I have an identity server 4 implementation very simple and I'm using the oidc-client on my angular APP to carry on all the security management. In my auth service I have the following:
@Injectable()
export class AuthService {
private manager:…
I have implemented the aad implicit flow for web app. I want to restrict users who can log in to the web app. I created a user group and added that in Users and Groups option. I enabled the user assignment required option. The problem is when I…
I'm using the oidc-client-js library to handle OIDC redirect SSO style authentication against our IdentityServer4 implementation from an angular app. The IdToken/Cookie in the app is good for a 1+ days. The access token lifetime is shorter and…
We are developing a multi-tenanted application using Angular 6. Each tenant accesses the application using their sub-domains, say, client1.app.com, client2.app.com etc.
For authentication purposes, we are using IdentityServer 4. We have followed…
we currently facing the problem, that the silent renew is going to not working after about 30min. We were able to determine that the SubjectId is missing on IS4.
When looking into the network tab in chrome for the client requests, the following…
I followed this - http://docs.identityserver.io/en/release/quickstarts/7_javascript_client.html.
Using the following configuration, I tried to login Identity Server from my ReactJS app. http://localhost:3000/callback.html is loaded after successful…
We have a mvc website embeded into an angular application using iframe. This used to work fine as both of these applications are hosted in same domain and works on cookie based authentication mechanism.
But we recently needed to change…
I'm using the oidc-client library. After the Login, in the call back I call signinRedirectCallback(), but the User is not immediately loaded and I cannot redirect to the Protected page until is loaded. I tried to add…
I've been trying with little success to implement the token refresh using the oidc-client library. Any help or insight is greatly appreciated.
Stack:
React
GraphQL (Apollo Client)
Structure:
I've tried a few approaches, starting with…
I am currently setting up an identity server with a SPA client and a few REST services to consume data from.
Everything seems to work but I currently struggle to understand, why every API call with a valid access_token triggers a request to the…
I am working with Identity Server 3 on the service and oidc-client.js in my front end. The client setup in Identity Server does not set the token lifetime options, so should have the default values of 300s (5min) for the identity token lifetime and…
I've followed the IdentityServer4 documentation to create a basic local implementation using the default test configuration (with in-memory clients and users). At this point IS4 is initialized as follows:
services.AddIdentityServer()
…
I am using identity server 4 with the oidc-client library in an angular 2 web page. The login, logout calls and api calls are all working correctly without any issues. I have recently started trying to get the token auto refresh functionality to…
My script has a function that login the user as follows:
class myClient {
SignIn() {
this._userManager.signinRedirect();
this._userManager.processSigninResponse().then(function (response) {
…
In a SPA environment using IdentityServer4 and OIDC-Client, what's the most secure approach to do the following with multiple external providers?
Essentially, if a user logs in with Google I need to log into my internal system and create new claims.…