Questions tagged [thinktecture-ident-server]

Thinktecture IdentityServer is an open source security token service based on Microsoft technologies designed around Claims Based Authentication and Windows Identity Foundation.

Thinktecture IdentityServer is an open source security token service based on Microsoft technologies designed around Claims Based Authentication and Windows Identity Foundation.

Version 2: https://github.com/IdentityServer/IdentityServer2/

Version 3: https://github.com/IdentityServer/IdentityServer3/

337 questions
3
votes
1 answer

Has anyone created any Angular2 auth wrapper classes for IdentityServer 3/4?

i see angular2-jwt but i don't know how to use it with IdentityServer. has anyone done anything with angular2 and identityserver?
CurlyFro
  • 1,862
  • 4
  • 22
  • 39
3
votes
1 answer

How to run IdentityServer3 samples?

It is hard for me to complitly uderstand how works identoty server 3. Even when I spent lot of time to investigate. Now I am trying to run IdentityServer3 samples. I can run client (for example: WPF Implicit Client), but I cannot login when I run…
3
votes
0 answers

Sliding session and algorithm adopted for reissue cookie

I have an issue about the heuristic adopted by thinktecture sliding session and discovered that microsoft implements the same algorithm on forms authentication using sliding session. They update the session cookie only if the half of the expiration…
Iuri
  • 166
  • 1
  • 9
3
votes
1 answer

Resource Owner Credentials Flow with JavaScript and IdentityServer - Not Allowed?

I have a JS website that tries to obtain an access token by passing the user name and password. I also maintain the auth server, so I consider the JS client as trusted. I am able to do this with ASP.net 4.5.x. but when I try to do the same to…
3
votes
1 answer

How to implement Multiple IdentityServers

We are building a multi-tenant application which will be hosted in multiple data center (Azure) across the world.This application will also expose API (not just MVC web application). To handle authentication/authorization, we were planning to…
Pragmatic
  • 3,093
  • 4
  • 33
  • 62
3
votes
2 answers

Thinktecture "insufficient_scope" error. Singular scope claim versus list of scopes

I'm sure the answer is obvious, but it's eluding me at the moment. I get a 403 when my code tries to call /connect/userinfo and the message is…
ryan1234
  • 7,237
  • 6
  • 25
  • 36
3
votes
2 answers

Cannot access login on Thinktecture IdentityServer3 from JavaScript client

I built an IdentityServer pretty much following the tutorial with the mvc client. http://identityserver.github.io/Documentation/docs/overview/simplestOAuth.html The IdentityServer works fine with the mvc client, but I am using a javascript client,…
pinnprophead
  • 215
  • 3
  • 14
3
votes
2 answers

AJAX calls within MVC and Identity Server

I have been playing with Thinktecture IdentityServer3 and am keen to use it as the product looks great. However, I don't fully understand how to accomplish my flow which is probably fairly common: Create Identity Server using Implicit flow Setup an…
chris
  • 111
  • 6
3
votes
3 answers

Using a Web API Service as Central Authentication Point

I'm very new to the identity management world, so please spare me. :) What I would like to do, is to have multiple client (MVC) applications that talk to a single Web API application to authenticate their users against. In that Web API application,…
3
votes
0 answers

Invalidating JWT with openID Connect Session management

I have been working on a Single Page application (SPA) using Thinktecture Identity server V2 and OAuth2. I am currently using the implicit flow the workflow as follows, 1. The SPA requests an access token for the Identity server. 2. the token is…
3
votes
3 answers

Unable to get token from Thinktecture Authorization Server

I am unable to get an access token from Thinktecture Authorization Server. After successfully getting grant code, I try make a POST request to the token endpoint, but always get a 400 Bad Request with this response: message: "{ "error":…
3
votes
1 answer

Missing Claims and Identity Info with IdentityServer v3

I have IdentityServer with Membership Reboot and IdentityManager running on a remote server, I've used the Admin UI of IdentityManager to setup a user, and add roles & claims to said user. I'm developing a WebApi/SPA project that will use the…
3
votes
1 answer

using Thinktecture.IdentityServer3 as a Federation Provider with transforming of claims

Hello I have been trying to work out how I could configure IdentityServer3 to become a multi-tenant federation provider that can transform and enrich claims coming back from say ADSF, Google+, Microsoft Account. Does anyone have any example code of…
3
votes
1 answer

Open ID Connect and native public app...no implicit flow, no hybrid flow...so what?

We are currently developing a native mobile application, and we need to authenticate end-user with our identity server (made with thinktecture identity server v3), and/or external social identity providers, to consume some resources in our…
3
votes
1 answer

Access Requested Client from IUserService

I have an existing database that holds user credentials as well a map of what applications those user credentials have access to. In identity server I have each application setup as a client and users can authenticate successful. However, any user…
Scott
  • 11,046
  • 10
  • 51
  • 83