to the test). Do you have any additional errors or logs that we can review with you?

      Additionally, I would encourage you to review our documentation regarding setting up an SMTP service.

      • Configure
      • Email Overview - with debug steps
      • Enabling Verbose Logging
      • Email Templates

      I hope this helps!

      Thanks,
      Josh

      posted in General Discussion
      joshuaJ
      joshua
    • RE: Cockroach Compatibility problem on Connector Signin

      Hi @michael-schramm,

      If you could provide a bit more context to your issue, we could perhaps give a few pointers, but unfortunately, I believe this is outside of our accepted/documented use guidelines. FusionAuth is supported using MySQL and Postgres (documentation here).

      Thanks,
      Josh

      posted in Q&A
      joshuaJ
      joshua
    • RE: How to change user avatar image on FusionAuth?

      @minhngocnguyenduy

      This is an option on the user object (in the admin ui users > edit user > image url)

      Screen Shot 2021-12-08 at 8.58.25 AM.png
      Screen Shot 2021-12-08 at 8.58.36 AM.png

      Hope this helps!
      Josh

      posted in Q&A
      joshuaJ
      joshua
    • RE: How to configure generic messenger?

      @oleksiikraieviy and @vindhyahegde2114

      This is going to be related to how you set up a generic messenger - I have a few tips here.

      https://www.loom.com/share/cdd0835c054b40a4a3a6e2e32f1c9d04

      Thanks,
      Josh

      posted in Q&A
      joshuaJ
      joshua
    • 1.30 is released

      1.30 is released 🎉

      Release notes forming
      https://fusionauth.io/docs/v1/tech/release-notes/

      posted in Release
      joshuaJ
      joshua
    • RE: How to Securely Implement OAuth in Vue.js

      Hey FusionAuth Community!

      Just a heads up -- we have made a few revisions to this post!

      If you are interested in using VueJS and FusionAuth -- check it out!

      https://fusionauth.io/blog/2020/08/06/securely-implement-oauth-vuejs

      posted in Blogs
      joshuaJ
      joshua
    • RE: Any simple was of doing apple/google-only login?

      Hi bogorad,

      The functionality that you are looking for is located in the themes section of the FusionAuth application. Specifically, you will want to review all OAuth pages (OAuth authorize and possibly others) to adjust the template to your user requirements. FusionAuth uses FreeMarker for templating.

      Additionally, below is a link to our documentation regarding themes (as well as a very useful video on how to mimic a custom Stack Overflow login page, for instance)
      https://fusionauth.io/docs/v1/tech/themes/

      Hopefully, that sets you on the right path! Enjoy FusionAuth!

      Thanks,
      Josh

      theme-oauth-authorize.png

      posted in General Discussion
      joshuaJ
      joshua
    • My Database (sql, rds, postgres) is filling up. Any pointers on how to address this?

      My Database (sql, rds, postgres) is filling up. Any pointers on how to address this?

      posted in Q&A
      joshuaJ
      joshua
    • RE: Is there an option to make JWT token smaller in a size?

      There is an option to adjust the number of claims on the token through the jwt populate lambda.

      Documentation here

      Let me know if that gets at what you looking for!

      Thanks,
      Josh

      posted in General Discussion
      joshuaJ
      joshua
    • RE: My Database (sql, rds, postgres) is filling up. Any pointers on how to address this?

      There are a number of things that might be causing this.

      One thing to check is to see how many logs, debug, and other records your installation is holding on to. This can be reviewed by clicking under Setting -> System

      I have attached a screenshot for your review.

      logsettings2.png
      logsettings.png

      Finally, it might be useful to review your system architecture to ensure it is sized appropriately for the number of users you are hosting.

      I hope this helps!

      Thanks,
      Josh

      posted in Q&A
      joshuaJ
      joshua
    • Is there an option to make JWT token smaller in a size?

      Is there an option to make JWT token smaller in a size?

      posted in General Discussion
      joshuaJ
      joshua
    • RE: 401 Response: Invalid application Id on call to Registrations API

      Hi @mehamm!

      All applications are associated with one and only one tenant.

      You may find some answers to your questions around multi-tenancy here:

      https://fusionauth.io/blog/2018/09/24/multi-tenancy-in-a-single-tenant-architecture

      I will also excerpt from the article

      A FusionAuth tenant is simply a namespace where Applications, Groups, and Users exist

      Another article that might be of interest is below:
      https://fusionauth.io/blog/2020/06/30/private-labeling-with-multi-tenant

      These articles should help you understand the concept of tenants as it applies to FusionAuth.

      I hope this helps!

      Thanks,
      Josh

      posted in Q&A
      joshuaJ
      joshua
    • RE: Terminate idle sessions based on Role

      Hi @yb98 -

      I don't believe that this is currently possible within the Admin UI (but I will update this post if I discover otherwise). You could submit a feature request outlining your use case.

      It may be possible to hook something up via the API and lots of custom code (but even then, I am not sure how this would work). You may find some insight here.

      Please note, you can set these duration settings on both the tenant and the application level (example below).

      roles-app-orginal.png

      Thanks,
      Josh

      posted in General Discussion
      joshuaJ
      joshua
    • How do I query a bunch of Users and their associated data? Is it better to use the API or the UI?

      How do I query a bunch of Users and their associated data? Is it better to use the API or the UI?

      posted in Q&A
      joshuaJ
      joshua
    • RE: Support for alternative search engines

      @naughtly-keller,

      I don't disagree that there is a layer of complexity that can come with elastic depending on your configuration. If you would like, you could log a feature request to have the search libraries that you mentioned reviewed for inclusion into future iterations of FusionAuth. I took a look and they seemed very interesting; I appreciate you mentioning it.

      In the meantime, if you haven't yet, you can check out the container repo and its search section. There are some pre-configured search settings to be found there.
      https://github.com/FusionAuth/fusionauth-containers/tree/master/kubernetes/services.

      We also have a helm repo that has been very active.
      https://github.com/FusionAuth/charts

      Also, I assume you are running a container orchestration service like K8's but if you are using just docker, then you can run this command and have elastic up and running within a single docker container (related link)

      curl -o docker-compose.yml https://raw.githubusercontent.com/FusionAuth/fusionauth-containers/master/docker/fusionauth/docker-compose.yml 
      && curl -o .env https://raw.githubusercontent.com/FusionAuth/fusionauth-containers/master/docker/fusionauth/.env 
      && docker-compose up
      

      Finally, you can check out the installation guides for additional assistance and context.

      • https://fusionauth.io/docs/v1/tech/installation-guide/cluster/
      • https://fusionauth.io/docs/v1/tech/installation-guide/fusionauth-search/
      • https://fusionauth.io/docs/v1/tech/installation-guide/docker/
      • https://fusionauth.io/docs/v1/tech/installation-guide/server-layout/

      ES does give you the benefits of powerful queries that can be run from right within FusionAuth Admin UI or via the API. I have seen firsthand how this can really help you as your Monthly Active Users projects upwards and you have more data to sort and consume.

      I hope this helps!

      Thanks,
      Josh

      posted in General Discussion
      joshuaJ
      joshua
    • What is an easy way to set up a dev env after having a running production environment?

      What is an easy way to set up a dev environment by cloning a running production environment?

      posted in Q&A
      joshuaJ
      joshua
    • RE: smtp server gmail setup error

      @innospaceauto,

      There are a couple of steps that you can take to remedy this.

      The first step is to turn on the mail debug logs.

      mail.debug=true in the advanced settings on the tenant.

      The second step is to confirm that you are able to send a test email.

      Additional details can be found in our troubleshooting guide.

      https://fusionauth.io/docs/v1/tech/troubleshooting/#troubleshooting-email.

      Finally, Gmail, especially with recent security upgrades, may require you to have MFA enabled or not allow apps to access its SMTP servers unless specifically allowed.

      I was able to get a test email to send from my personal account by generating an "application password" and using SSL to send.

      https://support.google.com/accounts/answer/185833
      https://support.google.com/mail/answer/7126229?hl=en

      I hope this helps!

      Thanks,
      Josh

      posted in General Discussion
      joshuaJ
      joshua