Questions tagged [identityserver4]

OpenID Connect Provider and OAuth 2.0 Authorization Server Framework based on ASP.NET Core

IdentityServer4 is an OpenID Connect Provider and OAuth 2.0 Authorization Server Framework built on ASP.NET Core.

Allows for the implementation of single sign-on and access control for modern web applications and APIs using protocols such as OpenID Connect and OAuth2. It supports a wide range of clients like mobile, web, SPAs and desktop applications and is extensible to allow integration in new and existing architectures.

IdentityServer4 is officially certified by the OpenID Foundation and thus spec-compliant and interoperable. It is part of the .NET Foundation, and operates under their code of conduct. It is licensed under Apache 2 (an OSI approved license).

For the .NET 4.x, katana based version see Identity Server 3

5377 questions
24
votes
4 answers

Method not found: 'System.Reflection.MethodInfo Microsoft.EntityFrameworkCore.Query.EntityQueryModelVisitor.get_SelectAsyncMethod()'

People I need help I am in a new project in which I am implementing identity server 4 and I am trying to recover the previously created users with asp.Identity that I have in my database to be able to verify when I make an external login from…
23
votes
5 answers

Automapper issue with identityserver4 - MissingMethodException: Method not found: '!!0 AutoMapper.IMapper.Map(System.Object)'

I using last version of IdentityServer 4 Issue / Steps to reproduce the problem Creating a new blazor webassembly app I scaffolded all the Identities files and customized and custom ApiAuthorizationDbContext for blazor webassembly Install…
arman
  • 649
  • 1
  • 10
  • 27
22
votes
1 answer

ApiResource vs ApiScope vs IdentityResource

I've read the IdentityServer4 documentation but I can't understand what is the exact difference between these three concepts. (ApiResource vs ApiScope vs IdentityResource) 1- As it is said in the documentation, API Scope models an OAuth scope. and…
Happy Developer
  • 617
  • 1
  • 8
  • 15
22
votes
5 answers

IdentityServer4 not working in production

I am using IdentityServer4 with React start project from ASP.NET Core 3.0. preview 4 and it works perfectly until I build the solution and try to run it from cmd prompt using the dotnet command. Everytime I start the application, it tells me that…
Antheus_S
  • 370
  • 1
  • 2
  • 12
22
votes
4 answers

Getting DiscoveryClient fails with "Issuer name does not match authority"

I get the error below when performing a GET using IdentityModel's DiscoveryClient as follows: var discoveryResponse = await DiscoveryClient.GetAsync("https://localhost/IdentityServer"); Issuer name does not match authority:…
Sigurd Garshol
  • 1,376
  • 3
  • 15
  • 36
21
votes
2 answers

ASP .NET Core Identity custom ApiAuthorizationDbContext

I'm working with ASP .NET Core 3.0 with Angular project. I see this new ApiAuthorizationDbContext and I wanted to override the table name and user id (to int) but there is no way I can do it. Does any body know a trick? This is the class for the…
Cem
  • 347
  • 1
  • 5
  • 12
21
votes
4 answers

How to configure key settings for IdentityServer in appsettings.json for aspnet core app running on IIS

I created the template Angular / ASP.NET Core with authorisation support using this command: dotnet new angular --auth Individual This is an: ASP.NET Core 3.0 App with ASP.NET Core Identity for authenticating and storing users, IdentityServer4 for…
marno11
  • 561
  • 1
  • 5
  • 13
21
votes
5 answers

Redirect URI sent as HTTP and not HTTPS in app running HTTPS

I have an Asp .net core MVC app. Which connects to an Identity Server 4 for authentication. Hosted in a docker swarm MVC app is hosted on https://XXXXXXX ConfigurServies services.AddAuthentication(options => { …
Linda Lawton - DaImTo
  • 106,405
  • 32
  • 180
  • 449
21
votes
2 answers

Can we secure a dotnet core 2.0 React App with only aspnet identity?

I am building a SPA using React and Redux on top of dotnet core 2.0. Unfortunately, the vs2017 template for this does not include Authentication/Authorization. In looking around, I saw many people talking about the use of JWT's and suggesting…
21
votes
3 answers

Scaling an IdentityServer4 service

I have followed the IdentityServer4 quickstarts and am able to authenticate my javascript web page (almost the same as that provided in the quickstart) with a localhosted instance of IdentityServer using the Implicit grant. Again, my IdentityServer…
Jay
  • 9,561
  • 7
  • 51
  • 72
21
votes
4 answers

How would I generate the Identity Server signing certificate

In the identity server samples we find code like this in Startup.cs var certFile = env.ApplicationBasePath + "\\idsrv3test.pfx"; var signingCertificate = new X509Certificate2(certFile, "idsrv3test"); How would I go about replacing this for…
sunil
  • 5,078
  • 6
  • 28
  • 33
20
votes
2 answers

How to call Identity Server 4 with Postman for login

I've a solution in Visual Studio 'TourManagement' which contains 2 projects of .Net core. One is IDP using Identity Server 4, second project is RESTful API of TourManagement secured by IDP project. My question is how can I call Identity Server 4…
20
votes
3 answers

Multiple JWT authorities/issuers in Asp.Net Core

I'm trying to get JWT bearer authentication in an ASP.Net API gateway using Ocelot to work with multiple authorities/issuers. One issuer is Auth0 and the other is an in-house authentication server based on IdentityServer4; we are trying to migrate…
Chris Swinchatt
  • 1,081
  • 2
  • 9
  • 18
20
votes
1 answer

IdentityServer4 discovery document returns 404

I am following the quick start for ID Server 4 with one exception that I am working on a Mac with .NET Core 2.1.302. Somehow when I navigate to http://localhost:5000/.well-known/openid-configuration I get a 404: info:…
mikebz
  • 3,277
  • 8
  • 37
  • 50
20
votes
1 answer

IdentityServer4 custom AuthorizeInteractionResponseGenerator

Sadly documentation on the implementation of a custom AuthorizeInteractionResponseGenerator in IdentityServer4 is sorely lacking. I'm trying to implement my own AuthorizeInteractionResponseGenerator because I need a further step of user interaction…
Shawn de Wet
  • 5,642
  • 6
  • 57
  • 88