CODEWITHSUNDEEP
oauth-2.0fusionauth
Natan Deitch
Natan Deitch

Reputation: 612

How to create one FusionAuth application with many oauth clients with scopes

I want to have a main application where all users are registered and create many oauth clients with limited scopes to access user data.

I tried to solve this with applications, but it seems that them don't know about each other.

Is this possible with fusion auth? If so, how can I implement that.

Upvotes: 1

Views: 406

Answers (2)

mooreds
mooreds

Reputation: 4978

You can create as many applications as you want. User grants of custom OAuth scopes are not fully implemented, as mentioned in that GitHub issue.

You could work around that by creating an application for each type of access, or by using roles within an application. If you had a blog, for example, you could create an admin role, an editor role, a contributor role, and a subscriber role. You could use a lambda to assign the roles to the JWT ( see example here: https://fusionauth.io/community/forum/topic/281/implementing-a-role-based-access-system-for-authorization/2 ).

Then your application could examine roles in the JWT and provide appropriate access.

Hope that helps. Feel free to respond here or in the forum if you'd like to discuss further.

Upvotes: 0

Natan Deitch
Natan Deitch

Reputation: 612

This feature is not available yet.

Github Issue

Upvotes: 1

Related Questions