So I’m making a project in SpringBoot with Oauth security.

If I use Auth0 as my Authorization Server, I can register an application there and just say that I want user to be able to login with Google an Facebook. That’s all it takes.

If I use Keycloak as my Authorization Server, I can also have users choose Google or Facebook as there prefered login, but in order to provide that, I have to register my app with Google and Facebook first.

So how come it’s so easy with Auth0 and a little less easy with Keycloak? Is it a contract thing, does Auth0 have contracts with all these providers or something?

  • carleeno@reddthat.com
    12·
    2 months ago

    It’s because you’re using the dev environment which uses Auth0’s own keys. You’ll still have to jump through all of those same hoops when you set up a staging or prod environment.

    • lemmyvore@feddit.nlEnglish
      5·
      2 months ago

      Seconded. There’s no way to do OAuth with Google or Facebook without registering your app with them. The only reason it works with Auth0 is because they’re supplying the app for you, but only during development.