Hey,

I am runnign fusionauth in azure app service for containers, using azure database for postgreSQL. I am using image

fusionauth/fusionauth-app:1.45.1

I want to update to newest version. So I will delete the tag from image, are there any other steps I need to perform to update to newest version?

I want to create a multi-tenant system using FusionAuth, with centralized authentication for user verification before the onboarding process. My plan is to create a default tenant where users authenticate before they create their own organization. Once authenticated, the user would create their own tenant programmatically, along with the respective application. Later, the user would log in through their organization-related application.

In this setup, I want the user, once authenticated by the centralized tenant, to be able to create their tenant. I also want to create the user in their tenant using the centralized tenant's token.

My question is: can I use external identity providers to create users and registrations in the newly created tenant using the JWT claims from the default tenant?

In /api/user we had access to the data.saluation value.

In oauth/userinfo this information is no longer available.

Where can we get this value now since we are forced to change to the new API because the old one will be sunset EOY.

BR,

Hey all -

I'm fairly new to OIDC, although I'm an experienced fullstack dev so I'm pretty technical. I'm just having trouble getting a handhold on the question below:

After I've authenticated my React application via a FusionAuth OIDC Discord IdP, how do I actually retrieve the token to access Discord API on behalf of the logged-in user (for example, to list their servers using this endpoint).

I'm having a hard time Googling etc for this info since I'm not sure I understand the right keywords to use, and searching for "api" "token" etc just returns info about the OIDC integration generally.

Does my goal here make sense and if so where should I look to start understanding it? Thank you!

Hi there -- our system needs to collect user registration data based on a user type. I've tried to create this using multiple steps in an Advanced Registration Form by putting the conditional data on say step 2. I haven't found a way to modify the flow to skip this step under the right condition. Is this possible?

This is a question from our FusionAuth slack. Source: https://fusionauth.slack.com/archives/CG00HG935/p1722965001019699

Please comment on this post if you use the docker images for

• arch linux/arm/v7 (32 bit ARM)
• linux/ppc64le (IBM Power platform)
• linux/s390x (IBM z platform)

We are considering a move to GraalVM (Java VM) which doesn’t publish their VM binary for those builds. So ideally we’d drop these images assuming nobody is using them.

So if you are depending on these images, please let us know.

Plus, if you are using them, I want to interview you to learn more :).

Dear reader,

I'm using the example react application from your github repo.
All works fine.

Now i'm trying to use my remote hosted instance of FusionAuth and updated the config with my clientId and serverUrl. I also whitelisted localhost:3000 in the admin panel.

Now when i click login, the login url is "/app/login" instead of "/oauth2/authorize".
I've added the "loginPath" to the config, which does the job.
I do wonder why a different loginUrl is generated when i change the clientId.

But now i'm getting the following error in the url:
error=invalid_request&error_reason=missing_response_type&error_description=The+request+is+missing+a+required+parameter%3A+response_type

I can't seem to find a way to add this to the configuration.

Hope you can help me out here.

Kind regards,

RIchard

When a user completes an MFA challenge, the device is tagged and 'trusted'. See this issue for more detail.

Is there any way to present to the end user a list of trusted devices so they can see what devices MFA has been completed on? This would be helpful for higher security needs (like financial apps).

What FusionAuth roles can remove an MFA method using the admin UI?

How does FusionAuth handle storage of refresh tokens for third party services where the user has authorized storage of a refresh token (for google, Facebook, etc)?