FusionAuth
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    • Login
    1. Home
    2. vinicius.campitelli
    3. Posts
    V
    • Profile
    • Following 0
    • Followers 0
    • Topics 4
    • Posts 14
    • Best 2
    • Controversial 0
    • Groups 0

    Posts made by vinicius.campitelli

    • RE: In the Webhooks API, what are the "complete" events?

      Those events without the complete suffix are sent before we commit the database transaction and the ones with complete are sent after we commit the transaction.

      This means that the actual entities (user and user registration) don't actually exist when the first non-complete events are emitted.

      Take a look at our Calling FusionAuth APIs In Webhooks guide for more details.

      posted in Q&A
      V
      vinicius.campitelli
    • In the Webhooks API, what are the "complete" events?

      In the Webhooks API, I see there are similar events with a .complete suffix. What are they for?

      • user.create and user.create.complete
      • user.update and user.update.complete
      • user.delete and user.delete.complete
      • user.registration.create and user.registration.create.complete
      • user.registration.update and user.registration.update.complete
      • user.registration.delete and user.registration.delete.complete
      posted in Q&A
      V
      vinicius.campitelli
    • RE: What are the rollback options if I choose to upgrade my instance?

      The Rolling Back From a Problematic Upgrade guide will walk you through the necessary steps.

      We also recommend testing your upgrade in a non-production environment first and closely reviewing release notes to ensure you are aware of how the upgraded version of FusionAuth will interact with your integration.

      posted in Q&A
      V
      vinicius.campitelli
    • What are the rollback options if I choose to upgrade my instance?

      I'm planning on upgrading my FusionAuth instance to a newer version. What can I do if something goes wrong?

      posted in Q&A
      V
      vinicius.campitelli
    • RE: Running FusionAuth behind Apache Traffic Server (Reverse Proxy)

      Hi there!

      I don't have any experience with Apache Traffic Server to be honest but are you running your FusionAuth instance with HTTPS? If so, does Apache Traffic Server trust the FusionAuth certificate?

      I did manage to make it work locally by configuring the reverse proxy like shown on their docs and adding this mapping to the remap.config file:

      map http://fusionauth.local:8080/ http://fusionauth-fusionauth-1:9011/
      

      This will make it proxy requests to http://fusionauth-fusionauth-1:9011/ when it receives a request with Host: fusionauth.local:8080. Then, I added fusionauth.local to my /etc/hosts to point to Traffic Server.

      This was enough to reach the FusionAuth instance, but I still needed to configure some HTTP headers to make it function correctly. Using Traffic Server's header rewrite plugin, I changed the config above to:

      map http://fusionauth.local:8080/ http://fusionauth-fusionauth-1:9011/ @plugin=header_rewrite.so @pparam=fusionauth.conf
      

      And created a fusionauth.conf file with the needed headers:

      set-header X-Forwarded-Host %{CLIENT-URL:HOST}
      set-header X-Forwarded-Port %{CLIENT-URL:PORT}
      

      Please let me know if that works.

      posted in General Discussion
      V
      vinicius.campitelli
    • RE: What happens if I update a user’s email address to an existing one?

      You'll receive an error in both scenarios.

      If you are using the web interface, you'll get a red message saying "Already exists".

      forum-edit-user-email.png

      And if you are trying to use the Update User API endpoint, you'll receive a HTTP 400 Bad Request error:

      forum-edit-user-email-api.png

      posted in Q&A
      V
      vinicius.campitelli
    • What happens if I update a user’s email address to an existing one?

      Using both the UI or the API?

      posted in Q&A
      V
      vinicius.campitelli
    • RE: Do you have a sample integration for iOS and/or Android?

      Even though we don't have specific SDKs for mobile apps, we do have a Flutter quickstart which uses our Dart client library.

      If you want to develop natively, we recommend using AppAuth, which has iOS and Android SDKs and is maintained by the OpenId Foundation:

      • https://github.com/openid/AppAuth-iOS
      • https://github.com/openid/AppAuth-Android

      There's also a FusionAuth Swift Client maintained by the community.

      posted in Q&A
      V
      vinicius.campitelli
    • Do you have a sample integration for iOS and/or Android?

      It seems that there isn't an iOS and/or Android SDK for FusionAuth. Are there any code examples on how to use it on them?

      posted in Q&A
      V
      vinicius.campitelli
    • RE: Passwordless authentication populate JWT token

      Hi there!

      Please make sure that you have selected that Lambda in your Application by navigating to its edit page, going to the JWT tab and choosing it on Access Token populate lambda.

      For instance, my (extremely simple) function looks like:

      function populate(jwt, user, registration) {
        jwt.customClaim = 'gotcha';
        console.debug(JSON.stringify(user)); 
      }
      

      And I received the following access token with that customClaim at the end:

      235241bf-3086-4565-a424-a14398bdcafd-image.png

      posted in Q&A
      V
      vinicius.campitelli
    • RE: changePassword returns 401

      Hi there!

      In this scenario where you're providing the loginId instead of the changePasswordId, please use
      changePasswordByIdentity():

      await fa.changePasswordByIdentity({
        loginId: userEmail,
        password: "newPassword",
      });
      
      posted in General Discussion
      V
      vinicius.campitelli
    • RE: React SDK Example Issue

      @tiny-lamp6590 said in React SDK Example Issue:

      I think I am a bit burned out on getting this to run locally, will probably eject the whole thing and retry with a clean start with only changes to the cookie security when I have the bandwidth. Thanks again for your suggestions.

      Maybe that would be the best approach to be honest... I just cloned the repository, started the FusionAuth instance with docker compose up in that folder, installed dependencies from client and server and everything works, even with the secure: true (which I think browsers just ignore when running locally).

      I tried both Firefox Developer Edition 114 and Chrome 113 and they run fine. Which browser are you running on? Have you tried disabling extensions or going incognito?

      image.png

      posted in General Discussion
      V
      vinicius.campitelli
    • RE: localhost development cookie issue

      @jacksontrevan

      Hi there!

      Can you please elaborate?

      In the Authorization Code grant flow with PKCE:

      1. Your backend generates a code challenge and a code verifier (which should be stored in your side, either in cookies or server session)
      2. Your application takes the user to FusionAuth's /oauth2/authorize endpoint with redirect_url, code_challenge and other parameters
      3. User logs in
      4. FusionAuth redirects the user back to the provided redirect_url (your backend) with an authorization code
      5. Your backend sends a request to FusionAuth's /oauth2/token endpoint with the received authorization code and the code verifier
      6. FusionAuth compare code verifier and challenge and returns an access token
      7. You can now use that access token to call your API or other resources

      So which cookies are you trying to retrieve? In that flow, the backend would only need to store the code verifier in cookies during step 1.

      posted in Q&A
      V
      vinicius.campitelli
    • RE: React SDK Example Issue

      @tiny-lamp6590

      A few things that you can try:

      • Make sure you are running our latest SDK version by running npm list @fusionauth/react-sdk (right now, it should be 0.25.0)
      • When being redirected back after logging in to your FusionAuth instance, take a look at the address as it may contain more info in the query string (e.g. http://localhost:9000/app/callback?error=something+here&error_reason=something+here&error_description=something+here)
      • Troubleshoot server/pkce.js to check if there's anything strange with the code generation

      Please let me know if you managed to get it working and what was going on.

      posted in General Discussion
      V
      vinicius.campitelli