Questions tagged [thinktecture-ident-server]

Thinktecture IdentityServer is an open source security token service based on Microsoft technologies designed around Claims Based Authentication and Windows Identity Foundation.

Thinktecture IdentityServer is an open source security token service based on Microsoft technologies designed around Claims Based Authentication and Windows Identity Foundation.

Version 2: https://github.com/IdentityServer/IdentityServer2/

Version 3: https://github.com/IdentityServer/IdentityServer3/

337 questions
0
votes
0 answers

Invalid_grant error when doing a Refresh_Token

In IdentityServer4, I am using the HybridAndClientCredentials grantType for my client. When the token expires and the refresh token request fires, I get invalid_grant error. See the logs below for the request Logs > 11:14:56 Debug]…
0
votes
3 answers

How to get application profile data into access token?

I'm using IdentityServer4 with a mix of v4/v3 clients. I have custom profile data that is store on the application side that I'd like to include in the access_token so that my downstream APIs can use this with bearer/jwt authenication. I understand…
0
votes
1 answer

How to exchange an refresh token for an access token .

I am trying to exchange an Access token for an refresh token . I am sending client ID , secrete , grant type , scope in headers , URL query parameter and posting as Json over body , but I am receiving invalid client as response . Can you please…
0
votes
1 answer

Adding Application Specific claim after Web API Authentication (Identity Server)

I am adding application specific claims in my Web Application OnValidateIdentity to Identity Sever's access token claims. I am grabbing the application specific claims for the logged in user querying the Database for every API call. Should I make…
0
votes
1 answer

Dynamic RedirectUri in identityserver3

I have a single page application in angularjs 1.x. I am using IdentityServer3 for user authentication. After successful login, user is redirected to home page of my single page application. This redirecturi is set in startup.cs of SPA Project. But…
Ruchi
  • 155
  • 1
  • 2
  • 12
0
votes
0 answers

Redirecting with AngularJS/OIDC not working in IE 11

I have some SPA code that's using Manfred Steyer's OIDC client and Identity Server as the Token Service it works great in Chrome & Firefox. But for some reason or another it's not working in IE 11. I get this error Unhandled exception at line 3855,…
0
votes
1 answer

Access token for API controller inside Identity server itself

I have created an identity server 4 project and a mvc client project. Authentication flow works as expected. I have added an API controller in the same project as identity server and i want to hit this api resource from mvc client.Essentially,i need…
0
votes
0 answers

Thinktecture IdentityServer3 Windows Auth call never returns a result

Let me preface this issue by saying that I have this working fine through Visual Studio 2015 and IIS Express and my local box. It's only when deployed to the server and running IdentityServer in IIS that I encounter this issue. I am trying to…
jpaull
  • 278
  • 1
  • 6
  • 17
0
votes
1 answer

Identity server 3 refresh token issue when deployed in Azure

I have an instance of Thinktecture's Identity Server v3 in Azure hosted as WebApp. In general, it works as expected but I have some issues trying to use refresh token through the token identity/connect/token endpoint with the refresh_token grant…
0
votes
3 answers

Good algorithm for downloading and caching public signing key for token validation

In a katana web api, I'm using: appBuilder.UseIdentityServerBearerTokenAuthentication( new IdentityServerBearerTokenAuthenticationOptions { Authority = "https://...", ValidationMode = ValidationMode.Local, …
0
votes
1 answer

Thinktecture Identity Server 3: Client Secrets to protect WEB APIs from unauthorized access

I am using the JS application walk through code sample and trying to understand how can I ensure the system is secured. AFAIK, the secrets provided at the scopes on the identity server have to be validated after token is passed to Resource API…
0
votes
1 answer

IdentityServer3 Logout not Redirecting to origin

I have MVC logging out from identityserver however it does not redirect automatically. I don't even get the "Click here to go back" that is usually displayed by default. Here is my setup. in the idsvr: Factory is Aspnet identity using EF (mostly out…
0
votes
1 answer

The remote certificate is invalid according to the validation procedure. Identity Server

On one computer I have 2 projects - a client application and another that holds the identity server and identity manager. When I run the client site on this computer everything works. I am able to sign in, register etc. This project was already…
0
votes
1 answer

install-package Thinktecture.IdentityServer3 command gives error in visual studio package manager console?

When i run following command in package manager console: install-package Thinktecture.IdentityServer3 I am getting error: Install-Package : Unable to find package 'Thinktecture.IdentityServer3' At line:1 char:16 + install-package <<<< …
Sahil Sharma
  • 3,847
  • 6
  • 48
  • 98
0
votes
1 answer

Controlling how IdentityServer3 returns the Authorization Bearer Token

I've been working with IdentityServer3 for a little while now. I have hooked up some SPA applications, as well as some ASP.Net webform applications. When I trace the networks calls in Fiddler, I sometimes see the Auth Token returned in the redirect…
Chris
  • 1,690
  • 2
  • 17
  • 24