Questions tagged [thinktecture-ident-model]

Thinktecture IdentityModel is a versatile helper library to make working with Claims Based Authentication and Windows Identity Foundation easier.

Thinktecture IdentityModel is a versatile helper library to make working with Claims Based Authentication and Windows Identity Foundation easier.

The library is written by Dominick Baier, a security expert involved with the creation of WIF and co-author of Claims Based Identity & Access Control Guide. Source code for the project can be found on Git Hub. Many blog posts on the code can be found on Dominic's blog - leastprivilege.com.

Note - the tag name uses "ident" to fit within 25 character maximum

97 questions
4
votes
3 answers

How to use IssuedToken in a client with a WCF Service Reference

I have a WinForms app with a Service Reference generated from a WCF service that uses WS2007FederationHttpBinding. I can't understand why the following is not working. My WinForms app is calling a WCF service that is using…
3
votes
0 answers

Claims transformation ClaimsAuthenticationManager with Windows Authentication

I am looking to write a MVC5 application that uses Windows Authentication. As per the boilerplate code the @User.Identity.Name claims are populated automatically. I would like to transform incoming claims with my own logic and enrich them so roles…
morleyc
  • 2,169
  • 10
  • 48
  • 108
3
votes
0 answers

How to sign security tokens using SHA256 in WIF STS?

I am using Thinktecture STS and would like to sign the issued tokens using SHA256 instead of SHA1? I tried adding the algorithm to the application using: CryptoConfig.AddAlgorithm( typeof(RSAPKCS1SHA256SignatureDescription), …
Homam
  • 23,263
  • 32
  • 111
  • 187
3
votes
0 answers

Custom WebApi Authorization Database Call

I'm trying to decide if the custom Authorization attribute I wrote is really a good idea. Scenario Say we have a collection of stores, each Store has an owner. Only the owner of the store can do CRUD operations on the store. EXCEPT for users with a…
3
votes
3 answers

Unable to get token from Thinktecture Authorization Server

I am unable to get an access token from Thinktecture Authorization Server. After successfully getting grant code, I try make a POST request to the token endpoint, but always get a 400 Bad Request with this response: message: "{ "error":…
3
votes
1 answer

Bridging forms authentication and OAUTH

It's not hard to modify the forms authentication login process so that in addition to normal forms authentication, a WebClient object does basic authentication to the api/token url served by a Web Api DAL set up with Thinktecture IdentityModel. The…
Peter Wone
  • 17,965
  • 12
  • 82
  • 134
3
votes
1 answer

How do I encrypt the JWT tokens in Thinktecture Identity Server?

Does Thinktecture.IdentityServer support encrypting the JWT tokens it issues, for example to protect the token from being used in a reply attack? If yes, how can a client decrypt the encrypted token? I have tried to enabling "Require Token…
3
votes
1 answer

Persisting the OAuth2 bearer token when using Thinktecture Identity Server

I've been following the Thinktecture Identity Server example of OAuth2 Resource Owner Password Flow found at http://leastprivilege.com/2012/11/01/oauth2-in-thinktecture-identityserver-v2-resource-owner-password-flow/ I have the example working and…
3
votes
1 answer

CORS Options response working in IISExpress but not IIS7.5

I'm trying to get a CORS request to work however I've been running into problems when running it on a deployed server I'm using thinktecture identity model to set up my CORS which works beautifully when running on a local instance of IIS-express but…
Neil
  • 5,179
  • 8
  • 48
  • 87
3
votes
1 answer

Thinktecture IdentityModel AuthenticationConfiguration Mapping for Cookie - how?

I have a Web API based application currently set up using the amazing Thinktecture IdentityModel 4.5. It is set up for claims-based authentication, accepting a Basic auth credential sent in on the Authorization header. The javascript client saves…
Ibraheem
  • 2,168
  • 20
  • 27
3
votes
1 answer

ThinkTecture.IdentityModel "The type 'System.IdentityModel.Tokens.SecurityToken' is defined in an assembly that is not referenced

I start using ThinkTecture.IdentityModel in my project and I am facing a serious issue. Please help me on the same. Error 1 "The type 'System.IdentityModel.Tokens.SecurityToken' is defined in an assembly that is not referenced. You must add a…
Utsav
  • 1,593
  • 4
  • 22
  • 46
3
votes
1 answer

How do I return multiple identities in a token with Thinktecture.IdentityServer.45?

In the Thinktecture.IdentityModel.45 library, I can get a Microsoft.IdentityModel.Claims.ClaimsIdentityCollection by executing something like this: Dim handler = New JsonWebTokenHandler() handler.Configuration = config ' set elsewhere Dim…
2
votes
1 answer

ResourceAuthorize("Read","UsersList") not working, ResourceAuthorizationManager

I am using IdentityServer3 to issue tokens and trying to use Thinktecture.IdentityModel.Owin.ResourceAuthorization.WebApi to authorize resource access of the web api. I am using below code to Authorize an action of the…
2
votes
1 answer

Asp.Net Web Api 2 - How to consume JWT access token and user claims using Identity Model

I have implemented an authorization server in a Asp.Net Web Api project as explained in this article. Now I need to consume the service from a .Net c# client. In the IdentityModel documentation I can see below example: var client = new TokenClient( …
2
votes
0 answers

How to change ResourceAuthorizationContext from Thinktecture.IdentityModel ResourceAuthorizationManager and Web Api 2?

I am creating a Web Api 2 application using Thinktecture.IdentityModel.Owin.ResourceAuthorization , I was taking a look at the source code and I realized I wanted to change the properties available on my ResourceAuthorizationContext , I would like…
Mahmoud Ali
  • 1,289
  • 1
  • 16
  • 31