Questions tagged [identityserver4]

OpenID Connect Provider and OAuth 2.0 Authorization Server Framework based on ASP.NET Core

IdentityServer4 is an OpenID Connect Provider and OAuth 2.0 Authorization Server Framework built on ASP.NET Core.

Allows for the implementation of single sign-on and access control for modern web applications and APIs using protocols such as OpenID Connect and OAuth2. It supports a wide range of clients like mobile, web, SPAs and desktop applications and is extensible to allow integration in new and existing architectures.

IdentityServer4 is officially certified by the OpenID Foundation and thus spec-compliant and interoperable. It is part of the .NET Foundation, and operates under their code of conduct. It is licensed under Apache 2 (an OSI approved license).

For the .NET 4.x, katana based version see Identity Server 3

5377 questions
2
votes
0 answers

IdentityServer, how to validate token using multiple authorities

How can I use IdentityServer.accesstokenvalidation package to validate tokens using multiple authorities? In my front end application I am getting a token using let us say on of the following: 1- subdomain1.identityserver.com 2-…
Yahya Hussein
  • 8,767
  • 15
  • 58
  • 114
2
votes
1 answer

Appropriate X.509 settings for OIDC token-signing and token-validation

What are the basic requirements for secure X.509 self-signed certificates intended for use as OpenId Connect token-signing and token-validation credentials? I have an IdentityServer4 project, and I've been experimentally generating certificates with…
McGuireV10
  • 9,572
  • 5
  • 48
  • 64
2
votes
0 answers

asp.net core - Passing ui_locales to my IdentityServer4

my application is composed by a asp.net core webapp client and a asp,net core webapi hosting the identityserver4. I need to pass to my is4 the ui_locales to localize the login web form. How i do this ? Thanks to this post How to pass ui_locales from…
Stefano
  • 83
  • 2
  • 8
2
votes
2 answers

azure removes Access-Control-Allow-Origin header returned from my app service

I have two services running on Azure : a web service ( angular app / expressjs ) an app service ( aspnet core app ) All the web service does is query the app service for the following endpoint :…
DarkUrse
  • 2,084
  • 3
  • 25
  • 33
2
votes
3 answers

Store a RsaSecurityKey in DB

How can I store an object of class RsaSecurityKey https://msdn.microsoft.com/en-us/library/system.identitymodel.tokens.rsasecuritykey(v=vs.110).aspx in a relational database (like Postgres)? I have to create RsaSecurityKey (first time) and store the…
dudedev
  • 451
  • 1
  • 5
  • 19
2
votes
3 answers

Restricting an api resource on user level in IdentityServer4

We want to set up a general authentication service, making use of IdentityServer4, where we define a set of users that can have access to one or more api's. Users will be globally defined, but can only have access to specific api's. Maybe I'm…
gsharp
  • 71
  • 8
2
votes
1 answer

IdentityServer4 AddSignerCredentials RSA example

Getting ready to move our IdentityServer4 setup from dev to test and I need to get the AddSignerCredentials() piece migrated from AddDeveloperCredentials(). I can generate a private and public RSASecurityKey but I'm unclear as to what…
Goat
  • 95
  • 1
  • 7
2
votes
1 answer

Accessing/Securing Restful service oAuth2

I'm trying to write a Restful service which has more than one endpoints like Assume each endpoint call is secured by a role. GetEmployees (Role/Claim = Employee.Readonly or Employee.Edit or Employee.Admin) AddEmployee (Role/Claim = Employee.Edit or…
akhileshcoer
  • 162
  • 10
2
votes
1 answer

Identity Server 3 Reverse proxy

I am having problems with Identity Server 3 and load balancers. The issue is solved for Identity Server 4 (here), but I need a similar solution for Identity Server 3. Is there something? Thx
2
votes
1 answer

IdentityServer4 too many calls cause performance issue

I am implementing a custom user store where my users provider lives in a separate service which I am reaching out using messaging. The thing is GetProfileDataAsync and IsActiveAsync are getting called too many times (about 3 times each) causing…
Yahya Hussein
  • 8,767
  • 15
  • 58
  • 114
2
votes
0 answers

IdentityServer4 with webforms & multi-tenanted environment

We are a new tech team that has inherited a webforms app. We are planning on building out an internal API and would like some guidance for implementing it with our existing app. Ideally we would like an independent app hosting the identity server,…
2
votes
3 answers

Getting access token within Claims Transformer in ASP.NET Core

I'm developing a set of applications including an Identity Server using IdentityServer4, a .NET Core MVC app, a .NET Core WebAPI. As part of a asp.net core mvc application I am using AddOpenIdConnect to do authentication and doing options.SaveTokens…
2
votes
1 answer

Identity Server 4 (2.0) not reading Asp.Net Core Identity cookies

I am trying to use Asp .Net Identity Core with Identity Server 4. I can see in the logs (Ids) that the user is logged in properly. info: Xena.IdentityServer.Controllers.AccountController[0] User logged in. My login controller then sends…
2
votes
1 answer

Upgrading IdentityServer AccessTokenValidation from version 3 to 4 leads to HTTP 500.19

Currently we have a working ASP.NET WebAPI 2 project which is compiling and running with IdentityServer3.AccessTokenValidation. After uninstalling the NuGet package and installing the newer IdentityServer4.AccessTokenValidation the project now stops…
JoeGeeky
  • 3,746
  • 6
  • 36
  • 53
2
votes
0 answers

How do I programmatically login with IdentityServer4 using code

So here's my code that I'm trying. Uri uri = new Uri(_environmentConfiguration.AuthorityLoginRequestUrl); string content = $@"Username={ userID }&Password={ userPassword }"; var request = new StringContent(content, Encoding.UTF8,…
GreatAndPowerfulOz
  • 1,767
  • 13
  • 19
1 2 3
99
100