JWT bearer token flow with IdentityServer v3

Question

I am looking to implement OAuth2 authorization for my web api and using Google's docs as a model. The specific flow I'm trying to implement is the "Service Account" flow: here (which, as I understand, is also known as the JWT Bearer Token flow?).

How can I implement this using Thinktecture in my MVC app? (Or is there a better alternative?)

Answer 1

You should be able to use the same code as in the sample that was provided as part of v2 (https://github.com/thinktecture/Thinktecture.IdentityServer.v2/blob/master/samples/AdfsIntegrationSampleClient/AdfsIntegrationSampleClient/Program.cs#L123), so:

        var client = new HttpClient { BaseAddress = new Uri(idsrvEndpoint) };

        var values = new Dictionary<string, string>
        {
            { OAuth2Constants.GrantType, "urn:ietf:params:oauth:grant-type:jwt-bearer" },
            { OAuth2Constants.Assertion, jwt },
            { OAuth2Constants.Scope, realm }
        };

        var form = new FormUrlEncodedContent(values);

        var response = client.PostAsync("", form).Result;
        response.EnsureSuccessStatusCode();

        var tokenResponse = response.Content.ReadAsStringAsync().Result;
        var json = JObject.Parse(tokenResponse);
        return json["access_token"].ToString();