Working Notes: SEC440: Federated Identity - eliminmax/cncs-journal GitHub Wiki

Federated Identity

This lab was a bit difficult for me due to a silly mistake early on, but, once caught, was a breeze.

I documented much of the work done for this lab in the Networking: Security: Authorization: OAuth page on this wiki.

The "silly mistake" I mentioned was setting the callback URL to https://127.0.0.1:5000 instead of https://127.0.0.1:5000/callback. This resulted in a login loop that got the app locked out for sending too many requests.

When I pasted the client secret into the creds.json file, I accidentally added a space within the quote that should not have been there, which caused the server to return a 500 error.

Once I found and fixed that, which did not take too long, I then had to spin up an EC2 instance and repeat the process there, but modify the app to allow global access. When setting that up, I ran into the same issue again with the client secret in creds.json.