Hiya,

I think the best path forward would be for you to use the populate JWT lambda.

In that you can examine the user, their registrations to various FusionAuth applications, and modify the delivered JWT. So you could iterate the registrations and build a JWT claim called supportedApps with a list of your apps. You'd have to keep all the lambdas in sync across every application, but luckily you can do so with the FusionAuth API.

Then in any APIs your SPA or native apps call, they can look at the supportedApps claim. If the API supports that company, it can respond.

I'm not sure exactly why you are separating these companies out as FusionAuth applications if one login gets you access to all of them, though. You could map this within one application using roles too, which is a different set of tradeoffs.

@infosec welcome to the FusionAuth community!

This seems like a bug in our rpms. Can you please file a bug here: https://github.com/fusionauth/fusionauth-issues/issues

Feel free to reference this forum post.

Thanks so much!

Since both APIs are technically the same, is there a way to use the email template defined for the Setup Password with the Forgot Password API?

Yes. Navigate to 'Tenants -> your tenant -> Email' and you can set 'Setup password' and 'Forgot password' to be the same template.

There may be template variable differences, please consult the documentation and ensure you are checking for existence before you rely on them:

https://fusionauth.io/docs/v1/tech/email-templates/email-templates/#setup-password

https://fusionauth.io/docs/v1/tech/email-templates/email-templates/#change-password

It is an ever changing list, but the easiest way to see it is to go to the FusionAuth pricing calculator and select the region to see what countries are currently supported.

If you would like us to support a country not currently on that list, please contact us with more details.

Peering is not an option at the moment. If you have a use case for this, please file a GitHub issue with more details about how you'd like to see the feature implemented.

Another option is to self host and run FusionAuth within your cloud network infrastructure. If you'd like to do that and still have help from the FusionAuth team, consider a plan with a support contract.

We support deploying to Bahrain. Not sure if you are looking for best latency, but that deployment would be the closest geographically.

Welcome to the FusionAuth community @matt-0 !

Hmmm.

search.servers=https://user:pass@es.fusionauth.io

works for me. (But I'm running both ES and FA locally.)

Is https://username:password@awssearchurl.com the real value in your system, or did you swap it out?

Also, what version of java are you running?

Yes, they are equivalent. Building this JSON:

{ "search": { "queryString": "fusionauth.io" } }

and posting it is equivalent to a GET with queryString=fusionauth.io.

We have a license FAQ.

If course, if your questions aren't answered there, please feel free to send us an email.

Looking at https://github.com/FusionAuth/fusionauth-java-client/blob/master/src/main/java/io/fusionauth/client/FusionAuthClient.java#L3256

It appears there is no way to search using the Java client that uses a GET, only a POST. However, you can still provide the queryString in the JSON and it will be equivalent to the GET request.

Building this JSON:

{ "search": { "queryString": "fusionauth.io" } }

Is equivalent to queryString=fusionauth.io.

Hope that helps.

Try clicking on the Advanced section on the User Search page and see you find what you're looking for.

Or search like this tenantId:9d92ca33-bc7b-4d13-acd7-f7dc06038396 where 9d92ca33-bc7b-4d13-acd7-f7dc06038396 is your tenantId.

Please note that this is an example for the elastic search search engine. With the database search engine, you can only search for the fields as documented in the API. As of this post, those are:

firstName lastName fullName email username

There is no easy way to do this. You'd have to migrate your configuration, your users and your DNS (if you are standing up a separate system).

If you have all your configuration as scripts, that should be easy to migrate, otherwise you need to move things over manually.

You could probably script a retrieve and then add of all the configuration, but there is no 'export all configuration' option.

For your users, you could do a database dump to get the hashes and do a bulk import. Or if you have developer edition you could set up a slow migration using connectors. The user migration process is broadly documented here: https://fusionauth.io/docs/v1/tech/guides/migration/

DNS migration is like any other DNS migration.

Hiya @hd_steve !

You can change the user's locale and the date format should change in the FusionAuth administrative user interface. More details here: https://fusionauth.io/community/forum/topic/718/how-do-i-change-the-localisation-timezone-for-the-fusionauth-ui?_=1614788141466

Let me know if that answers your question, please.

Thanks,
Dan

hi @stuart-auld

Can you please share more of your configuration? How is the user action configured?

This may be a documentation issue or a bug, but I'd love to learn more.

Thanks,
Dan

Please see this issue for updates on this functionality. Vote for it if this is important to you.

Reconcile is a way of make sure that a user account exists and has the correct data. The remote system is treated as the system of record, but we want a record in our local system as well.

It is a two phase process:

If the user doesn’t exist in FusionAuth (i.e. the OAuth server), they are created The data from Facebook (or any third party system) is merged with the data in FusionAuth and the user is updated

Step 1 is optional and configurable in FusionAuth. We call it Create Registration in the application configuration. If the user already exists, then step 1 is skipped.

@stuart-auld welcome to the FusionAuth community!

There is no within FusionAuth to modify a webhook body.

This may be a feature of interest to the community; I'd encourage you to file a feature request with more details, but we could possibly run a lambda run every time a webhook runs to transform the webhook output. (There's probably scope for adding lambdas in lots of places; here's another one.)

Until that happens, however, you can send the webhook to a process running on a server or using something like google cloud functions or AWS lambda to transform the webhook output.