Kinde

K

Kinde

Join the community to ask questions about Kinde and get answers from other members.

Join

Not receiving the accessToken

Hello, when using const{ getAccessToken } = getKindeServerSession() and trying to get the accessToken I get any other thing beside a string with the token ( result attached). Please help. aud: [], azp: '', billing: {...

Use of history.pushState in createKindeClient.ts

https://github.dev/kinde-oss/kinde-auth-pkce-js/blob/main/src/createKindeClient.ts handleRedirectToApp(...) calls window.history.pushState({}, '', url); on line 258. Is there any chance that this could be changed to https://developer.mozilla.org/en-US/docs/Web/API/History/replaceState? The use of pushState(...) means that a history entry gets generated which means that if a user click the Back button in their browser after login, they end up on back on the URL which has the ?code=... query args, which get stripped back out by Kinde and redirects them forward again to the page they just tried to press Back on....

Link directly to sign up page.

Hi. Is there a way to link directly to my signup page for an app? Trying to link a "sign up now" CTA from a public html website. Thanks...

Session Storage Cleared before Callback

Kinde SDK: TS, Version: ^2.3.0, Framework: Astro w/ React (shadcn ui) Hello, first of all, love the idea behind kinde and really want to get this working. A quick preface: I am mainly a backend developer trying to get a front-end up and going. I don't have a bunch of experience with js, ts, and the ever evolving front-end ecosystem. I added all the functions I needed to a src/kinde/client.ts + for different routes i use the methods defined in a <script> tag (I can eventually just setup api routes, but this is just easier for me now, maybe this the issue??). ...

Login background image not loading

I have two applications in the same environment: * clientId="14d120a38cb54d508d9ec8b0a289fc74" * clientId="f220f81b0c8e47ebbc7e22e5a70876dc" I have added a custom background image, but it's only being rendered for logins from the second of these clientIDs. Can you help me understand why the background image is missing from the other login page?...
No description

Custom domain functionality

I'm using a custom domain, but the Google login box still says "to continue to kinde.com". Is there a way to get this to say "to continue to inrange.io"?
No description

user.email not working

giving me this error: Property 'email' does not exist on type 'Promise<KindeUser | null>'.

Business Plan

Hi. Per a recent email regarding signing up for a business plan, I can not find this setting that is mentioned in the email.
start your subscription now in the Settings > Plan & payments section of your Kinde business.
I also tried to choose a plan from the pricing page, but that did not land me anywhere different either. ...

Kinde not syncing details from Google

I'm using the Kinde API to create a user with an email address. I'm expecting that when the user signs in with a provide like Google that their name will be updated based on information from that provider. However, that doesn't appear to be happening. This is the user object which I get locally in my React application after completing sign in using Google: ``` {...
No description

Email Marked As Spam by Google

Is there anything I or Kinde can do to avoid warnings like this in Gmail?
No description

Restricting Google Domains

I'm working on replacing <GoogleOAuthProvider ...> in my React frontend with <KindeProvider ...>. <GoogleOAuthProvider ...> creates a popup window that restricts signin to Google accounts for a specific domain. In my case that's inrange.io I have configured Kinde with the same Google Client ID which I was using with <GoogleOAuthProvider ...>, but the signin prompt appears to accept signins from any domain. Can you help me understand why?...
No description

Restricting access to Kinde API

https://kinde.com/docs/user-management/user-permissions/ describes how I can create custom permissions for managing what the users of my application are allowed to do. https://kinde.com/docs/build/add-a-m2m-application-for-api-access/ describes how I can enable M2M access to the Kinde API. Is there any way to restrict which Kinde API methods are allowed to be called? I'd like to be able to restrict the access to ensure that if the Client Secret ever got leaked, it couldn't be used to delete all of my Users?...

Accessing appState

https://kinde.com/docs/developer-tools/react-sdk/#persisting-application-state gives an example for how to handle redirecting back to the page a user was on before they clicked the login button. However, as per https://discord.com/channels/1070212618549219328/1161828367511859291/threads/1174693165748461628 I'm currently redirecting the user to a special page which handles making an API call to map them into an organisation based on some business logic. This means I want to wait until that API call completes before I redirect back to the original URL. To enable this I'm currently using a big hack: ``` onRedirectCallback={(_user, appState) => {...

Rotating Client Secret

How and when can I rotate the client secret which I fetch as part of https://kinde.com/docs/build/add-a-m2m-application-for-api-access/?

Accessing ID on the backend

https://kinde.com/docs/developer-tools/protect-your-api/ describes setting the accessToken when making calls to an API. However, as per https://kinde.com/docs/build/about-access-tokens/ this token only includes the Subject which is the Kinde User ID. https://kinde.com/docs/build/about-id-tokens/ describes an ID token which includes details like the user's email, name, etc. However, I can't find any documentation about how to get a token like this and whether or not this would be appropriate to send up to my API, or whether I should be extracting the Kinde User ID from the Access Token and calling the Kinde API (https://kinde.com/api/docs/#get-user) to fetch the user details using this. Can you help me understand this?...

getToken from useKindeBrowserClient

Would it be possible for getToken from useKindeBrowserClient to asynchronously respond with token (ideally when isLoading is false)? I need to pass access_token in Authorization header - currently I'm working this around just grabbing access_token from cookies, but this is not ideal. My case is close to:...

Validating JWT tokens for non-OAuth mechanisms

Kinde supports non-OAuth mechanisms such as https://kinde.com/docs/authentication-and-access/azure/ (WS-Federation) and https://kinde.com/docs/authentication-and-access/custom-saml/. Does Kinde take care of authenticating these logins and then convert the result into a JWT, or does my application need to also worry about handling these other kinds of credentials? Basically, if I follow https://kinde.com/docs/developer-tools/verifying-json-web-tokens/, will I be able to validate logins for users that completed their login using one of these non-OAuth mechanisms?...

Remove an enterpise connection

How can I remove an enterprise connection from the /admin/cx/_:nav&m:settings::_:submenu&s:authentication page?
No description

Enforcing permissions

https://kinde.com/docs/user-management/user-permissions/ talks about how to create permissions. How do I enforce these permissions in my frontend and backend API? I have a React frontend talking to a Python REST API.

Matching Users to Organisations

I'm working on an auth solution for my application. I'm expecting users from multiple different Organisations to register for my application. Is there a way to automatically assign new users to the correct Organisation based on their email domain? All I've been able to find is the ability to manually assign users to Organisations in the Kinde dashboard.