Questions tagged [openiddict]

Versatile OpenID Connect stack for ASP.NET Core and Microsoft.Owin (compatible with ASP.NET 4.6.1). For official support, please visit https://github.com/openiddict/openiddict-core/issues/new/choose.

OpenIddict aims at providing a versatile solution to implement an OpenID Connect server and token validation in any ASP.NET Core 2.1, 3.1 and 5.0 application, and starting in OpenIddict 3.0, any ASP.NET 4.x application using Microsoft.Owin too.

For official support, please visit https://github.com/openiddict/openiddict-core/issues/new/choose.

442 questions
2
votes
0 answers

Introspect the id_token to send claims from token to microservices? Ocelot and OpenIdDict

I am using ocelot api gateway to authenticate the request and pass the claims to the underlying micro services. So far i am able to get the access_token as well as the id_token. Is there a way i can introspect the id_token so that the claims from…
2
votes
0 answers

OpenIdDict with multiple AddValidation for an ASP.NET core/6.0 API

I'm having a RESTful Asp.NET Core/6.0 API, were I'm using an separate Auth-Server with OpenIdDict. My problem is I created two applications one with grant-type Client-credentials (for machine-to-machine communication) and one with grant-type…
2
votes
1 answer

SSO with openiddict

When a user logs in from site https://www.siteA.com, an authentication cookie is recorded. I want to read this authentication cookie from site https://www.siteB.com using User.Identity.Name. How should I configure Program.cs(ASP.NET CORE 6.0) of …
feededit
  • 21
  • 1
2
votes
1 answer

How to properly configure OpenIddict with ASP.NET Core DataProtection

I am trying to setup OpenIddict using ASP.NET Core DataProtection however I keep getting an exception when attempting to start the application: InvalidOperationException: At least one encryption key must be registered in the OpenIddict server…
Thodor20
  • 61
  • 2
  • 7
2
votes
1 answer

Token Encryption on id token

Does OpenIddict token encryption for the id token only encrypt things on the server side and should it be returning the id token to the browser as json? Based on the OpenIddict documentation I have set up my production environment to use assymetric…
Pacificoder
  • 1,581
  • 4
  • 18
  • 32
2
votes
1 answer

Click on login with Balosar project (wasm + openiddict), how to enable CORS?

I'm running Balosar project as follow: I edit Balosar.Client Program.cs: options.ProviderOptions.Authority = "https://localhost:44360/"; I run server with dotnet run urls=https://localhost:44360 I run client with dotnet run I connect a…
tschmit007
  • 7,559
  • 2
  • 35
  • 43
2
votes
1 answer

OpenIddict server with ClientCertificateMode.RequireCertificate and .well-known/openid-configuration endpoint

I have Openiddict secured with client certificates /smart cards and have RequireCertificate. The Resource (api) Server isn't able to hit the .well-known/openid-configuration endpoint since it does not have a client cert. The endpoints are secured…
Fab
  • 904
  • 2
  • 14
  • 38
2
votes
1 answer

OpenIddict Console Application - Get All Application Clients - ListSync Fails

I have written a simple console application to get all application clients from OpenIddict server. I tried all the possibilities and getting the syntax error. The code is below. I did not find any example in Github and found some outdated example…
s vinayagam
  • 69
  • 11
2
votes
1 answer

How do you get the access_token claim in a controller action?

I've integrated OpenIddict in an asp.net core web api. It seems to be working as far as I can tell. Now, I am joining the OpenIddict tables to my applications tables. I have added UserKey to the OpenIddictApplications table. I have the OpenIddict…
tnk479
  • 672
  • 11
  • 26
2
votes
1 answer

How to set up OpenIddict to rely on AzureAd without using Microsoft.AspNetCore.Identity.UI

Our roles model is different so we can't use the stock Microsoft identity database model and all UX that goes with it, more's the pity. All I want to do is use OpenIdDict have AzureAd do authentication put my own claims into the claims principal so…
Peter Wone
  • 17,965
  • 12
  • 82
  • 134
2
votes
2 answers

Openiddict with dotnet core 5 giving the errors as "this server only accepts HTTPS requests."

I am trying to use the oidc-client with oppeniddict in the angular application but there is the error with .well-known/openid-configuration. Error says: GET http://localhost:2987/.well-known/openid-configuration 400 (Bad Request) I have the…
Rasik
  • 1,961
  • 3
  • 35
  • 72
2
votes
1 answer

OpenIddict Roles/Policy returns 403 Forbidden

Good morning. I am having an issue with Authorize in controllers and using Roles and / or Policy set up. It is always returning a 403 forbidden, with the following in the logs: info: OpenIddict.Server.OpenIddictServerDispatcher[0] The request…
Mike Mastro
  • 121
  • 3
  • 16
2
votes
0 answers

How to use OpenIddict validation handler for exchanging authorization code for a token and retrieving the stored token from a cookie?

My question is actually two questions, but they are closely connected to one another, as I have a feeling I'm missing something very simple. I have an OpenIddict auth server on ASP.NET Core (working just fine), I have an SPA with an ASP.NET Core…
Evengard
  • 608
  • 9
  • 19
2
votes
1 answer

Is there a way to dynamically load claims in OpenIddict?

We have an application where there are lots of permissions as claims. Loading these when the user user logs in and setting them as part of the token makes the token very large. My thinking was to find some way of load and adding claims dynamically…
AliK
  • 962
  • 2
  • 10
  • 31
2
votes
1 answer

OpenIddict: How to register signing key in the resource server for validating tokens?

I use OpenIddict. I want to sign the token with the symmetric key. I have configured my authorization server to use OpenIddict. Here is the code in the Startup file. services.AddOpenIddict() .AddServer(options => { …
Arman
  • 33
  • 5