Questions tagged [thinktecture-ident-model]

Thinktecture IdentityModel is a versatile helper library to make working with Claims Based Authentication and Windows Identity Foundation easier.

Thinktecture IdentityModel is a versatile helper library to make working with Claims Based Authentication and Windows Identity Foundation easier.

The library is written by Dominick Baier, a security expert involved with the creation of WIF and co-author of Claims Based Identity & Access Control Guide. Source code for the project can be found on Git Hub. Many blog posts on the code can be found on Dominic's blog - leastprivilege.com.

Note - the tag name uses "ident" to fit within 25 character maximum

97 questions
1
vote
0 answers

Using Microsoft Jwt handler with symmetric signing key using Oauth 2 resource owner flow

I'm trying to use an OAuth 2 Resource Owner Flow to authorize a mobile client against my Web Api services. I'm using Thinktecture IdentityServer to issue the jwt token with a symmetric signing key. On the client side I'm using Thinktecture…
1
vote
4 answers

WIF cannot redirect to a URL containing a hash after federated authentication

I am using WIF and a federated security model using ThinkTecture STS. When I try to request the url: http://domain.com/#page, WIF is not redirecting to the correct page after authentication. The ru param in wctx does not contain the correct path of…
1
vote
2 answers

Project does not compile after update of thinktecture.identitymodel 2.6

I have updated my project yesterday with IdentityModel 2.6, and I can't find why it does not compile anymore with this error. error ASPRUNTIME : The pre-application start initialization method Start on…
JuChom
  • 5,717
  • 5
  • 45
  • 78
1
vote
1 answer

ASP.Net MVC forged claim token still working

I have an asp.net MVC 4 project in .Net 4.5. I have set up Claim based authentication to protect my site. I have a very strange behavior after logging in. If I edit the FedAuth cookie and change a value by hand in the token part, if I try to refresh…
1
vote
1 answer

Authorize using Oauth2 Token in Asp.Net WebAPI

Hello I am building an ASP.Net WebApi. First I authorized the WebApi using basic authentication .net membership provider and the Thinktecture Identitymodel. var authConfig = new…
0
votes
1 answer

What can cause a handler to be ignored?

We moved to a new server and my Thinktecture IdentityModel stuff broke. Here's a super simplified repro sample. This works run locally from Visual Studio, but deployed to the server the handler is clearly not handling. using System.Web.Http; using…
Peter Wone
  • 17,965
  • 12
  • 82
  • 134
0
votes
0 answers

Passive redirect to WS-Fedration Site on click of Sign In page in MVC application

I have an application which is using thinktecture to do single sign on. I have configure the passive redirect in web.config file. I want my home page to be loaded first and then on click of login/sign in button need to do passive redirect,…
0
votes
1 answer

Using customuserservice sample of Identity Server V3 in MVC not able to redirect to login page

I am using CustomUserService sample of Identity server v3. I added home controller as below - `public class HomeController : Controller { // // GET: /Home/ public ActionResult Index() { return View(); …
0
votes
1 answer

Using own user repository/ database table for IdentitiyServer3 to authenticate against

Can you please help me with some insight on using my own User repository/ database table for Identity server (IdentityServer3) to authenticate against? I know other people have done it, but can’t seem to figure out how?
0
votes
1 answer

Passing parameter SecurityToken to a different asp.net mvc website in a POST doesn't work to allow Single Sing-On

I have couple of websites A, B, C ..... Website A: is an authentication website, depending on the user name, password and an extra parameter; Website A redirect a successful user login to Website B. When the user is logged I get in the Website A a…
0
votes
1 answer

Use HttpSessionState to store Token/Claims

Is there a solution available to use HttpSessionState to store the Token ? I know we can enable session to make the authentication cookie smaller : FederatedAuthentication.SessionAuthenticationModule.IsSessionMode = true; From what I understood,…
0
votes
1 answer

Authenticate - provide login email address to lookup user identity

I am using Thinktecture AuthenticationConfiguration to provide an end point for signing tokens on my API: var authConfig = new AuthenticationConfiguration { EnableSessionToken = true, SendWwwAuthenticateResponseHeaders = true, RequireSsl…
morleyc
  • 2,169
  • 10
  • 48
  • 108
0
votes
0 answers

Thinktecture IdentityModel token rejected

My Durandal SPA app performs BASIC authentication to acquire a session token which it then presents in headers to access Web API controller methods. This works fine. On successful authentication I cache the access_token in localStorage so I can…
Peter Wone
  • 17,965
  • 12
  • 82
  • 134
0
votes
1 answer

RestSharp calling WebAPI with Thinktecture AuthenticationConfiguration

I am using Restsharp within an MVC app, trying to call a backend MVC WebAPI protected by Thinktecture IdentityModel AuthenticationConfiguration. MVC API Setup My MVC API test is setup with the below: private static void…
0
votes
1 answer

Why does OidcClient not support validating a jwt signed using symmetric key /client secret

Although Thinktecture.IdentityServer supports signing a jwt using a symmetric key, the OidcClient class does not support validating a token using one - it only supports validating tokens signed using a certificate. Is this deliberate and are there…
Ashish
  • 33
  • 4