Unanswered

custom connector: retrieving username and password from basic authentication login

(0) Share

Report

Posted on by ebnextcom

We're in the process of implementing an oauth-server, but in the mean time we need the users to log in using a username and password they get from us, using basic authentication.

Is it possible to get this username and password, and pipe it into the actions body, using a policy?

Categories:

Connector development

I have the same question (0)

All responses (4)

Answers (0)

Sort by

murshed Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

Please use basic or api key authentication option instead of exposing username/password in the body.
https://docs.microsoft.com/en-us/connectors/custom-connectors/connection-parameters
If this reply answers your question or solves your issue, please ACCEPT AS SOLUTION ☑️. If you find this reply helpful, please consider giving it a LIKE 👍.

Was this reply helpful? Yes No
ebnextcom 4 on at

Like (0)

Report
Copy link

Link copied!

How do I use the username and password after they enter them? Can I access that information somehow?
I would like to have a separate hidden action that connects to our server and retrieves a token using the username and password. The token must then be used as a header value in other connector actions.

Was this reply helpful? Yes No
murshed Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

You should not access raw password, which is a security problem. When the you configure username/password for your connector, the user will be prompted to login when they try to create a connection to your service. The access token will be saved securely by flow and will be provided in the header for every call to your service.
If this reply answers your question or solves your issue, please ACCEPT AS SOLUTION ☑️. If you find this reply helpful, please consider giving it a LIKE 👍.

Was this reply helpful? Yes No
ebnextcom 4 on at

Like (0)

Report
Copy link

Link copied!

Ok, thanks for answering.

I don't get what the basic authentication does though. It does not do any validation, I can write whatever in the username and password, and it allows entry. Is there something else I need to set up?

Was this reply helpful? Yes No