June 2020 Summaries

FusionAuth provides a way to create multiple tenants within a single installation, allowing for logical separation of users and applications while maintaining administrative control. This feature enables companies to offer private-labeled versions of their SaaS application to clients, with each tenant having its own email templates, themes, application configurations, and users. Tenants can be created automatically using the API, automating the process of setting up new accounts for premium clients. While this approach requires some upfront planning, it offers operational simplicity and logical separation of data, making it a more efficient way to manage multiple clients compared to running separate FusionAuth servers.

Gatsby, a popular JavaScript static site generator, does not natively support features like user authentication, but FusionAuth can effectively integrate this functionality. This blog post guides users through creating a Gatsby site with FusionAuth for secure user login and profile access, employing the OAuth Authorization Code workflow with PKCE extension to enhance security. The process involves setting up FusionAuth, creating a Node proxy application to handle access tokens securely, and developing a Gatsby site with client-only routes for authenticated pages. The tutorial includes detailed steps for setting up routes in a Node app, generating and managing PKCE challenges and verifiers, and creating login and logout functionalities. By the end, users can authenticate securely without exposing sensitive information, and the guide suggests further steps like adding user registration and using higher-order components for content protection.

The post outlines a detailed guide on how to authenticate a Golang CLI application using FusionAuth's OAuth2 Device Code Grant, particularly useful for devices lacking a user-friendly interface for logging in, such as smart TVs or Raspberry Pi. It begins by setting up the necessary environment, including installing Golang, configuring FusionAuth on a local machine, and creating a FusionAuth application and user. The core of the guide focuses on the implementation of a CLI app called "getgif," which uses commands like `login`, `fetch`, and `logout` to authenticate users, fetch gifs from Giphy, and manage user sessions. The process involves initiating a Device Code grant, displaying a user code for authentication, polling the FusionAuth server, and finally obtaining a JWT Access Token that allows the app to retrieve and save user information. The post concludes by encouraging further exploration of FusionAuth's capabilities and the Golang client library.

The tutorial provides a step-by-step guide on how to build a secure API in Ruby on Rails using JSON Web Tokens (JWTs). It starts by creating a new Rails application and setting up the necessary routes for the API. The tutorial then explains how to create a test user and generate a JWT token, which is used to authenticate requests to the API. The code includes tests to ensure that the authentication process works correctly, and it also covers additional security measures such as verifying the issuer and audience claims in the JWT. Finally, the tutorial provides suggestions for extending the example and integrating with an identity store like FusionAuth.

FusionAuth has released version 1.17, which delivers new features such as support for Sign in with Apple and improved refresh token policies, allowing users to maintain session longevity. The release also refactors identity provider lambdas for user data reconciliation, giving developers control over the configuration process. Additionally, numerous bugs have been squashed and GitHub issues resolved, improving overall stability and usability of the platform.