Determine Social Provider Login Support (Facebook, Google) with StaticWebApps & App Service
See original GitHub issueEvaluate whether social providers include roles in their access tokens, i.e. via a role
claim.
- If role claim(s) are included:
- Can an end user can arbitrarily add themselves to roles or is that capability limited to FB app/enterprise admins?
- If users can arbitrarily add themselves to roles, ensure we do NOT honor those roles to determine access in DAB engine and see whether SWA/AppService passes those roles through in the EasyAuth payload.
- If just enterprise admins can manage roles/role assignments, no issues.
- Check whether SWA/AppService passes those roles through in the EasyAuth payload. If not, developers must manage roles through SWA Azure Function Integration.
- Can an end user can arbitrarily add themselves to roles or is that capability limited to FB app/enterprise admins?
- No Role claims included:
- Developers must manage roles through SWA Azure Functions (preview) Integration.
Issue Analytics
- State:
- Created a year ago
- Comments:12 (12 by maintainers)
Top Results From Across the Web
Configure Facebook authentication - Azure App Service
This article shows how to configure Azure App Service or Azure Functions to use Facebook as an authentication provider.
Read more >05: Securing Static Web Apps
Azure Static Web Apps has built-in support for custom authentication using: Apple, Facebook, Google, Twitter, GitHub - and AAD!
Read more >Facebook and Google authentication in ASP.NET Core
Create an ASP.NET Core app using OAuth 2.0 with external authentication providers such as Facebook, Twitter, Google, and Microsoft.
Read more >Facebook login as custom provider not working · Issue #967
Click on "Login" and then "Facebook" in the upper-left corner; Observe error. The Facebook app is configured according to Azure Static Web App...
Read more >Signing in users with Facebook - Identity Platform
Go to the Identity Providers page in the Google Cloud console. · Click Add A Provider. · Select Facebook from the list. ·...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
I’ve got an example of how to setup SWA + Auth0 and SWA + Okta if they would be of use.
When it boils down to it though, the SWA backends don’t know what the identity provider is, they only see the token provided.
Needs discussion. Moving to Nov22.