[Question] Why does Auth0 allow for direct usage of social logins, but with Keycloak I have to register my app at each Identity Provider first? - eviltoast

So I’m making a project in SpringBoot with Oauth security.

If I use Auth0 as my Authorization Server, I can register an application there and just say that I want user to be able to login with Google an Facebook. That’s all it takes.

If I use Keycloak as my Authorization Server, I can also have users choose Google or Facebook as there prefered login, but in order to provide that, I have to register my app with Google and Facebook first.

So how come it’s so easy with Auth0 and a little less easy with Keycloak? Is it a contract thing, does Auth0 have contracts with all these providers or something?

  • carleeno@reddthat.com
    link
    fedilink
    arrow-up
    12
    ·
    7 months ago

    It’s because you’re using the dev environment which uses Auth0’s own keys. You’ll still have to jump through all of those same hoops when you set up a staging or prod environment.

    • lemmyvore@feddit.nl
      link
      fedilink
      English
      arrow-up
      5
      ·
      7 months ago

      Seconded. There’s no way to do OAuth with Google or Facebook without registering your app with them. The only reason it works with Auth0 is because they’re supplying the app for you, but only during development.