Posts made by raomuneeb.khalil

@dan Done.
https://github.com/FusionAuth/fusionauth-issues/issues/1732

@dan Thanks for your reply. I have tested the case after disabling Allow implicit verification option along with setting skipVerification field as true but still FusionAuth marking the email as verified.

BTW, I did not receive the email of your reply as there is a typo in the name you mentioned (should be . in place of -).

Hello,

Hope you all are doing well. I was looking for functionality in which a user gets signed up using create user and registration (combined) API but verification email should not trigger. I have already come across with skipVerification field but setting this field also marks the email as verified. What I want is the user gets signed up, email should not trigger at that time and later user would verify his/her email via some other flow using FusionAuth resend verification email and verify user email APIs. So, can such flow be implemented using FusionAuth?

Thanks for your time.

@dan @joshua Could you guys please guide me in this regard? I have ensured that the token type is string and perform curl with POST method as well and the token is getting verified by google api but unfortunately not with fusion auth

curl --data '{"access_token":"ya29.A0ARrdaM8zef7x.....lVZKeAKG5fs-a94yDvDaCVuT"}' -H "Content-Type: application/json" -X POST https://www.googleapis.com/oauth2/v3/tokeninfo
{
  "azp": "939548483275-vnakrrcv6c7t2fmdcji8nbcom6dn52or.apps.googleusercontent.com",
  "aud": "939548483275-vnakrrcv6c7t2fmdcji8nbcom6dn52or.apps.googleusercontent.com",
  "sub": "116524708611814561365",
  "scope": "https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile openid",
  "exp": "1646330995",
  "expires_in": "3268",
  "email": "xxxx@gmail.com",
  "email_verified": "true",
  "access_type": "online"
}

curl --data "access_token=ya29.A0ARrdaM8zef7xo6ucwQxbgJVQQSsvUjD......5fs-a94yDvDaCVuT" -X POST https://www.googleapis.com/oauth2/v3/tokeninfo
{
  "azp": "939548483275-vnakrrcv6c7t2fmdcji8nbcom6dn52or.apps.googleusercontent.com",
  "aud": "939548483275-vnakrrcv6c7t2fmdcji8nbcom6dn52or.apps.googleusercontent.com",
  "sub": "116524708611814561365",
  "scope": "https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile openid",
  "exp": "1646330995",
  "expires_in": "3348",
  "email": "xxxxx@gmail.com",
  "email_verified": "true",
  "access_type": "online"
}

Hi @joshua, hope you are doing well. I am calling the same API from my NestJS project and getting the somehow same error.

code: [ExternalAuthenticationException]GoogleTokenInfo
message: A request to the Google Token Info API has failed. Unable to complete this login request.

And from the Fusion Auth debug log,

Request to the [https://www.googleapis.com/oauth2/v3/tokeninfo] endpoint failed. Status code [400].

Error response is 
{
  "error_description" : "Invalid Value"
}

But if I curl the token received from the google, it shows me the correct response,

curl "https://www.googleapis.com/oauth2/v3/tokeninfo?access_token=ya29.A0ARrdaM-mIQDJ645tNQv5ifTZ7QxfhTNK_gE4pYsukhoU_EVt7ejSjW6H22fYW5ICgx89IXXXXXXXXXXXXXXXXXXXWBhUUhclMJx2p3xcpekxKjs1B2"


{
  "azp": "939548483275-vnakrrcv6c7t2fmdcji8nbcom6dn52or.apps.googleusercontent.com",
  "aud": "939548483275-vnakrrcv6c7t2fmdcji8nbcom6dn52or.apps.googleusercontent.com",
  "sub": "116524708611814561365",
  "scope": "https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile openid",
  "exp": "1646312085",
  "expires_in": "3425",
  "email": "xxxxxx@gmail.com",
  "email_verified": "true",
  "access_type": "online"
}

From NestJS I called that request as follows,

const response = await this.fusionClient.identityProviderLogin({
        applicationId: "XXXXXX",
        data: {
          token: req.user.accessToken,
        },
        identityProviderId: "82339786-3dff-42a6-aac6-1f1ceecb6c46",
      });

Could you please put some light on it?
Thanks.