Questions tagged [identityserver4]
OpenID Connect Provider and OAuth 2.0 Authorization Server Framework based on ASP.NET Core
5,286
questions
0
votes
1
answer
29
views
IdentityServer4 - Auth error TypeError: Failed to fetch
I am trying to Authenticate and Authorize a simple API using IdentityServer4 but getting an error in Swagger UI. IdentityServer4 is running at https://localhost:44311 while the API is running at https:...
3
votes
0
answers
47
views
Duende Identity server - Get PostLogoutRedirectUri after logging out through my client app
I am building an Identity server with the Duende Identity server software package.
The IdentityServer is .Net 6, and the client application is ASP.NET 4.6.2, which could complicate things.
In my ...
0
votes
0
answers
48
views
.NET Core application auth with identityserver4
The authentication part was done using Identity Server 4, now I want to change the clientId and clientSecret, and use the new credentials, but in the backend I can't find the client configuration and ...
0
votes
1
answer
46
views
IdentityServer4 Admin API always return 403 Forbidden
I have IdentityServer4 running at https://localhost:44311/. I am building a custom User Interface using IdentityServer4 Admin APIs. I wrote a small program to test if I could correctly call Admin API ...
0
votes
1
answer
26
views
IdentityServer4 sometimes returns 500 for google and microsoft authentication
Sometimes google and microsoft authentication returns 500 on IdentityServer4.
Specifically, /signin-google and /signin-microsoft are returning 500 errors, and the situation is as follows
・About 3,000 ...
0
votes
1
answer
46
views
IdentityServer4 always return 401 Unauthorized or 403 Forbidden
I am new to IdentityServer4. I have created a IdentityServer4 client, a scope at the IdentityServer4 running at https://localhost:44311/. I secured a sample Weather API using IdentityServer4. When I ...
1
vote
1
answer
33
views
Call Identity Server protected resources from another web service
I'm working on an application which has Angular in the frontend, a few services in the backend and IS4 as a token provider. I keep all user data (email, passwords, avatar etc.) in the AspNetUsers ...
0
votes
1
answer
43
views
ASP.NET Core with multiple authorization providers
I have a small web application to build on ASP.NET Core and it has both an UI and an API for external consumption.
I have some restrictions in terms of infrastruture so this would be hosted as a ...
0
votes
0
answers
31
views
Indentity Server 4 behind a Ocelot gateway
I have set up a gateway which is listening on port 9001.
An identity server 4 with .net core identity on port 9002.
An MVC Web APP on port 9003.
I would like to use Ocelot as the only entry point, but ...
0
votes
0
answers
51
views
IdentityServer4 with ASP.NET Identity and client credentials flow
I have IdentityServer4 (IDS4) working with multiple apps (Blazor WASM, ASP.NET Core API) using authorization_code. I'm using ASP.NET Identity for all apps.
I added one more API controller to ...
2
votes
0
answers
26
views
runnig duende identity server in docker
I have microservice application in .Net 6 and I containerize all of the services and run them in https (localhost) . but the problem is Taht the other services can not find the identity server . and ...
1
vote
1
answer
38
views
Using Duende IdentityServer with a mix of clients, including Blazor WASM and ASP.NET Web Forms
We have a legacy Web Forms app that we intend to slowly port over, module by module, to Blazor WASM. As we do not have the capacity to rebuild everything in Blazor straight away, we are going to have ...
0
votes
0
answers
30
views
İdentityServer4 ResourceOwnerPassword granttype always return 401 unauthorized in api controller
I want to use identityserver4 in my api. But my controller always returns a 401 (unauthorized) response. What is the mistake here? I use localapiauthentication and .net6.0
public class Startup
{
...
0
votes
0
answers
30
views
Disposed RSACng when using signing credential in a singleton
I'm trying to use pem certificate for signing tokens in the IdentityServer (where they are being passed into a singleton service).
public void ConfigureServices(IServiceCollection services)
{
...
3
votes
1
answer
62
views
"Authority mismatch on settings vs. signin state" with OIDC Client when trying to grant access between 2 client Applications
We have two .net core with angular applications where we have used Openid server and client
https://localhost:80 : Parent Application
https://localhost:85 : Child Application
We want to authenticate ...
0
votes
1
answer
33
views
How do I protect my signup/ registration apis
I'm using identity server to protect my apis, to access the backend resources, a client must request a token based on user credentials and pass them to the next apis to consume them. My question is, ...
0
votes
0
answers
9
views
Should Otp verification happen in a standalone api endpoint or in the actual action api
I have a mechanism to generate and verify otps in my mobile app backend and not sure what the best way to design the api structure is, should the otp generation, otp verification, and the actual ...
1
vote
1
answer
22
views
Concurrent login with identity server
I have Identity Server 4 as a token issuer and have multiple microservices (resources) that are authorized using IdentityServerAuthentication. Currently Identity Server issues multiple tokens for a ...
0
votes
1
answer
26
views
Duende IdentityServer 6.20 .Net6.0 "AuthenticationScheme: idsrv was not authenticated"
I have a fully functioning Duende IS6 solution, servicing an Angular client. However the Seq log output contains a lot of these entries with each request:
{
"@t": "2023-01-08T19:14:...
0
votes
1
answer
57
views
Identity server 4 Obtain role from token in webApi app
I have correctly configured identity server 4 which authorizes a web api for method access. However, I cannot use the roles in the web api, the role is in the token but when it arrives on the web api ...
0
votes
0
answers
18
views
How can I add a claim to a Device identity token in IdentityServer4?
I am using IdentityServer4 to authorize a device using Device Flow. When the device is authorized I need to add a claim that is returned with the Device's token. The data for that claim is acquired ...
0
votes
1
answer
25
views
Identity server 4 token retrieve with username and password
Through visual studio 2022 I created a web app that hosts an IDS4 server for generating tokens and the login system via asp.net core identity.
As a client I have an MVC web application that has a ...
0
votes
1
answer
25
views
IdentityServer4 - End Session in POST
IdentityServer4 documentation explains how to use the end session endpoint using the HTTP method GET (https://identityserver4.readthedocs.io/en/latest/endpoints/endsession.html).
Is it possible to ...
0
votes
1
answer
40
views
Crash after upgrading from IdentityServer4 to Dundee 6.2 - Sequence contains more than one element
I'm upgrading an existing project from .Net Core 2.2 & IdentityServer4 2.4 to .Net 7 and Duende 6.2.0. I performed this update incrementally, by upgrading to IdentityServer4 3.0, then 4.0, and ...
0
votes
0
answers
17
views
OIDC challenge is the browser history for ASP.Net Core client
I use IdentityServer (aka Duende) ver. 6 and ASP.Net Core client as a BFF provider for the frontend with standard .Net Core Microsoft OIDC middleware .AddOpenIdConnect for the Authorization Code flow....
0
votes
0
answers
65
views
identityServer - can't work with 2 tabs of 2 clients because of regeneration of token
i'm having the following issue: I have 2 clients with one identity server connected. User is logged in.
when client 1 is opened on tab 1. and from client 1 i open a link in new tab to client 2. In ...
0
votes
0
answers
22
views
Install templates of Identity server 4
I Install the Identity server 4. But when I run
dotnet new is4inmem
in a command window, I get an error
No templates found matching : 'is4inmem.'
I try to reinstall the templates but the response ...
0
votes
1
answer
237
views
Unable to run .NET Core 7 with Identity Server on IIS
I've created with Visual Studio 2022 a new project .Net Core 7 + Angular with in-app authentication (identity server). Running the app locally works with no problems. I deployed it to a hosting ...
0
votes
1
answer
28
views
Identity Server and custom user class
I am using Identity Server 4 with a Blazor WASM App and a WebApi
Serverside I use HttpContextAccessor to retrieve information about the logged in user.
HttpContext.User.Identity returns a ...
0
votes
0
answers
21
views
Failure to create identity server tables 4
I have used identity and identity server 4 in my project. But the main identity server tables are not created for me like the client ...
Any help guiding me would be appreciated
Context:
public class ...
0
votes
0
answers
50
views
duende identity server 6.2 session managment
I had indetity server4 and I had to add session management. I upgrated the application version to duende identityserver 6.2. And created a database based on PersistedGrantDbContext and ...
0
votes
1
answer
44
views
IdentityServer Refresh AccessToken
Thank you for your time.I configured the AccessTokenLifetime in ids4 to be 65 seconds, and the expiration time in the user.Claims acquired by api when I accessed the api on the front end was assumed ...
0
votes
1
answer
82
views
IdentityServer4.AccessTokenValidation + .NET 6 compatibility error - NuGet restore?
I am upgrading an existing .NET core 3.1 app, to .NET 6. We were using IdentityServer4 for token validation.
After upgrading to .NET 6, everything appears to work successfully. I can build, launch, ...
1
vote
1
answer
46
views
Need to redirect to sign-oidc page after logout
In Client application i have set below configuration and in postLogoutRedirectUri parameter set as sign-oidc url but still able to redirect to singin-oidc url and Auth service i have used using ADFS , ...
0
votes
1
answer
47
views
IdentityServer API unauthorized if hosted in IIS
I added additional API to the Duende IdentityServer 6.2 as described here. Then I tried to access it from a sample App, using typed httpClient using their own library called AccessTokenManagement (aka ...
0
votes
0
answers
78
views
IdentityServer4.Validation.TokenRequestValidator: Invalid authorization code
I am using Identity Server 4 With Microsoft Blazor application. Authentication process works fine in local. But after deploying changes in azure it was working fine before one week. Suddenly it's ...
0
votes
0
answers
29
views
(.NET) How to add a mandatory admin role/policy who has authorization to all the API?
I need to add an admin role who can hit all the application endpoint regardless of the "Authorize" attributes in controllers or a global policy. The API is made in .NET 6.
0
votes
1
answer
71
views
service to service does not accept a token from IdentityServer
i am learning ASP.NET and IndentityServer4
I made a server that generates a token for me according to the tutorial, I get it both from the postman and from the controller of my "client" but ...
0
votes
1
answer
29
views
Unable to retrieve document from: 'https://localhost:5005/.well-known/openid-configuration' on dockerising the project
I have created a microservice on .Net Core 3.1. I have used Identityserver4 as IDPClient. The project is working fine locally. After dockerising the project(Docker-compose), and calling the ...
0
votes
0
answers
28
views
I get duplicate claims from IdentityServer in ASP.NET Core
Any ideas how this is possible? I really can't figure this out.
I've been trying to solve it, but I ended with no results.. I expected only to have a single role 'admin'..
0
votes
1
answer
332
views
JWT_SESSION_ERROR in next auth with next.js
In local devlopment signin is working fine but
Below error is thorwn by next-auth while returing from our custom oauth provider with production build at dev url like https://dev-app.xyz.com
...
2
votes
2
answers
213
views
Logging out not working - Asp.net core identity server
I have a application where i have used identity server for authentication. I have some issue over there. Whenever i tried to log out from the system the system doesn't log out. It redirects to home ...
0
votes
0
answers
11
views
is it possible to assign a value when Cookie is being refreshed/renewed in identityserver? or is there an alternative to single session?
I am using IdentityServer and I need to modify a value(I need to have only a single user logged in per session but I need to change a value into the user before it removes the claims from the current ...
0
votes
0
answers
17
views
IdentitServer4 System.InvalidOperationException: 'No storage mechanism for grants specified
I'm trying to build a simple project using Asp.Net Core and Identity Server 4. But I'm faced with the error
No storage mechanism for grants specified. Use the 'AddInMemoryPersistedGrants' extension ...
1
vote
1
answer
24
views
How do I debug this Identity Server error: unauthorized client Invalid redirect_uri in this Blazor application
Let me provide a bit more context, I am working on a task to make a copy of a working Blazor application where I made a copy of the folders under c:/inetpub/wwwroot/. One folder, we will call the /BQM ...
0
votes
0
answers
31
views
How many times method GenerateClaimsAsync invokes?
I have a problem with understanding how UserClaimsPrincipalFactory<TUser, TRole> class works.
In my situation the method GenerateClaimsAsync invokes three times and I don't know why.
I use ...
2
votes
1
answer
45
views
Identity Server 4 - Role policy not workink
I have a problem catching a user role from a JWT token in my API. I added a role to my token and added a policy with the required role, but it's not working as I expected. Every time when I have ...
0
votes
1
answer
61
views
Remove offline_access scope in identity server 4 we;;-known configuration
I have .NET Core app with IdentityServer 4 in it.
I want to hide/remove one entry of "scopes_supported" under .well-known/openid-configuration endpoint.
Basically it shows all my custom ...
0
votes
1
answer
79
views
How to get Client Info inside API Method for Identity Server 4
I have a project in Identity server 4 where I have a create method in middleware application so I wants to set some default value based on Client invoking APIs (may be client name)
Scenario, We have a ...
0
votes
1
answer
35
views
Problem with ssl while using wsl and identity server 4
I have developed the simple identity server application with entity framework storage for user credentials and the client app asp.net core MVC with OpenId authentication. It worked properly on the ...