FusionAuth
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    • Login

    How to get an access_token for an entity on behalf of a logged user?

    Scheduled Pinned Locked Moved
    General Discussion
    0
    3
    298
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      thiago.benvenuto
      last edited by

      Hi everyone.

      I read all the documentation available and I couldn't figure it out one thing related to entities.

      How do I issue an access_token for a given user that was granted permission to an entity?

      I know I can use client_credentials to issue an entity to entity access_token.

      I tried adding the same type of scope the client_credentials uses like "target-entity:{id}:{permissions}" to the authorize code flow but it doesn't return in the access_token the expected permissions.

      Can somebody point me to a solution to this question?{

      Best,
      Thiago Benvenuto

      1 Reply Last reply Reply Quote 0
      • joshuaJ
        joshua
        last edited by

        @thiago-benvenuto,

        My colleagues and I reviewed this and we do believe this is a current limitation. I will post additional details momentarily.

        Thanks,
        Josh

        1 Reply Last reply Reply Quote 0
        • joshuaJ
          joshua
          last edited by

          @thiago-benvenuto

          Additional details can be found here

          https://fusionauth.io/community/forum/topic/1118/can-i-get-permissions-granted-to-a-user-against-an-entity-in-an-oauth-grant

          I have filed an issue below. Feel free to expand or add your own comments as needed.

          https://github.com/FusionAuth/fusionauth-issues/issues/1295

          Thanks,
          Josh

          1 Reply Last reply Reply Quote 0
          • First post
            Last post