Questions tagged [identityserver4]

OpenID Connect Provider and OAuth 2.0 Authorization Server Framework based on ASP.NET Core

IdentityServer4 is an OpenID Connect Provider and OAuth 2.0 Authorization Server Framework built on ASP.NET Core.

Allows for the implementation of single sign-on and access control for modern web applications and APIs using protocols such as OpenID Connect and OAuth2. It supports a wide range of clients like mobile, web, SPAs and desktop applications and is extensible to allow integration in new and existing architectures.

IdentityServer4 is officially certified by the OpenID Foundation and thus spec-compliant and interoperable. It is part of the .NET Foundation, and operates under their code of conduct. It is licensed under Apache 2 (an OSI approved license).

For the .NET 4.x, katana based version see Identity Server 3

5377 questions
2
votes
1 answer

Profile Management with Identity Server

So from what I have read on IdentityServer I should be storing details about the user such as first name and last name inside claims. How would a web application then be able to access the claim information? Since the User Info endpoint requires a…
jonmeyer
  • 748
  • 8
  • 22
2
votes
1 answer

Cannot Add Migrations using EntityFramework Tutorial

I'm currently busy with an integration of Identity Server 4 using the EntityFramework part of the tutorial on their documentation pages. My project is using .NET Core 2.0. Everything goes well, up until the point where it tells me to add the…
Alain
  • 43
  • 5
2
votes
1 answer

IdentityServer 4 - user roles missing

In my Client I have the following set up. services.AddAuthentication(options => { options.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme; options.DefaultChallengeScheme =…
sakura-bloom
  • 4,524
  • 7
  • 46
  • 61
2
votes
1 answer

Identity Server 4 cookie setup not working

I have been tasked with adding an mvc website to an existing web api project that uses Identity Server 4. Currently the web api authenticates Android clients using bearer tokens. I would like the mvc site to use cookies which contain the bearer…
rhfrench
  • 21
  • 3
2
votes
1 answer

IdentityServer4: How to return claims for current scope only

I have a client that has access to 2 scopes from 2 different resources. Each scope has it's own claims. However, I'm noticing that ALL claims from both scopes are being returned to each resource. How can I ensure that only claims related to…
ArdAtak
  • 239
  • 2
  • 4
  • 17
2
votes
0 answers

Passing username & password (connection string) to EFCore at runtime

In a .Net Core 2.0 WebAPI. It is accessed internally by a few applications. However there is an expectation that each application will pass through the username & password to the Web API, that it will use to access the database, using EFCore…
2
votes
0 answers

Add a new Column to an existing IdentityServer4 Model

Can I add a new column to the existing Clients table, which is autogenerated by the IdentityServer4.EntityFramework ?
gneric
  • 3,457
  • 1
  • 17
  • 30
2
votes
1 answer

building asp.net core identityServer for tracking users of multiple resellers

I know about IdentityServer4 authentication mechanism, but i am not sure suitable for tracking users of multiple resellers. In my case we have multiple reseller domain that use a central API gateway. Each reseller have several users. API gateway…
Arash Karami
  • 632
  • 1
  • 8
  • 19
2
votes
2 answers

Identityserver4 with azurewebsites.net domain - how to get ssl thumbprint

I want to host identity server 4 on azurewebsites.net https but I am not sure how to find ssl certificate of my someapp.azurewebsites.net sub domain so I can use it as thumbprint? Is that even possible to obtain ssl certificate that is running on…
sensei
  • 7,044
  • 10
  • 57
  • 125
2
votes
1 answer

WinHttpException: A connection with the server could not be established

I have asp.net core application with identity server... when i try to run getting below error message. WinHttpException: A connection with the server could not be…
sara
  • 195
  • 2
  • 4
  • 19
2
votes
1 answer

IdentityModel2 TokenClient Resource Owner Password

I am trying to get a Bearer token using IdentityModel2 - https://github.com/IdentityModel/IdentityModel2 Their github page says it support resource owner password But I cannot see any way to add username/password and no example on how to do…
Guerrilla
  • 13,375
  • 31
  • 109
  • 210
2
votes
1 answer

Authorize Attribute not working in asp.net core

I am developing a simple web app in asp.net core 2.0 to test identity server 4's implementation. I have created a new project (WebApplication (Model-View-Controller). I can successfully generate accessToken and refreshToken using…
2
votes
0 answers

oidc-client refresh web page cause user data lost

I use this oidc for accessing identityserver4 authentication. every thing works fine. After I log in, user data was lost after I hit F5 to refresh the data. Here is my auth.service.ts. import { HttpClient , HttpHeaders} from…
user3097695
  • 1,152
  • 2
  • 16
  • 42
2
votes
1 answer

Cannot get an IdentityServer4 custom cookie handler working

I'm unable to get a custom cookie authentication handler working with IdentityServer4. I'm using ASP.NET Core Identity and have followed the official guide: https://identityserver4.readthedocs.io/en/release/topics/signin.html I need to override the…
Amethi
  • 1,167
  • 2
  • 11
  • 20
2
votes
3 answers

How to revoke the access and refresh token in Oauth2.0?

I've used this method for revoke the token. But the access token and refresh token again reusable. How to revoke the access and refresh token? public async Task Revoke(string refreshToken,stringaccessToken){ var…