Can we pin this comment? The author of oauth2 basically said oauth2 is a dumpster fire and removed his name from the authorship of the spec. It is a dumpster fire with security holes and shouldn't be used anymore. this was less than a year ago.
@tymon19287 ай бұрын
where did he say it?
@aayan_tanvir7 күн бұрын
so what do we use?
@b9921523 жыл бұрын
Thanks for showing drf-social-oauth2. I am the main maintainer of the framework. I've been trying to dedicated more time to it! Cheers.
@veryacademy3 жыл бұрын
No need to thank me! You and your contributors have done all the hard work! I look forward to reading up in the near future the improvements that have been made and no doubt will definitely be showing more in the coming year! Happy Holidays!
@b9921523 жыл бұрын
@@veryacademy liewise! All the very best in the coming year.
@obelix73492 жыл бұрын
@@b992152 any about invalid client error. Have tried everything
@whichdude4204 жыл бұрын
Ohh dang.. its rare to see any oauth related tutorials.. you the best man, cheers!!
@veryacademy4 жыл бұрын
You will be even more surprised when I tell you that I will make 3 more very shortly 😂 - this one is a little chatty and directed at the code we are already working on. I will do another one with Allauth with a new Django project and React, then VueJS with allauth in a few days. I think that should cover all bases at least to get the code off and running.
@whichdude4204 жыл бұрын
@@veryacademy oh you're going to make another project with allauth? dang.. mad respect.. best of luck to you bruv..
@veryacademy4 жыл бұрын
@@whichdude420 Few days - probably a bit longer!
@veryacademy4 жыл бұрын
Note** Just noticed the requirements.txt file in the Django project was incorrect - all tested again and updated! Sorry!
@veryacademy4 жыл бұрын
Make another update today - strange instance with djangorestframework-simplejwt in the requirements file
@veryacademy4 жыл бұрын
I also get a strange bug when you download and start he repo - possibly solved at the moment by running the static command
@veryacademy4 жыл бұрын
I have updated the settings file
@WCuDYT2 жыл бұрын
You're awesome!!
@amaangigani93722 жыл бұрын
Even after all these updates, it's not working for me. So do you mind checking again? I'm stuck at auth/token in postman. It always shows invalid client. The application screen in django is different for me than you
@N10-b8f2 жыл бұрын
You are one of the best instructors in the world!
@KamillaHolandaCrozara3 жыл бұрын
I am actually developing and Ember.JS app with a Django backend even tough these videos had exactly what I needed. Thanks!
@Apoorvpandey3 жыл бұрын
I'm doing it with Flutter and Django app, and this tutorial is real gold!
@veryacademy3 жыл бұрын
👍
@abhikb4 жыл бұрын
Thanks a lot Very Academy , this is a awesome tutorial , I have been struggling with django DRF Social Logins for a long time... Fortunately your tutorial cleared all my doubts 🙏🙏
@veryacademy4 жыл бұрын
Glad it helped!
@dannyhd83012 жыл бұрын
Hello, I can never thank you enough. The way you teach, presentation workflow, and of course the professional English is amazing ( the accent also helped wink) .all things considered, I have a degree in computer engineering, and I have never seen flawless teaching like this one . thank you very much.
@bubulray11064 жыл бұрын
This is exactly what i have been looking for 😃
@veryacademy4 жыл бұрын
Good to hear
@elonmusk21424 жыл бұрын
Respect. Thank you for hard work.
@veryacademy4 жыл бұрын
Thank you! - Hopefully there is some value here for you
@budhathokibijaya66364 жыл бұрын
best tutorials on the youtube.
@veryacademy4 жыл бұрын
Thank you - again! Hope you are well 👍
@alexelizard17984 жыл бұрын
Great and quality lesson. Thank you and hello from Russia
@veryacademy4 жыл бұрын
Hi Alex, thank you! 👍
@denisgarden12 жыл бұрын
Super useful series. Thank you!
@ekanshgupta40893 жыл бұрын
Amazing tutorial !! Thankyou
@veryacademy3 жыл бұрын
You are welcome! 👍
@ajborbzzz4 жыл бұрын
This is exactly what I am looking for. Great video. (liked and subscribed)
@veryacademy4 жыл бұрын
Thanks for the sub! More content coming soon!
@ajborbzzz4 жыл бұрын
@@veryacademy Do you think django-allauth is easier to setup than drf_social_oauth2?
@abhishektripathi83463 жыл бұрын
Great video sir! Thanks a lot.
@taoxu3524 жыл бұрын
I have planned to watch a movie today. Well, I guess that can be postponed! Thank you!
@veryacademy4 жыл бұрын
Depends what movie you were going to watch 😂
@jayamankrah43284 жыл бұрын
Thank you very much for such a good video. Much love🥰
@veryacademy4 жыл бұрын
You are so welcome 👍
@ghislainleonel72914 жыл бұрын
Thanks very much for this amazing content. Just found this channel. Sir your amazing. New sub 😊😊
@veryacademy4 жыл бұрын
Welcome aboard Ghislain! Thank you for joining us! 👍
@ujjavalshah14954 жыл бұрын
Thank you so much, brother. This helped me a lot. 🙇🙇🙇
@ZayyanMasud4 жыл бұрын
So when you have set up everything, how do you access the protected routes in the api? Do we need attach the access token with each request to api and refresh it periodically?
@veryacademy4 жыл бұрын
Yes, in general terms - If i understand you correctly - yep that is right.
@ZayyanMasud4 жыл бұрын
@@veryacademy Haha found out the experimental way. Felt weird as the api routes you designed were protected. Got disconnected and forgot things from tutorial 3 to here. It would be helpful I guess if you could mention that here as well.
@dannyhd83012 жыл бұрын
hello, you have no idea how grateful I am for your content. I have one question and hope you can address it soon. is there a chance that both simple jwt and social auth can co-exist, i want to implement them in one project and in separate apps though.
@jaheduddin70973 жыл бұрын
So at 1:00:45 you mention that Django creates a new user in the Django database. Is this the most advisable pattern when using SSO - to also create users locally that represent users in the external authentication system? Even though there is an IDP (Facebook, Google) with the users account? I have seen this pattern repeated in many places (of creating users locally even though you are authenticating remotely such as LDAP/AD, Social Auth etc.) so I'm thinking its not just enough for the Django backend to validate a token that it recieves, but it should also create/maintain its own user accounts and implement its own token mechanism.
@SunilparajuliKenshin4 жыл бұрын
The best oauth tutorial, not any other django channels has gem than this one. You are the best. Also if we want to have jwt login and social login side by side in same project. Does this method overrides jwt auth or not
@veryacademy4 жыл бұрын
you can use both jwt and social
@patrickmbugua4942 Жыл бұрын
First of all thank you for this series and I have learnt a lot from the channel, on JWT authentication which of course we are submitting the requests to server via axios,it like my authentication is not working because whenever i submit a request with my authentication set to JWT its always raising a forbidden end point issue .therefore not able to submit any request when logged in
@yasayah72893 жыл бұрын
Thank you for this series! Would love this with FastAPI and Vuejs with admin dashboard that totals number of users and posts by type/category.
@namesare4fools4 жыл бұрын
hey there.. is there a way for user to be able to log in with email & password and at the same time login with Google/Facebook if they're using the same email?
@dennielluissadian50264 жыл бұрын
STOP WATCHING NETFLIX AND START WATCHING VIDEOS LIKE THIS!!!!!!!!! IT'S 2021 AND WE NEED TO GET EMPLOYED OR ELSE WE'RE GONNA DIE OF STARVATION!!!!!!!! HAPPY NEW YEAR, EVERYONE!!!!!!!!!!!
@veryacademy4 жыл бұрын
Yeah, any jobs going let me know 😂
@valentineedesiriefagene75652 жыл бұрын
Thank you
@veryacademy2 жыл бұрын
You're welcome
@becupandey63044 жыл бұрын
Have you planned about creating another Django course playlist? I hope it would be social media site or e-learning site by utilizing Django templates for frontend. By the way, thanks for amazing django contents.
@veryacademy4 жыл бұрын
Hi Becu, you are totally on my wavelength here - that is exactly what I was thinking about e-learning type of project. That and I was going to start an e-commerce project. Yeah, I agree with Django templates - it is hard work doing front and back - adds a lot of time to the preparation. Thank you kindly for your comments 👍
@Sasuke-px5km Жыл бұрын
Very nice tutorial, sir please make an e-commerce using Nuxtjs and django just like you did using in the previous videos but now please make use of the modern frontend framework
@KrishnaManohar80214 жыл бұрын
Give him a medal 🥇
@veryacademy4 жыл бұрын
🎉
@ZayyanMasud3 жыл бұрын
Is it secure to put the client id and client secret and giving it in plain text to the user for oauth? I am very new to oauth, and at a first glance it does not seem risky, but is it? Also AMAZING video. Helped a ton develop my blog. :)
@veryacademy3 жыл бұрын
https will be of help in this situation
@medoabdin4803 жыл бұрын
you're great man🙂
@zakchips4 жыл бұрын
Thank you. Waiting for vue.js.
@veryacademy4 жыл бұрын
👍
@ajmalbangash69285 ай бұрын
why we are removing simple jwt package we can also use it alongside drf-social-oauth2 ? why can u give any reason ?
@veryacademy5 ай бұрын
Absolutely no idea 👍
@user___013 жыл бұрын
just wondering how to implement logout with this new setup?
@TamPham-lg9mo2 жыл бұрын
I have a question. Why do we have to delete the JWT? Can we keep both since for example my app needs both regular login (built in Django and authenticate with JWT) and social login (Facebook, Google)?
@TamPham-lg9mo2 жыл бұрын
@@ashiqhussainkumar1391 hello, since I used the newer React version, I had to edit some parts of it, but overall it was very detailed and easy to understand.
@vanthaitran1592 жыл бұрын
@@TamPham-lg9mo is there any changes from Django back-end ? Plz give me a suggestion!
@TamPham-lg9mo2 жыл бұрын
@@vanthaitran159 Can you clarify on your question? What do you want to know exactly?
@enochabban94543 жыл бұрын
After you refactored the code to remove drf-simple-jwt and include the drf-social-auth, I observed that the logic for the user logout for the react frontend wasn't refactored. It still had the route pointing to "/user/logout/blacklist". That route, however, doesn't exist anymore. So how would you then handle user logout? Revoke token I guess? And one more question, in which scenario do we revoke all user tokens?
@SamOween3 жыл бұрын
any luck?
@kayeshparvez4 жыл бұрын
Hi, Thank you for the very helpful tutorials. I want to restrict access to some of the APIs. I mean without login those APIs will not be accessible. How to do that ?
@veryacademy4 жыл бұрын
This should help you www.django-rest-framework.org/tutorial/4-authentication-and-permissions/
@kayeshparvez4 жыл бұрын
@@veryacademy good link. thank you 👍
@AbhishekVerma-fe3wo4 жыл бұрын
for testing facebook login in localhost https is required which can be enabled by setting HTTPS env variable to true and then npm start.
@harshivthakkar5734 Жыл бұрын
Is it a compulsion to remove previosuly implemented simplejwt authentication
@saumojitbhattacharjee7292 Жыл бұрын
can django-allauth be used for api based authentication with social ?
@coltondeegan43043 жыл бұрын
Awesome series, wondering if this will be continued? Would love to see the email validation and react login links completed. Also curious if anyone has a good solution around fetching a json form schema for react form validation purposes?
@veryacademy3 жыл бұрын
I don't have any plans yet to continue this just yet. So many other things - I am committed to ecommerce for now until that is done. But noted about react login links and email validation.
@carterjames1992 жыл бұрын
Can this be used with an external provider like not facebook, google, github etc
@Kaellyn_9992 жыл бұрын
Hello I need to associate social accounts to login, drf-social-oauth2 provide "associate_by_email" (which associate if same email). But how to associate social accounts which is using different emails?
@billysweird4 жыл бұрын
Quick question, If I want django to handle the form and put a csrf token over the top, how can I get react to accept the {% csrf_token %} or the {{ form.etc }} especially in the case where I want people to add their own info instead of putting it directly through admin.
@veryacademy4 жыл бұрын
This is a common question I get asked, csrf api - have a look at this see if this helps stackoverflow.com/questions/50732815/how-to-use-csrf-token-in-django-restful-api-and-react if not get back to me
@aashayamballi4 жыл бұрын
Thank you 🤗
@veryacademy4 жыл бұрын
You’re welcome 😊
@ganeshgb37493 жыл бұрын
Hi ! Could you help me in making the navbar look good. Like if the user didn't login the navbar should contain register and login buttons and once the user logs in the navbar should contain logout button
@oguzaltun61243 жыл бұрын
Thanks for the tutorial. I just downloaded the github version and tried at local (I did not watch the videos yet). I get the error "Unauthorized: /api/user/create/" when trying to register.
@veryacademy3 жыл бұрын
Probably because you haven't setup your social API keys - you wont be able to use mine.
@ammarjamil24673 жыл бұрын
I Have one question basically in my app I use 'rest_framework.authentication.TokenAuthentication', and I don't want to use the JWT token authentication what should I do?
@veryacademy3 жыл бұрын
Using React/DRF you would go back to sessions if not using JWT? Or basic auth, you could create custom authentication?
@elesdejenice2 жыл бұрын
Isn't storing both refresh and access token on the local storage a potential risk?
@veryacademy2 жыл бұрын
Yes it is not recommended. Which I realise now raises more questions, why build a tutorial with potential risks. The tutorial is for reference only.
@obelix73492 жыл бұрын
For those having the error: invalid_client. You have to copy and paste the client id and client secrete into a notepad BEFORE you save the application. Copy paste both as soon you open the new application. Because saving it changes the client secret to hashed client secret which cannot be used in postman. Unhashed: kvTbqBKuUx6T8V46lsel7bCtN81jRqk64VNi8NSzuZgLekPD14xsw5dH0sdxltp0RV4Qp3F4Ep9TAMf8Zovvh2PouHZrhNVxkHlBqBtWQFwj1HkamApMIxl6ZOGohV9p Hashed: pbkdf2_sha256$216000$sCPYuUFy236Q$X6Isj5YUWaav511hVdZzef3Aw7vYecM72ruidBkwd4k=
@mehdi6568 Жыл бұрын
Thank you bro ❤❤❤
@sreejinsreenivasan4 жыл бұрын
really appreciate your videos. thank you. What about normal signup procedure? how to create refresh and access_tokens on signup?
@nikhilbhardwaj60553 жыл бұрын
Have you found some solution, or can I use jwt and this third party package at the same time, for ex. jwt for normal users and social-oauth for social sign in users
@saadmrabet48833 жыл бұрын
for what reason you switch from simple jwt to drf auth ? got i kinda got confuse
@veryacademy3 жыл бұрын
Hi Saad, not sure what you mean by DRF auth. Sorry to confuse you, sometimes I do things just because I think it is useful to experience even when it might look or feel counterproductive. It help establish a wider knowledge based.
@saadmrabet48833 жыл бұрын
Well what i got confused about is using and other auth package, and i m wondering if it is optimal, in other words it will cause some problem if i used both third party package simplejwt and the package that u used in this tutorial for social auth, and i realy like your content, and last question can u recommande which 3rd party package is the best to use for auth in general with the option of social auth ??
@captainzaraki70663 жыл бұрын
hey, just checked the tutorial it was great but in addition to it how do we do it with custom user model with jwt token ?
@RoylanMartinez3 жыл бұрын
Super useful video, I am trying to adapt this to a django/react app but using graphql and really struggling.
@ekanshgupta40893 жыл бұрын
How to revoke the access token in order to perform logout operation??
@veryacademy3 жыл бұрын
You are not really logging out - when token is removed from the client they can not longer access resources/pages as if they did have a token (logged in as you describe it) on the backend the tokens can be saved - so you can also delete them too.
@ekanshgupta40893 жыл бұрын
okay, thankyou :)
@saumojitbhattacharjee7292 Жыл бұрын
I tried the same but with Google Oauth , But I am getting issue as {"error":"access_denied","error_description":"Your credentials aren't allowed"} once I submit convert-token/ request
@ashutoshtripathi70604 жыл бұрын
Please can you do a video on Django Rest Auth and its SocialConnectViews
@veryacademy4 жыл бұрын
Noted - thank you
@aarmanhossen32223 жыл бұрын
Greate Tutorial.. How can I set remember login?
@maorroizmangheiler94253 жыл бұрын
Thank you very much for the tutorial and all the work of the channel. I would like to know if there is any way to add values (such as the expiration time of the token) to the token payload? Again thank you very much!
@KuthChi3 жыл бұрын
Hi teacher, could you make a tutorial about Django REST framework + Angular front end login with Facebook?
@Monkhaus2 жыл бұрын
I wanted to do this with Vue3 instead of react and Google Authentication instead of Facebook. Finally got it working but was a bit of a pain 🤦♂
@Skufflezlol4 жыл бұрын
Is normal authentication and login redirection meant to be working following this #9 tutorial? i.e, following from your previous guides?
@mr_don_key4 жыл бұрын
tip: never skip why you do things. E.g. the grant type, client type.. this is very very important. setting it wrongly can result into a security problem.
@veryacademy4 жыл бұрын
Appreciate that comment Rogier. It is always a dilemma where to provide more info without going on too long. My tutorials in my humble opinion fall short in many areas which I will slowly address over time. In the first year I have set-out to perfect recording/mic position/sound/editing and getting used to multitasking on camera - I am experimenting getting the right formula. I will slowly introduce more structure to the tutorials and features. This type of feedback is great because I start to better understanding/feel/focus as to what people want to see actually in the tutorials. Thank you once again.
@santiagolosa47514 жыл бұрын
Is there a way to do this while keeping simplejwt?
@veryacademy4 жыл бұрын
Of course anything is possible, whether it is easy possible - not sure.
@santiagolosa47514 жыл бұрын
@@veryacademy The thing is I'm working on a system that has a bunch of users registered. Is there a way to give them a client_id and client_secret for each?
@AYSHATHLUBABA-vp3dw Жыл бұрын
i am getting the error as {"error":"access_denied","error_description":"Authentication process canceled"} while convert-token is called.
@lumlum81214 жыл бұрын
Why are these keys (SOCIAL_AUTH_GOOGLE_OAUTH2_KEY ) used?? when they arent even used can you please elaborate !
@veryacademy4 жыл бұрын
Why is it used when it isn't used. Sounds like you are asking me a quantum physics question. I would answer and say when you don't look at it based on quantum theory, SOCIAL_AUTH_GOOGLE_OAUTH2_KEY will be set and not set at the same time. 👍
@ehsanghochagh72444 жыл бұрын
i have issue with Google OAuth in convert-token server said Bad Request: /auth/convert-token
@joanna54833 жыл бұрын
Hello, did you solve the problem? I have the same issue. I would appreciate any advice :)
@afnannadeem97293 жыл бұрын
@@joanna5483 url is convert_token not convert-token
@hirakhax4 жыл бұрын
Can u tell me the way to store access and refresh token in redis?
@veryacademy4 жыл бұрын
Not to sure you would want to do that.
@josephc30804 жыл бұрын
I noticed in a previous Django authentication tutorial you used Django-allauth rather than drf_social_oauth. What prompted the change?
@gettehl31363 жыл бұрын
This is django restful with jwt Auth, integrates badly with allauth. The other is django core
@elonmusk21424 жыл бұрын
Is it good idea to use mongodb with django.? Please video about deploy too?
@veryacademy4 жыл бұрын
Hey, NoSQL databases have there place if you should want to use that. Of course the data principles are very different from relational tables which you will need to feel comfortable with before you start working with NoSQL approaches. But of course it is more than possible. Is it a good idea - yes of course it is but only if the project / data lends itself towards the benefits of the NoSQL approach. - Was that a request for Django + Mongo or just a request for deploying this React app?
@yashwanthbalanagu89423 жыл бұрын
How to give roles like customer & admin for social auth using Django rest framework
@veryacademy3 жыл бұрын
Hi yashwanth, it is a long one to explain - I will add it to the todo list
@yashwanthbalanagu89423 жыл бұрын
@@veryacademy because i was not seen any blogs on that....
@RAJATGUPTArajatx1853 жыл бұрын
I want to allow users to login via google if they already exist in my database. How can i do that?
@davidrosen27054 жыл бұрын
is there a way to buy your services or something like that ?
@veryacademy4 жыл бұрын
Evening David, I appreciate what you are trying to ask but I am not currently providing any of these types of services. But I will always try and answer any questions you might have
@davidrosen27054 жыл бұрын
@@veryacademy hey thank you for the videos but i wont feel comfortable to ask random stuff in the comment section ), if there was some kind of way to ask you stuff... but i guess you prob have different plans. anyway thank a lot for your content.
@dennielluissadian50264 жыл бұрын
Hello! Please! Can you help me with twitter too? I don't know what token to use
@veryacademy4 жыл бұрын
Its tricky giving you help sorry without showing you how to do it.
@tiendungnguyen1583 жыл бұрын
please help! my response result from facebook doesn't have email value.
@aladnanmehedi17692 жыл бұрын
This playlists is incomplete.. Because Forgot password with Email verification missing... Please add this video....Thank you.
@harshitgangwar21624 жыл бұрын
In facebook authentication I am getting this error, what should i do? >> Facebook has detected that DRF isn't using a secure connection to transfer information. Until DRF updates its security settings, you won't be able to use Facebook to log in to it. Please help
@veryacademy4 жыл бұрын
You will still be able to use HTTP with “localhost” addresses, but only while your app is still in development mode.
@veryacademy4 жыл бұрын
Just make sure you are spinning up your servers with localhost and not 127 and making requests from localhost not 127.0.0.1...
@@veryacademy Thanks. I made a mistake in developers.facebook while creating the app, it somehow became business. Its ok now
@veryacademy4 жыл бұрын
@@harshitgangwar2162 Thanks for letting me know, good to hear you got it sorted.
@silentlearn4 жыл бұрын
when i send the facebook's accessToken to convert-token it's response is unauthorized. What could be the problem any solutions?
@user___013 жыл бұрын
I'm getting permission error when fetching the post even though I edited the JWT to Bearer. Please help.
@user___013 жыл бұрын
Oh I just forgot to include "DEFAULT_AUTHENTICATION_CLASSES" my bad
@shyamsharma32564 жыл бұрын
I didn't understand what is the use of 'SOCIAL_AUTH_USER_FIELDS', which is used in settings.py. Could you please elaborate?
@veryacademy4 жыл бұрын
Hi Shyam, good question. Looking through the manual I remember this was needed to define the model fields when you use a custom user model. I was going to link this to you - but - I cant find it. Unlikely I just made this up though, but I could have just got this wrong. If you remove it - see what happens - that will answer the question!
@shyamsharma32564 жыл бұрын
thanks
@alkfalfnsflgjslfj21273 жыл бұрын
I tried do it with google but it isnt working can you help me please?
@veryacademy3 жыл бұрын
Hi Alkfalfn - really sorry I cant give you this type of support at the minute. I know it doesn't help but just reading through it and take it step by step testing where you can.
@surajthapafc4 жыл бұрын
thanks
@veryacademy4 жыл бұрын
Welcome
@oltlatifi48703 жыл бұрын
If anyone is seeing this, do you guys know how to refresh the access token when it expires?
@user___013 жыл бұрын
and also logout
@nikhilbhardwaj60553 жыл бұрын
but how to use this token authentication for non social accounts
@veryacademy3 жыл бұрын
noted - will cover this shortly again - I am doing a token video up next in fact!
@namesare4fools3 жыл бұрын
I'd followed the tutorial till the end. Now I'm not getting this, how do i get the login user data... username, firstname, email ??
@veryacademy3 жыл бұрын
That wasn't shown directly. But now you can log in you send requests to the server capture the request and send the data back - sounds easy!
@calm_warr10r2 жыл бұрын
Despite using the right client id & secret & username-password, I'm still getting `{"error": "invalid_client"}` error. What am I doing wrong ?
@varisharashid46992 жыл бұрын
Same. Did you sort it out?
@calm_warr10r2 жыл бұрын
@@varisharashid4699 check if you're entering hashed client secret.
@varisharashid46992 жыл бұрын
@@calm_warr10r oh yes. So i have to copy it before saving
@obelix73492 жыл бұрын
@@varisharashid4699 oh man you are a life saver...
@harshitgangwar21624 жыл бұрын
After the user is logged in how am i supposed to get all his data, to display it in its profile. Can you help me with how can i get the users data, cause i just have the access and refresh tokens.
@veryacademy4 жыл бұрын
Hello, just very briefly - make sure you are not collecting any sensitive data. Maybe build a custom user table first. To get user data - you need to make an API get request to the server. Like how it is done to collect the post data, make another request for the user data and store it somewhere - maybe initially in the local storage.
@harshitgangwar21624 жыл бұрын
@@veryacademy thanks i am going with local storage for now. I have one more problem - i have an admin user too, should i store a another varaible in local storage for admin, so that my app can distinguish between the two and display what is required
@veryacademy4 жыл бұрын
@@harshitgangwar2162 Sure you could, maybe you setup levels for different types of users.
@afnannadeem97293 жыл бұрын
hello please tell me how to retrieve facebook profile picture and save in user model
What is password for a user created by social login? I mean while creating a user in database with information received from facebook, we also need to provide password, what is it? Token gotten from facebook?
@veryacademy4 жыл бұрын
Hi Orkhan, you dont need to store password - all handled by facebook?
@marghoobtarar66504 жыл бұрын
i followed every every step and i also clone Final code sample, when i send request from the front-end to backend(/auth/convert-token) after accessing the reference token it gives and bad request error code 400 please help me if im missing something.
@namesare4fools4 жыл бұрын
try makemigrations?
@teddiegeach26132 жыл бұрын
Did you ever figure this out? I'm having the same problem
@teddiegeach26132 жыл бұрын
I figured it out if anyone else runs into this problem. The user I signed up with via FB was not set to "Active" since I was following along with the tutorial and he fixes the code for this at a later stage in the video. You need to update your user model to have is_active default=True. If your user has already been added, you need to go into the admin panel and update the user to is_active
@erkhalidkhan4 жыл бұрын
why i'm getting 400 bad request, when login through facebook??please please helpout it is urgent
@veryacademy4 жыл бұрын
Hi Khalid, that is a very generic problem - unfortunately it is impossible to tell you.
@kuuoo422 жыл бұрын
I am getting invalid_client error even when everything is correct
@michaelboateng42802 жыл бұрын
use the client id and client secret generated before you save the application in django admin
@mymawazo14492 жыл бұрын
Hey did you solve this?. I am also getting the same error and everything is correct.
@obelix73492 жыл бұрын
@@mymawazo1449 Hi, you have to copy and paste the client id and client secrete into a notepad and use that as soon you open the new application. Because saving it changes the client secrete to hashed client secrent which cannot be used in postman. Unhashed: kvTbqBKuUx6T8V46lsel7bCtN81jRqk64VNi8NSzuZgLekPD14xsw5dH0sdxltp0RV4Qp3F4Ep9TAMf8Zovvh2PouHZrhNVxkHlBqBtWQFwj1HkamApMIxl6ZOGohV9p Hashed: pbkdf2_sha256$216000$sCPYuUFy236Q$X6Isj5YUWaav511hVdZzef3Aw7vYecM72ruidBkwd4k=
@viktorvostrikov96254 жыл бұрын
Great video! However, after removing simple-jwt we cannot longer blacklist our refresh tokens. Am I right? If so, how should I combine simple jwt with social login? Perhaps I should use this library, because it uses simple-jwt: github.com/st4lk/django-rest-social-auth
@harshivthakkar5734 Жыл бұрын
any luck?
@AllexRadu3 жыл бұрын
How to hide private key in react? Do you guys have any idea? Please don't say env, that's not hiding at all.