Requests are only approved when a cookie-header is provided about django-scim2 HOT 6 CLOSED

Hmm, did you set AUTHENTICATION_BACKENDS?

https://github.com/15five/django-scim2/blob/master/demo/root/settings.py#L58-L63

from django-scim2.

Hmm, did you set AUTHENTICATION_BACKENDS?

https://github.com/15five/django-scim2/blob/master/demo/root/settings.py#L58-L63

I hadn't added that yet. I just did, removed cookies but still receive a 401 - Unauthorized. I'm sure the Bearer token I'm using is still valid.

from django-scim2.

Are you sure you're pointed at the right URL; including trailing slashes, that sort of thing? And your URL routing is updated?

https://github.com/15five/django-scim2/blob/master/src/django_scim/middleware.py#L46-L56

from django-scim2.

Are you sure you're pointed at the right URL; including trailing slashes, that sort of thing? And your URL routing is updated?

https://github.com/15five/django-scim2/blob/master/src/django_scim/middleware.py#L46-L56

Yes pretty sure. This is the urls.py from the root folder in my project:

`from django.contrib import admin
from django.urls import path, include

urlpatterns = [
path('api/admin/', admin.site.urls),
path('api/', include('api.urls')),
path('api/scim/v2/', include('django_scim.urls', namespace='scim')),
path('api/o/', include('oauth2_provider.urls', namespace='oauth2_provider')),
path('api/users/', include('users.urls'))
]
`

I have noticed that when I disable SCIMAuthCheckMiddleware and the Cookie-header, I receive a 404 - Not found because it tries to redirect me to the login page in Postman when I try to perform a POST-request, even when I provide the request with a Bearer token. The request URL changes from /api/scim/v2/Users to /api/scim/v2/api/admin/login/?next=/api/scim/v2/Users so the 404 makes sense because it doesn't exist, but I don't get this behaviour with my non-SCIM endpoints.

Somehow requests send to the SCIM-endpoints ignore the Authorization-header, I think?

from django-scim2.

I have managed to solve my issue. I needed to add OAuth2 Token Middleware to my MIDDLEWARE_CLASSES ( 'oauth2_provider.middleware.OAuth2TokenMiddleware'), which solved the problem. I can make requests now with a bearer token to the SCIM endpoints.

from django-scim2.

@Katert which cookie header are you talking about? I am having the same issue but can't solve it with the steps you have.

I am testing with Okta:

from django-scim2.