By: harmanjeet singh user 03 May 2018 at 5:39 a.m. CDT

3 Responses
harmanjeet singh gravatar
We want to implement user authentication that is login & logout , so is there any API available using which i can authenticate user. We are looking for any Gluu API to which i can request from my site with username and password as parameter and receive success or failure in response?

By William Lowe user 03 May 2018 at 9:15 a.m. CDT

William Lowe gravatar
Gluu doesn't have an proprietary authentication API that can be used to replay user creds. oxAuth implements OpenID Connect for user authentication and attribute release. 1. Gluu uses short lived authentication session during execution of custom authentication script flows, which are subsequently destroyed after authentication. 2. Gluu creates a new session after authentication but it’s just for SSO. You can call end_session endpoint to kill the session and authorization grant with tokens. Thanks, Will

By Aliaksandr Samuseu staff 04 May 2018 at 5:35 a.m. CDT

Aliaksandr Samuseu gravatar
There is no "auto-login" option in Gluu. It may be possible to implement something like this using custom authentication script of your own design, but this topic is beyond scope of Community support. There is also resource owner's credential grant flow which allows you to acquire access token and id_token in one request (with user's login/password sent in it), but this flow doesn't create session at Gluu, so no SSO functionality will be available.