Client is not authorized for this domain - adobe-embed-api

We are using Adobe PDF embed api to display pfs files in our website
I have created the api key in adobe website. It displays de pdf file content but then it stops showing it
I'm getting this error on jwt authentication . I have created the right api key and the right domain but it is still not working.
{"reason":"UNAUTHORIZED_CLIENT","message":"Client is not authorized for this domain"}
I've crated different projects but it is still not working

Related

Google not showing promt to select google account

We have web application with keycloak as identity broker, google SAML app as IDP for google managed workspace for domain say mycompany.com. Integration works fine for except a case described below.
If user is logged in with only one non SAML app google account, google returns
403 Error: app_not_configured_for_user.
i.e. If I am logged as with my personal gmail acccount & not with mycompany.com account
I have inspected SAML AuthnRequest payload SAML tracer which has ForceAuthn="true" but still it does not show up account chooser page.
I went through couple of stackoverflow threads. Few provided solution about using account chooser url and redirecting it to auth page https://accounts.google.com/accountchooser?continue={theredirectURL}.
Looking at community to help suggesting clean solution.
This error pretty much depends on which account is the primary one in the Google account chooser as it always takes that to complete the sign in process automatically.
There is no official way or setting from Google to do this, however the mosto commonly used workaround is to add the following URL to the Start URL section of the SAML app settings for it to force the authentication whenever you click on it.
https://accounts.google.com/AccountChooser?continue=https://accounts.google.com/o/saml2/initsso?idpid=[REPLACE]s&spid=[REPLACE]&forceauthn=false
There are 2 parameters that you need to replace in that URL and you need to get them from the Google apps menu next to your profile picture, then hover over the SAML app that you want to change and right click on it, then copy the link address and that will show the idpid and spid values.

Directing to link within Google Workspace side panel

I am developing a Google Workspace addon for Google Drive in python. I have the deployment set up and the addon installed (it is unpublished). The deployment is set up such that when a user clicks an item it runs a function that is supposed to generate an authentication token.
Following the python quickstart for the Gmail API, I have to generate an access token before building a gmail service. Here is said article: https://developers.google.com/gmail/api/quickstart/python
When I click on my addon's icon image the homepage loads in the right-side side-panel. The problem is, after that, when a user clicks an item the side-panel loads with a text saying "Timeout receiving HTTP content."
After digging around in the logs I have discovered that the user needs to be directed to the Google Oauth consent screen ("to authorize the app go to this link") but that does not happen within the side-panel.
The code that is supposed to do this is:
flow = InstalledAppFlow.from_client_secrets_file('credentials.json', scopes)
creds = flow.run_local_server(port=0)
Is there are a way of directing the user to the link from the side-panel?
Edit: The app itself is authorized, however what I want to do is create a service object of Gmail by running:
service = build("gmail", "v1", credentials=creds)
I am doing this in a function that runs when a user clicks on a file. This is so that I can get the credentials (the variable called creds).

Post image to facebook from desktop application

I have this desktop windows app written in C#
The user can post an image to his wall from the app. I have already created the Facebook app. In the previous version the win app would upload the image to my web site then the user was directed to https://www.facebook.com/dialog/oauth/ (via Process.Start(…) that would open the default browser) with my Facebook apppid and a redirect_uri and after authentication and obtaining an access_token the post image dialog would open. It all worked fine.
However, my question is if I could do these stages without a web site of my own, directly from c#.
I have seen plenty of examples but most of them refer to aspx, php and javascript but after all this is a few http request so I think it should be possible.
I think the main problem is how to get an access_token if there is no web page that the user is directed to after login.
I have seen an example using the webbrowser control but it wasn't very clear. And also, if possible I rather that the user would login using their default browser where they are most likely already logged in to Facebook and don't need to enter user and password just for this.
Also, is it possible to upload an image to facebook directly from my app without putting it on some public url first.
Any help would be appreciated. Thanks

What happened to the Acre OAuth Console?

following official freebase facebook app tutorial, in Step 4 it mentions the Acre OAuth Console but attempting to access the url provided in the tutorial (inserting your app name and your user id where indicated)
http://<your app name>.<your user id>.user.dev.freebaseapps.com/acre/oauth
results in the error:
No Such file acre in app
Where did the OAuth Console go?
The OAuth console is now part of the application settings dialog which you can get to by clicking on the name of your app at the top left of the Acre IDE. Then, go to the Web Services tab and you can add OAuth keys as usual.
This feature is useful for any APIs that need to use a key to make API requests. All Acre apps are open source so you don't want to put those keys in the source code.

Django piston, Django.auth, and asihttprequest

I have a website that uses Django piston for the API. I have also created an iPhone app that successfully connects to the API and parses the JSON and displays the correct content on the iPhone. The API resource URLs are as follows
http:/mysite.com/api/pics
http:/mysite.com/api/pics/username
I'm currently hard coding the username into the above URL from within the iPhone app and there is no authentication at all. I would like these URLs to require the user to be authenticated.
My website allows logging in via the /accounts/login provided by Django. However, the code redirects the users to their profile on the website, so I'm assuming I can't just use this URL in an asihttprequest from the iPhone.
So, if I want to log a user in, using the Django's built in authentication system, what URL should I be pointing them to. Also, once the user is authenticated I know that I'm supposed to use "is authenticated" and "challenge" for any "protected resource" in piston. I've seen code snippets that define these functions but I'm not sure where and how to implement them. I'm used to using a decorator that just says #login_required.
if you followed the instructions at: http://yml-blog.blogspot.com/2009/10/django-piston-authentication-against.html then looking at the example applications urls.py file https://bitbucket.org/yml/django-piston/src/dfb826a31ca8/examples/blogserver/api/urls.py you will see that authentication is passed to the resource handler.
If you've done this there is no need to use a decorator :)