• Home
  • Categories
  • Recent
  • Popular
  • Pricing
  • Contact us
  • Docs
  • Login
FusionAuth
  • Home
  • Categories
  • Recent
  • Popular
  • Pricing
  • Contact us
  • Docs
  • Login
  1. Home
  2. Categories
  3. Q&A
Log in to post
Load new posts
  • Recently Replied
  • Recently Created
  • Most Posts
  • Most Votes
  • Most Views
  • J

    How do I query a bunch of Users and their associated data? Is it better to use the API or the UI?

    • 9 Apr 2021, 21:48 • joshua 9 Apr 2021, 21:52
    2
    1
    Votes
    2
    Posts
    8.7k
    Views

    J 9 Apr 2021, 21:52

    Both the API and the UI can pull User Data.

    Via API

    Docs are here:

    https://fusionauth.io/docs/v1/tech/apis/users/#search-for-users https://fusionauth.io/docs/v1/tech/apis/users/#elasticsearch-search-engine

    Via UI

    The functionality is nested under the user tab on the upper left nav.

    From there click on the advanced button. From there you can enter your query in the search bar. Note: If you want to see how the query is constructed, there is also a toggle - Show Elasticsearch Query https://fusionauth.io/docs/v1/tech/core-concepts/users/#user-search can guide you through a simple user query.
  • C

    User not yet created when user.created event fired

    • 1 Apr 2021, 12:07 • cyrill.lippuner 8 Apr 2021, 12:38
    4
    0
    Votes
    4
    Posts
    953
    Views

    D 8 Apr 2021, 12:38

    @cyrill-lippuner PR here: https://github.com/FusionAuth/fusionauth-site/pull/544

    Thanks for the feedback!

  • D

    Solved How can I get all users for an application using the API?

    user search user-api • 22 May 2020, 16:54 • dan 7 Apr 2021, 22:07
    6
    0
    Votes
    6
    Posts
    25.9k
    Views

    D 7 Apr 2021, 22:07

    How would I do this kind of search for users within a Postgresql database, I'm not using ElasticSearch.

    Sorry, you cannot.

    Unfortunately you can't search beyond fuzzy matching on the parameters listed in the database search documentation. If you have advanced search needs, we recommend running elasticsearch, which is extremely powerful and flexible.

    Here's a tutorial on switching search engines: https://fusionauth.io/docs/v1/tech/tutorials/switch-search-engines/

  • D

    Can I run kickstart manually?

    kickstart • 7 Apr 2021, 18:56 • dan 7 Apr 2021, 18:57
    2
    0
    Votes
    2
    Posts
    1.1k
    Views

    D 7 Apr 2021, 18:57

    No, Kickstart must be run on a pristine system. Please feel free to file an issue suggesting that functionality, though: https://github.com/fusionauth/fusionauth-issues/issues.

  • D

    Can I create a tenant with the API?

    tenant tenants api • 7 Apr 2021, 18:51 • dan 7 Apr 2021, 18:53
    2
    0
    Votes
    2
    Posts
    2.9k
    Views

    D 7 Apr 2021, 18:53

    Yes.

    The only thing you can't create via the API is another API key. You can track that functionality on this issue.

    See the tenant documentation for more.

  • D

    Starting with self hosting and moving to fusionauth cloud?

    cloud self hosted transition • 26 Oct 2020, 15:10 • dan 6 Apr 2021, 23:25
    3
    0
    Votes
    3
    Posts
    2.5k
    Views

    D 6 Apr 2021, 23:25

    FYI a lot more FusionAuth Cloud details are available in the cloud installation guide.

  • D

    Upgrading FusionAuth cloud installation

    cloud upgrade • 13 Jan 2021, 00:58 • dan 6 Apr 2021, 23:25
    4
    0
    Votes
    4
    Posts
    3.2k
    Views

    D 6 Apr 2021, 23:25

    FYI a lot more FusionAuth Cloud details are available in the cloud installation guide.

  • B

    Duplicate email verification emails being sent, and forgot password 401

    • 2 Apr 2021, 05:12 • bmatthews 6 Apr 2021, 22:54
    5
    0
    Votes
    5
    Posts
    2.1k
    Views

    D 6 Apr 2021, 22:54

    Darn API key permissions!!

    shaking-fist.png

  • D

    How can I cancel my fusionauth cloud instance?

    • 5 Apr 2021, 15:40 • dan 5 Apr 2021, 15:40
    2
    0
    Votes
    2
    Posts
    455
    Views

    D 5 Apr 2021, 15:40

    Thanks for trying out FusionAuth. The account management is mostly self service. If you log into your FusionAuth account you will find your deployment under the Deployments section.

    https://account.fusionauth.io/

    You should see an action on the deployment table to Destroy the deployment. This action will delete your FusionAuth Cloud instance and pro-rate a refund back to credit card.

  • J

    Is there any way to search for registrations based off of username (or registration data)?

    • 1 Apr 2021, 18:28 • joshua 1 Apr 2021, 18:29
    2
    0
    Votes
    2
    Posts
    459
    Views

    J 1 Apr 2021, 18:29

    If you are using Elasticsearch yes..

    If you want to search for a username in a particular registration (for a particular application)

    { "bool" : { "must" : [ { "bool" : { "must" : [ { "nested" : { "path" : "registrations", "query" : { "bool" : { "must" : [ { "match" : { "registrations.applicationId" : "3c219e58-ed0e-4b18-ad48-f4f92793ae32" } }, { "match" : { "registrations.username" : "bob" } } ] } } } } ] } } ] } }

    Where the value for registrations.applicationId is the Id of your application and the username you are looking for is bob.

    If you only wanted to search for a user with a username of bob you could just search on registrations.username:bob - but this would not limit the search to any particular application registration.

  • C

    Start FusionAuth from docker in productive mode fails

    • 19 Jan 2021, 12:23 • cyrill.lippuner 1 Apr 2021, 12:09
    3
    0
    Votes
    3
    Posts
    1.1k
    Views

    C 1 Apr 2021, 12:09

    Yeah, that was it... I guess it was already late 😉

  • J

    Can anyone see why this code locks a user opposed to actually deleting the user? Version 1.20.0

    • 31 Mar 2021, 21:37 • joshua 31 Mar 2021, 21:39
    2
    0
    Votes
    2
    Posts
    397
    Views

    J 31 Mar 2021, 21:39

    Two issues with the code snippet that are worth exploring:

    hardDelete is supposed to be a query param

    Delete requests should not have body in the request.

    Find out more in the documentation for the User API

  • D

    Refresh token

    refresh token oauth • 30 Mar 2021, 20:11 • dan 30 Mar 2021, 20:16
    2
    0
    Votes
    2
    Posts
    3.3k
    Views

    D 30 Mar 2021, 20:16

    the difference between a JWT/access token and a refresh token is that a refresh token can be revoked. Every time you present it to the Identity Provider/OAuth server, the OAuth server can check to see if the user has been banned, signed out or otherwise invalidated that token. (You can revoke a JWT, but it's a pain, typically.)

    A refresh token is an engineering tradeoff. Without refresh tokens, you would have two unappetizing alternatives:

    an access token that lived for a long time. In this case, if the access token is stolen, the attacker has a lot of time to access systems (or you need to have some kind of access token revocation strategy, which degrades the value of stateless access tokens). requiring the user to sign in every time the token expires. That gets old if the lifetime of the access token is minutes or hours. I even get annoyed every time Google asks me to re-sign into gmail, which only happens every week or two.

    The spec requires a client to explicitly request a refresh token. With FusionAuth you have to request the offline_access scope (which is common for other auth providers, but I wasn't able to find it in the RFC), so it's a way to offer more flexibility.

  • L

    Is it possible to restrict admin permissions to specific tenants?

    • 30 Mar 2021, 17:02 • lucas.loreggia 30 Mar 2021, 19:34
    2
    0
    Votes
    2
    Posts
    497
    Views

    J 30 Mar 2021, 19:34

    Hi @lucas-loreggia,

    Unfortunately, this is not yet an option within FusionAuth but there is an open issue! See current discussion under issue 91. Please note, that the issue does document a workaround, using the API.

    I should also point out, while not specifically the use case you are asking for here, we do have the ability to form roles, as mentioned at the bottom of the issues post.

    I hope this helps!
    Josh

  • D

    I want to pass the locale and timezone info to apps via a JWT

    jwt timezone locale • 8 Jul 2020, 18:18 • dan 30 Mar 2021, 15:08
    3
    0
    Votes
    3
    Posts
    4.7k
    Views

    D 30 Mar 2021, 15:08

    There's additional localization and internationalization doc that was written recently here: https://fusionauth.io/docs/v1/tech/core-concepts/localization-and-internationalization/

  • D

    How do I add a locale to FusionAuth?

    locale customization i18n l10n • 28 Jan 2021, 20:15 • dan 30 Mar 2021, 15:08
    3
    0
    Votes
    3
    Posts
    1.5k
    Views

    D 30 Mar 2021, 15:08

    There's additional localization and internationalization doc that was written recently here: https://fusionauth.io/docs/v1/tech/core-concepts/localization-and-internationalization/

  • C

    How do I change the localisation / timezone for the FusionAuth UI?

    • 8 Jan 2021, 17:07 • chris.smith 30 Mar 2021, 15:08
    4
    0
    Votes
    4
    Posts
    9.2k
    Views

    D 30 Mar 2021, 15:08

    There's additional localization and internationalization doc that was written recently here: https://fusionauth.io/docs/v1/tech/core-concepts/localization-and-internationalization/

  • D

    NestJS and FusionAuth

    nestjs passportjs • 29 Mar 2021, 13:41 • dan 30 Mar 2021, 03:01
    4
    0
    Votes
    4
    Posts
    2.8k
    Views

    D 30 Mar 2021, 03:01

    Huh, yeah, that is weird. Not sure why there isn't a solid OIDC implementation for passportjs.

    You could use the FusionAuth typescript client. It's open source; here's the github repo.

    FusionAuth should be OIDC compliant so any NestJS example application that works with OIDC should be fine. Here are some posts to review:

    https://sdoxsee.github.io/blog/2020/02/05/cats-nest-nestjs-mongo-oidc.html#add-oidcstrategy https://github.com/Finastra/finastra-nodejs-libs/tree/develop/libs/oidc https://github.com/panva/node-oidc-provider (a node OIDC provider)

    As for why you might want to avoid okta, I would just advise looking at the pricing page before committing. 🙂

  • J

    Issue with FA 1.25 Database Connections

    • 24 Mar 2021, 21:42 • john.mooney 29 Mar 2021, 22:27
    2
    0
    Votes
    2
    Posts
    593
    Views

    J 29 Mar 2021, 22:27

    Hi @john-mooney!

    My experience is limited in regards to an Azure cloud deployment, but I will try and assist as best able. I do have a few questions to ask to better understand your issue.

    Do you happen to have any other logs which are outputting errors? If you had full logs of the database, app service, or anything else pertinent, that might be helpful in debugging. Do the logs show that all of your database connections are queued? There is a db connection pool that should be available, but if every connection is queued up/waiting, that might be telling. Does this happen only during certain times of the day and not others? At specified intervals? Under high demand/peak demand? How many active and total users do you have on this system? How many active and total tenants do you have on this system? How are you connected to your database? Azure lists a few different ways to configure a PostgreSQL server (server, flexible, hyper-scale). Additional details about your configuration could prove useful. Any other pertinent details about your network configuration and architecture could prove useful here. Are you setting any FusionAuth environment variables, if so which ones?

    Thanks,
    Josh

  • J

    My Database (sql, rds, postgres) is filling up. Any pointers on how to address this?

    • 26 Mar 2021, 18:32 • joshua 26 Mar 2021, 18:32
    2
    1
    Votes
    2
    Posts
    7.6k
    Views

    J 26 Mar 2021, 18:32

    There are a number of things that might be causing this.

    One thing to check is to see how many logs, debug, and other records your installation is holding on to. This can be reviewed by clicking under Setting -> System

    I have attached a screenshot for your review.

    logsettings2.png
    logsettings.png

    Finally, it might be useful to review your system architecture to ensure it is sized appropriately for the number of users you are hosting.

    I hope this helps!

    Thanks,
    Josh