question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Determine Social Provider Login Support (Facebook, Google) with StaticWebApps & App Service

See original GitHub issue

Evaluate whether social providers include roles in their access tokens, i.e. via a role claim.

  • If role claim(s) are included:
    • Can an end user can arbitrarily add themselves to roles or is that capability limited to FB app/enterprise admins?
      • If users can arbitrarily add themselves to roles, ensure we do NOT honor those roles to determine access in DAB engine and see whether SWA/AppService passes those roles through in the EasyAuth payload.
      • If just enterprise admins can manage roles/role assignments, no issues.
        • Check whether SWA/AppService passes those roles through in the EasyAuth payload. If not, developers must manage roles through SWA Azure Function Integration.
  • No Role claims included:
    • Developers must manage roles through SWA Azure Functions (preview) Integration.

Issue Analytics

  • State:open
  • Created a year ago
  • Comments:12 (12 by maintainers)

github_iconTop GitHub Comments

1reaction
aaronpowellcommented, Jul 18, 2023

I’ve got an example of how to setup SWA + Auth0 and SWA + Okta if they would be of use.

When it boils down to it though, the SWA backends don’t know what the identity provider is, they only see the token provided.

1reaction
ayush3797commented, Oct 14, 2022

Needs discussion. Moving to Nov22.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Configure Facebook authentication - Azure App Service
This article shows how to configure Azure App Service or Azure Functions to use Facebook as an authentication provider.
Read more >
05: Securing Static Web Apps
Azure Static Web Apps has built-in support for custom authentication using: Apple, Facebook, Google, Twitter, GitHub - and AAD!
Read more >
Facebook and Google authentication in ASP.NET Core
Create an ASP.NET Core app using OAuth 2.0 with external authentication providers such as Facebook, Twitter, Google, and Microsoft.
Read more >
Facebook login as custom provider not working · Issue #967
Click on "Login" and then "Facebook" in the upper-left corner; Observe error. The Facebook app is configured according to Azure Static Web App...
Read more >
Signing in users with Facebook - Identity Platform
Go to the Identity Providers page in the Google Cloud console. · Click Add A Provider. · Select Facebook from the list. ·...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found