I was able to recreate the "too many redirects" issue on my end. I received a couple of errors that I was able to resolve and get the app working.

The first error was this: Unable to convert claim 'iss' of type 'class java.lang.String' to URL.

To fix this I made sure the issuer value on the Tenant level was a full URL (e.g. https://fusionauth.io instead of fusionauth.io).

The next error I ran into after that was this: Missing attribute 'name' in attributes.

To fix this one I just needed to make sure the user had a Full Name value on their profile. The default OIDC integration requires that.

I'm sorry, but I cannot see the docker-compose file you are referring to. Please provide me with the docker-compose file so that I can review it and provide you with any assistance you may need to deploy the FusionAuth Docker image on Azure App Service.
@rafal-glebocki said in Fusionauth on azure app service for containers:

Hey,

I want to deploy fusionauth docker image on azure app service. I have adjusted slightly the docker-compose file and I'm using external postgresql server.
Here is a docker-compose I'm deploying.

FusionAuth does use open source components, including mybatis and prime mvc.

The licenses for all components are available as part of the zipfile. To see them, download the zip file.

When you unzip it, there’s a directory called 3rd-party-licenses. This will be present in every zipfile.

Here's the output from the 1.45.1 zip file:

/org/postgresql/postgresql/42.5.1/license-BSD-2-Clause.txt ./org/checkerframework/checker-qual/3.5.0/license-MIT.txt ./org/jboss/spec/javax/interceptor/jboss-interceptors-api_1.1_spec/1.0.0+Beta1/license-LGPL-2.1-only.txt ./org/mybatis/mybatis/3.5.7/license-Apache-2.0.txt ./org/mybatis/mybatis-guice/3.16.0/license-Apache-2.0.txt ./org/slf4j/jcl-over-slf4j/2.0.0-alpha5/license-MIT.txt ./org/slf4j/slf4j-api/2.0.3/license-MIT.txt ./org/testng/testng/7.7.1/license-Apache-2.0.txt ./org/ow2/asm/asm/9.2.0/license-BSD_3_Clause.txt ./org/ow2/asm/asm-util/7.3.1/license-BSD_3_Clause.txt ./org/ow2/asm/asm-tree/7.3.1/license-BSD_3_Clause.txt ./org/ow2/asm/asm-analysis/7.3.1/license-BSD_3_Clause.txt ./org/ow2/asm/asm-commons/7.3.1/license-BSD_3_Clause.txt ./org/freemarker/freemarker/2.3.30/license-Apache-2.0.txt ./org/osgi/org.osgi.core/4.3.0/license-Apache-2.0.txt ./org/lz4/lz4-java/1.7.1/license-Apache-2.0.txt ./org/graalvm/js/js/22.3.1/license-MIT.txt ./org/graalvm/js/js/22.3.1/license-UPL-1.0.txt ./org/graalvm/regex/regex/22.3.1/license-UPL-1.0.txt ./org/graalvm/truffle/truffle-api/22.3.1/license-UPL-1.0.txt ./org/graalvm/sdk/graal-sdk/22.3.1/license-UPL-1.0.txt ./org/glassfish/jaxb/txw2/3.0.2/license-Other.txt ./org/glassfish/jaxb/jaxb-core/3.0.2/license-Other.txt ./org/glassfish/jaxb/jaxb-runtime/3.0.2/license-Other.txt ./org/savantbuild/savant-version/2.0.0-RC.4/license-Apache-2.0.txt ./org/openjdk/nashorn/nashorn-core/15.3.0/license-GPL-2.0-only.txt ./org/xerial/snappy/snappy-java/1.1.8+1/license-Apache-2.0.txt ./org/jsoup/jsoup/1.15.3/license-Other.txt ./org/inversoft/prime/prime.js/1.6.4/license-Apache-2.0.txt ./org/primeframework/prime-email/0.20.0/license-Apache-2.0.txt ./org/primeframework/prime-mvc/4.7.1/license-Apache-2.0.txt ./org/aopalliance/aopalliance/1.0.0/license-NIST-PD.txt ./org/elasticsearch/client/elasticsearch-rest-client/7.17.7/license-Apache-2.0.txt ./org/elasticsearch/client/elasticsearch-rest-client-sniffer/7.17.7/license-Apache-2.0.txt ./org/apache/httpcomponents/httpcore/4.4.15/license-Apache-2.0.txt ./org/apache/httpcomponents/httpclient/4.5.13/license-Apache-2.0.txt ./org/apache/httpcomponents/httpcore-nio/4.4.15/license-Apache-2.0.txt ./org/apache/httpcomponents/httpasyncclient/4.1.5/license-Apache-2.0.txt ./org/apache/commons/commons-codec/1.15.0/license-Apache-2.0.txt ./org/apache/commons/commons-logging/1.2.0/license-Apache-2.0.txt ./org/apache/commons/commons-csv/1.8.0/license-Apache-2.0.txt ./org/apache/directory/apacheds-embedded/1.0.0/license-Apache-2.0.txt ./org/apache/kafka/kafka-clients/2.8.2/license-Apache-2.0.txt ./org/webjars/jquery/3.6.1/license-Other.txt ./ch/qos/logback/logback-classic/1.4.4/license-LGPL-2.1.txt ./ch/qos/logback/logback-classic/1.4.4/license-EPL-1.0.txt ./ch/qos/logback/logback-core/1.4.4/license-LGPL-2.1.txt ./ch/qos/logback/logback-core/1.4.4/license-EPL-1.0.txt ./io/ipinfo/db/0.0.1/license-Commercial.txt ./io/prometheus/simpleclient/0.10.0/license-Apache-2.0.txt ./io/prometheus/simpleclient_dropwizard/0.10.0/license-Apache-2.0.txt ./io/prometheus/simpleclient_common/0.10.0/license-Apache-2.0.txt ./io/dropwizard/metrics/metrics-healthchecks/3.2.6/license-Apache-2.0.txt ./io/dropwizard/metrics/metrics-jvm/3.1.2/license-Apache-2.0.txt ./io/dropwizard/metrics/metrics-core/3.2.6/license-Apache-2.0.txt ./io/fusionauth/fusionauth-style/0.3.55/license-Apache-2.0.txt ./io/fusionauth/fusionauth-jwt/5.1.2/license-Apache-2.0.txt ./io/fusionauth/java-http/0.1.13/license-Apache-2.0.txt ./io/fusionauth/fusionauth-scim/2.2.0/license-Apache-2.0.txt ./io/fusionauth/fusionauth-2fa/2.1.0/license-Apache-2.0.txt ./io/fusionauth/fusionauth-plugin-api/1.45.1/license-Apache-2.0.txt ./io/fusionauth/fusionauth-samlv2/0.8.6/license-Apache-2.0.txt ./jakarta/transaction/jakarta.transaction-api/1.3.2/license-Apache-2.0.txt ./jakarta/inject/jakarta.inject-api/1.0.5/license-Apache-2.0.txt ./jakarta/mail/jakarta.mail-api/2.0.1/license-Other.txt ./jakarta/annotation/jakarta.annotation-api/1.3.5/license-Apache-2.0.txt ./jakarta/xml/bind/jakarta.xml.bind-api/3.0.1/license-Other.txt ./jakarta/ejb/jakarta.ejb-api/3.2.6/license-Apache-2.0.txt ./javax/enterprise/cdi-api/1.0.0-SP4/license-Apache-2.0.txt ./javax/inject/javax.inject/1.0.0/license-Apache-2.0.txt ./javax/annotation/jsr250-api/1.0.0/license-Apache-2.0.txt ./com/sun/mail/jakarta.mail/2.0.1/license-Other.txt ./com/sun/activation/jakarta.activation/2.0.1/license-Other.txt ./com/sun/istack/istack-commons-runtime/4.0.1/license-Other.txt ./com/google/guava/guava/30.1.0-jre/license-Apache-2.0.txt ./com/google/guava/failureaccess/1.0.1/license-Apache-2.0.txt ./com/google/guava/listenablefuture/9999.0.0-empty-to-avoid-conflict-with-guava/license-Apache-2.0.txt ./com/google/inject/guice/5.1.0/license-Apache-2.0.txt ./com/google/code/findbugs/jsr305/3.0.2/license-Apache-2.0.txt ./com/google/j2objc/j2objc-annotations/1.3.0/license-Apache-2.0.txt ./com/google/protobuf/protobuf-java/3.11.4/license-BSD_3_Clause.txt ./com/maxmind/db/maxmind-db/2.0.0/license-Apache-2.0.txt ./com/ibm/icu/icu4j/71.1.0/license-ICU.txt ./com/github/spotbugs/spotbugs-annotations/4.4.2/license-LGPL-2.1-only.txt ./com/github/luben/zstd-jni/1.4.9-1/license-BSD-2-Clause.txt ./com/github/java-json-tools/msg-simple/1.2.0/license-Apache-2.0.txt ./com/github/java-json-tools/jackson-coreutils/2.0.0/license-Apache-2.0.txt ./com/github/java-json-tools/btf/1.3.0/license-Apache-2.0.txt ./com/github/java-json-tools/json-patch/1.13.0/license-Apache-2.0.txt ./com/beust/jcommander/1.82.0/license-Apache-2.0.txt ./com/inversoft/jackson5/3.0.1/license-Apache-2.0.txt ./com/inversoft/inversoft-domain/0.4.0/license-Commercial.txt ./com/inversoft/inversoft-api-authentication/0.25.0/license-Commercial.txt ./com/inversoft/inversoft-executor/0.2.1/license-Commercial.txt ./com/inversoft/inversoft-support/0.13.1/license-Commercial.txt ./com/inversoft/inversoft-maintenance-mode/0.20.3/license-Commercial.txt ./com/inversoft/java-error/2.2.3/license-Apache-2.0.txt ./com/inversoft/inversoft-freemarker/0.2.1/license-Commercial.txt ./com/inversoft/inversoft-scripts/0.1.10/license-Commercial.txt ./com/inversoft/inversoft-scheduler/0.2.4/license-Commercial.txt ./com/inversoft/inversoft-cache/0.5.2/license-Commercial.txt ./com/inversoft/inversoft-tools/0.30.5/license-Commercial.txt ./com/inversoft/inversoft-search-engine/5.1.1/license-Commercial.txt ./com/inversoft/inversoft-validator/0.4.11/license-Commercial.txt ./com/inversoft/inversoft-metrics/0.2.3/license-Commercial.txt ./com/inversoft/restify/4.2.0/license-Apache-2.0.txt ./com/inversoft/inversoft-migrator/0.2.1/license-Commercial.txt ./com/inversoft/inversoft-config/0.9.6/license-Commercial.txt ./com/inversoft/inversoft-database/0.9.1/license-Commercial.txt ./com/inversoft/inversoft-license/4.2.0/license-Commercial.txt ./com/zaxxer/HikariCP/5.0.1/license-Apache-2.0.txt ./com/googlecode/libphonenumber/libphonenumber/8.5.1/license-Apache-2.0.txt ./com/fasterxml/jackson/core/jackson-databind/2.14.0/license-Apache-2.0.txt ./com/fasterxml/jackson/core/jackson-core/2.14.0/license-Apache-2.0.txt ./com/fasterxml/jackson/core/jackson-annotations/2.14.0/license-Apache-2.0.txt ./com/fasterxml/jackson/dataformat/jackson-dataformat-cbor/2.14.0/license-Apache-2.0.txt

As always, please review the FusionAuth license and the license FAQ for more details about commercial use of FusionAuth.

@simo-adonis , another team member took a look at this forum post and tested against an instance in our cloud. He saw case-insensitive matching of username and password.

Can you please provide more details about the behavior you are seeing?

version of FusionAuth backing database (mysql or postgresql) how you are adding users an example of a username or email address that doesn't work in a case insensitive manner

Thanks so much!

@le-nnyburkdoll

This guide might be helpful to you: https://fusionauth.io/docs/v1/tech/guides/user-search-with-elasticsearch

Thanks,
Dan

@bryan

Thanks for using FusionAuth!

I think this GitHub issue might be related to what you see: https://github.com/FusionAuth/fusionauth-issues/issues/2233

Please take a look and let us know.

Dan

@ismail

Thanks for using FusionAuth!

I don't have any experience with SvelteKit, but this new NextJS quickstart might be of interest to you:

https://fusionauth.io/blog/2023/04/26/nextjs-single-sign-on

Dan

@twilkinson

Thanks for using FusionAuth!

Did you get this sorted out?

Dan

@mattcrox

Thanks for using FusionAuth!

1.32.1 is pretty old version (released in Dec 2021). Do you run into the same issue with more recent versions?

@rafal-glebocki
I'm working through the same issue. I've setup an Application Gateway but it doesn't appear to be working. Would you share your configuration?

@vinhdat82

You can definitely use FusionAuth as an OpenID Connect provider. The callback is https://your.fusionauth.server/oauth2/callback

We only support front channel logout.

Can you share more details about the application you are trying to use FusionAuth for? What is the framework, etc?

That might help me direct you to some better documentation.

@heitordanilo2003

Welcome to the FusionAuth community!

It isn't possible to create new tables inside FusionAuth. However, you have a few options within the current supported extension points.

You can correlate between two different databases, as you currently are. You can use the user.data and user.registration.data fields. These are arbitrary JSON objects and you can define your own schema inside them. They are searchable. You can use Entity Management. Entity Management lets you define your own entities (which also have data fields) and relationships between users and entities. This is paid functionality that requires a license key.

Hope that helps.
Dan

@jvadaliya FusionAuth enforces MFA for users at the tenant or application level, but not the specific user.

You can file a feature request here: https://github.com/fusionauth/fusionauth-issues/issues

You can also make an API call in your application after the user has logged in to force MFA for only certain users; this is called step up auth: https://fusionauth.io/docs/v1/tech/guides/multi-factor-authentication#step-up-auth

Hope this helps.

@dan
I faced similar kind of issue last time, I am still searching for some proper solution.

@joey-zhang

I'm not sure what you mean? Can you please explain further?

@ryan-2 Hmmm.

I searched our GH issues list: https://github.com/fusionauth/fusionauth-issues/issues and didn't see that as an issue. I also reviewed our import API doc and didn't see it either.

Can you please share more details, including the version of FusionAuth you were using and repro steps? That would be be helpful in characterizing this issue in more detail.

@dan figured out a workaround based of the auth0 documentation.

I have added a new route in our API gateway as the callback url in fusionauth. This is the RelayState (or redirect_uri with the acs) that we are providing for our IdP providers.

The route for example is now:

/signin-saml-oidc?code=j6rOnUBViLU1kR5UA2eKK_UTzc-cO2auei53TJU9X8g&locale=en_US&userState=Authenticated

Which we just issue a ChallengeAsync which then redirects back to fusionauth and then redirects back to signin-oidc with the code and state parameter.

await this.HttpContext.ChallengeAsync()

Obviously this isn't ideal & add's another redirect in the flow, but it works as the user is authenticated in FusionAuth & our gateway is triggered the challenge (so generating the state)

FusionAuth Version: 1.44.0

@hazelmarissa1 Since you are using cleanspeak, I'd suggest filing a support ticket if you are having issues.

Log into your Cleanspeak account from here: https://account.cleanspeak.com/ and you should have options to file a ticket.

This forum is for FusionAuth users, so you probably won't get much help here. 🙂

Nope.

FusionAuth pays for an organization and the FusionAuth dockerhub images will remain freely available.

We have started to document API gateway integrations with FusionAuth here: https://fusionauth.io/docs/v1/tech/developer-guide/api-gateways/