Can't create a data source in Curity due to licensing issue - curity

I am following the getting started guide to setup an instance of the Curity Identity Server. When going through the basic setup wizard, however, I am told to contact sales when trying to create a data source for user accounts. Specifically, I see this warning which reads:
To setup this data source, contact sales to obtain a license.
Here's a screenshot of this:
What should I do at this point? I have a license, but I'm not sure how to make it work.

If you have a license key already, fixing this can be done in the UI by going to the System -> General page and uploading it:
There are other ways to install the license as well; check the manual for details.

Related

How to deploy apps with Microsoft Graph support

basically I want to deploy a NET.Core application where Calendar data will be read from an Exchange server account.
So the user has to fill out his login data and that it.
This works fine with Exchange.Webservices in Windows, but Exchange.Webservices are not working in Linux due the .NETFramework dependency.
I also tried the "Sherlock Exchange.WebservicesStandard" package which is also not working.
Microsoft Graph is a product I don't understand.
Is is correct, that every user needs to have an Azure Account and his own APPID?
If that is correct, this product seems to be a little bit useless in my opinion.
Any ideas?
Best regards!
As a developer, you will need an appid for your application which you will get from https://portal.azure.com/. Users of your application will not need any of this.
Please see this link with Quick Starts to help you with development using Microsoft Graph https://developer.microsoft.com/en-us/graph/quick-start

How to copy Quickbooks production data over to the sandbox environment?

I need the company data copied over from production to the sandbox environment to test an API integration. I need access to the live data, but I do not want to make changes to the live environment yet.
I've tried exporting the company data (Internet explorer was required), but the file downloaded didn't appear on my computer. When I was finally able to get the file, it didn't save with an extension so Quickbooks desktop wouldn't open it. The online converter would recognize it, but it would hang after selecting it.
I've also tried exporting the list individually, but that doesn't keep the original Id.
The question on the developer community has been stale for a while.
Any help is appreciated.
After emailing Quickbooks support, there is an unsupported way here.
The idea is, after you create the sandbox empty the data. Then you can copy everything over in batches.
Otherwise it is not possible.
There is no way to do this. Read the response from Intuit on the thread you linked:
"... there is no way to move data from a production QBO account to a sandbox"
"Thanks for the feedback, we don have an ETA at this point."

How to bring an app developed on Hyperledger Composer to production?

I'm at the stage of my project where I've
Developed the Chaincode (Model,Script,ACL,Queries)
Deployed on IBM Cloud
Developed Front-end Apps to communicate with the cloud based REST Server
Tested the code and business logic through Playground and single user REST server
Now I have to add identities, connection-profiles, & business network cards to the mix to make a production-testing ready prototype and to run REST Server on Multi-User Mode. But I'm having trouble with the said things as I can't figure out where and how to implement them. I have gone through the docs and I know that a business network card contains identity, connection-profile, and some metadata, but how exactly does the whole thing work is still confusing me.
In addition to this, is there anything else that needs to be taken care of or added to the solution to make it production-testing ready?
suggest to read the resources (URLs) provided here firstly to get some insights -> https://github.com/hyperledger/composer-knowledge-wiki/blob/latest/knowledge.md#information_source--node-js-application-development-questions-eg-build-real-time-apps-login-etc
secondly, there are some Composer sample applications you can take a look at to understand some of the issues you're asking about (and obviously - try them out!) -> https://github.com/hyperledger/composer-sample-applications/tree/master/packages eg Letter of Credit.
Finally, another example you can check out this example use case (Loyalty program, including member registration etc (eg user registration etc etc)) is here -> https://github.com/IBM/customer-loyalty-program/blob/master/web-app/app.js and the 'util' elements such as Identity registration etc https://github.com/IBM/customer-loyalty-program/blob/master/web-app/network/network.js

My Visual Studio work items show Microsoft Services in the potential assignee list

How do I remove these strange services from the list of available assignees?
I have got the same result as you. Not sure it's by designed or a bug due to recent escalation of VSTS.
You could submit a Bug in this place Develop Community-Team Services and will get quick response by develop team.
For now as a workaround, you could do the assign to option of the work item in the web. It works well without those annoying Microsoft services.
This is an expected behavior. Refer to this link for details: Unexpected entries appear in "Assigned To" list in Team Explorer when connecting to a VSTS team project.
Posted by Sean [MSFT] on 7/15/2016 at 7:10 AM
This is as designed for VSTS if you are connecting from VS. The reason
you don't see the identities from Web Access when searching is because
the data source is different. It's connecting to our identity service
which can filter down results to only the identities which are users.
You can still manually type in one of those identities above and the
work item will save fine.
The VS client uses can only use local metadata, which means it doesn't
have the extra information that the identity service has for
determining if it should show a user or not in the picker.
I'm sorry for the confusion, and hope this feedback is helpful.

Using OAuth in free/open source software

I'm now reading some introduction materials about OAuth, having the idea to use it in a free software.
And I read this:
The consumer secret must never be
revealed to anyone. DO NOT include it
in any requests, show it in any code
samples (including open source) or in
any way reveal it.
If I am writing a free client for a specific website using OAuth, then I have to include the consumer secret in the source code, otherwise making from source would make the software unusable. However, as it is said, the secret should not be release along with the source.
I completely understand the security considerations, but, how can I solve this dilemma, and use OAuth in free software?
I thought of using an external website as a proxy for authentication, but this is very much complicated. Do you have better ideas?
Edit:
Some clients like Gwibber also use OAuth, but I haven't checked its code.
I'm not sure I get the problem, can't you develop the code as open source retrieve the customer secret from a configuration file or maybe leave it in a special table in the database? That way the code will not contain the customer secret (and as such will be "shareable" as open source), but the customer secret will still be accessible to the application.
Maybe having some more details on the intended platform would help, as in some (I'm thinking tomcat right now) parameters such as this one can be included in server configuration files.
If it's PHP, I know a case of an open source project (Moodle), that keeps a php (config.php) file containing definitions of all important configurations, and references this file from all pages to get the definition. It is the responsibility of the administrator to complete the contents of this file with the values particular to that installation. In fact, if the application sees that the file is missing (usually on the first access to the site) it will redirect to a wizard where the administrator can fill the contents in a more user friendly way. In this case the customer secret will be one of these configurations, and as such will be present in the "production" code, but not in the "distributable" form of the code.
I personally like the idea of storing that value in the database in a table designed for it and possibly other parameters as the code needs not be changed. Maybe a installation wizard can be presented here ass well in the case the values do not exist.
Does this solve your problem?
If your service provider is a webapp, your server needs consumer signup pages that provides the consumer secret as the user signs up their consumer. This is the same process Twitter applications go through. Try signing up there and look at their workflow, you'll have all the steps.
If your software is peer-to-peer, each application needs to be both a service provider and a consumer. The Jira and Confluence use cases below outline that instance.
In one of my comments, I mention https://twitter.com/apps/new as the location of where Twitter app developers generate a consumer secret. How you would make such a page depends on the system architecture. If all the consumers will be talking to one server, that one server will have to have a page like https://twitter.com/apps/new. If there are multiple servers (i.e. federations of clients), each federation will need one server with this page.
Another example to consider is how Atlassian apps use OAuth. They are peer-to-peer. Setting up Jira and Confluence to talk to one another still has a setup page in each app, but it is nowhere near as complex as https://twitter.com/apps/new. Both apps are consumers and service providers at the same time. Visiting the setup in each app allows that app to be set up as a service provider with a one-way trust on the other app, as consumer. To make a two-way trust, the user must visit both app's service provider setup page and tell it the URL of the other app.

Resources