Michele Degges

Custom data not expanded with email verification on

1

Steps to reproduce: 1. Make sure email verification is turned off for your directory, and add this init to server.js: ``` app.use(stormpath.init(app, { application: { href: 'https://api.stormpath.com/v1/applications/$APP_ID' }, expand: {...

https://docs.stormpath.com/nodejs/express/latest/social_login.html Gotta run through these examples and update them. The google console is really different now, for example, and requires an authorized origin.

Client credentials returns incorrect expires_in time

3

Making a request to my local express server's /oauth/token endpoint always returns an access token TTL of 3600, regardless of my Application's access token TTL settings. This `curl -X POST...

SAML buttons don't appear

1

After mapping a SAML directory to my Application, and spinning up the express project, no SAML buttons appear on the login page. Without creating your own button and route to...

'/verify' 404 error

1

Note: This is happening in multi-tenant scenarios where an Organization is the default account store, and has a directory/grouped mapped to it as a default account store. [According to the...

For every JSON POST that results in a 200 response, the body should be either an empty object or null instead of undefined.

Accept only application/json for /login and /register

3

To eliminate security issues in the future, we're going to make sure the /login and /register endpoints accept only application/json. In the event of CSRF attacks, CORS errors will be...

https://docs.stormpath.com/nodejs/express/latest/user_data.html#collections A couple of users have pointed out that our 'Collections' examples that use .each() are not working. For example, the two examples in this subsection throw the error: 'req.stuff.each()...

Okta branch client configuration

1

I'm having trouble creating a client with 2.0.0-okta-rc1. I wanted to add this to a GH issue in case others are having the same problem. The pom.xml file contains these...

500: Key with 'kid' of XYZ could not be found via the '/oauth2/v1/keys' endpoint

16

1. Create Native OIDC Application in Okta, and select all Allowed Grant Types. Select 'Use Client Authentication' 2. Set the login redirect URL to http://localhost:8080/client/callback 3. `git clone https://github.com/stormpath/stormpath-sdk-java.git &&...