Questions tagged [openiddict]
Versatile OpenID Connect stack for ASP.NET Core and Microsoft.Owin (compatible with ASP.NET 4.6.1). For official support, please visit https://github.com/openiddict/openiddict-core/issues/new/choose.
421
questions
0
votes
0
answers
44
views
openiddict asp.net core : Authenticating error while running in docker while running in without docker it runs perfectly
Error: at reosurce server
The introspection response returned by http://identserver:5999/connect/introspect was successfully extracted: {"active": false}.
OpenIddict.Validation.AspNetCore ...
0
votes
0
answers
39
views
openiddict "Cannot redirect to the authorization endpoint, the configuration may be missing or invalid"
Basicly in my solution there are two projects. One is regular default api project(WeatherForecastController) other is my openiddict project. My main goal is to use an access token that created by ...
0
votes
0
answers
26
views
OpenIddict with ASP.NET Web Forms Client
I'm new to OpenIddict and OpenID in general, but have managed to get an OpenIddict authentication server up and running, with an Angular app and dotnet core WebAPI client, all on different domains but ...
0
votes
1
answer
97
views
Does OpenIddict violates OAuth and OpenId Connect specifications?
I could not find any information in the documentation of OpenIddict regarding this.
Let's look at one of the official OpenIddict samples.
// If the consent is implicit or if an authorization was found,...
0
votes
0
answers
17
views
OpenIddict - Using custom token descriptor to populate additional custom properties
I have created a custom token entity, custom token store, custom token manager, custom token descriptor so that I can add custom properties to my custom token entity and persist into the custom token ...
0
votes
0
answers
26
views
OpenIddict: "The specified grant type (client_credentials) is not listed as a supported grant type" when calling AuthenticateUsingClientCredentials
I'm currently trying out OpenIddict in a web server with the Client Credentials Flow.
When calling AuthenticateUsingClientCredentialsAsync() the server responds with the following error:
The specified ...
0
votes
0
answers
45
views
Token Authentication using OpenIddict does not work with Local IIS Server but works with IIS Express in ASP.NET Core 6.0
I am using OpenIddict in .Net Core 6.0 for token-based authentication and authorization for my REST/Web API
It works within Visual Studio IIS Express but not on my Local IIS server.
When I call the ...
0
votes
0
answers
20
views
OpenIddict grant_type password is invalid client
I'm using OpenIddict with password flow or password grant type. following the sample here https://github.com/openiddict/openiddict-samples for Hollastin
I tried to make request the token with form ...
0
votes
0
answers
28
views
How to populate OpenIddict Token custom class properties before it is saved to the database
I want to customise AuthToken by adding a new column to the database. I've created a custom class with an additional property that inherits from OpenIddictEntityFrameworkCoreToken<Guid, ...
-1
votes
0
answers
42
views
How to solve IDX20803: Unable to obtain configuration from "siteurl"/.well-known/openid-configuration
How to solve IDX20803: Unable to obtain configuration from https:/myserver/.well-known/openid-configuration
released authorization server and api in to IIS
.Net core version 7
Can you please help me ...
0
votes
1
answer
86
views
OpenIdDict Velusia Example: What triggers UserInfo to be hit?
I modelled off strongly off of the Velusia OpenIddict sample (Authorization Code Flow):
In the client, the first step to authorization is to go to the login redirect:
[HttpGet("~/login")]...
0
votes
0
answers
67
views
How to implement claim-based multi-tenancy with OpenIddict?
This a peculiar problem, I suppose. I'm writing my own authorization server both as a way to learn, and as a way to POC our potential future SSO solution for all our in-house apps at the company where ...
0
votes
0
answers
15
views
How can fix the error cannot download OpenIddict examples
I try to clone the openiddict samples repo but I get the error:
git.exe clone --progress -v "https://github.com/openiddict/openiddict-samples/tree/dev/samples" "C:\Github\samples"
...
1
vote
0
answers
44
views
OpenidDict 4.0 + MSAL.js fails for Code flow + PKCE due to sending scopes
Problem
Openididct v4 started declining the PKCE's Access Token request (RFC 7636, when the client exchanges the authorization code) if the client passes scopes (ref to the line in the code enforcing ...
0
votes
1
answer
54
views
How can I change authority runtime on OnRedirectToIdentityProvider event listener?
I am using openid dict client and i want to change authority url runtime using OnRedirectToIdentityProvider.
options.Events.OnRedirectToIdentityProvider += async context =>
{
...
0
votes
1
answer
70
views
Migrating to Openiddict 4.0.0 breaks HotChocolate GraphQL authorization for client credentials flow if token encryption is enabled
I've an ASP.NET Core project which hosts both an identity server using Openiddict and a resource server using HotChocolate GraphQL package.
Client-credentials flow is enabled in the system. The token ...
0
votes
0
answers
25
views
ADFS WebProvider returns 401 for UserInfo endpoint
After integrating the WebProvider for ActiveDirectoryFederationServices from preview 4.1.0-preview-1.23108.18, a 401 occurs after the frontchannel redirect and userinfo call.
Probably this is due to ...
0
votes
1
answer
81
views
Updating session cookie on first request to a site and add to custom header on additional requests
I'm using ASP.NET Identity and OpenIddict for a custom authorization server in MVC / Razor Pages. I'm supporting most OpenID flows with OpenIddict and user and admin areas with ASP.NET Identity.
The ...
0
votes
0
answers
47
views
OpenIddict Client not passing default scopes to authentication request
When adding a client registration in OpenIddict (via OpenIddictClientRegistration), the registration class has a Scopes property with the description:
Gets the list of scopes sent by default as part ...
1
vote
1
answer
104
views
OpenIddict 4 WebProviders does not configure external authentication schemes
I am just wondering if anyone has some experience with this. I am trying out OpenIddict 4.0.0 to put together a real-life solution with the new Identity UI and razor pages approach. However when I ...
0
votes
0
answers
72
views
OpenIdDict distributing client secret
I'm implementing solution, using OpenIdDict library for authorization/authentication, for merchant stores. Now creating OpenIdDict application for every merchant, also every merchant might have ...
1
vote
0
answers
122
views
OpenIddict configuration
I'm in need of a detailed explanation on how I should configure OpenIddict in ASP.NET Core 7.
I have been looking at the available examples and documentation for a week now.
But I do not understand ...
0
votes
1
answer
96
views
Can two different versions of EF Core be used by two separate projects that then reference each other?
I have a .NET solution which consists of some .NET Standard 2.0 class libraries, a few .NET Core 5.0 console apps, a .NET Framework 4.8 MVC website and .NET Framework 4.8 Web API.
We use EF Core 3.1.x ...
0
votes
1
answer
66
views
OpenIddict - Customise Invalid Token response to include a JSON body
If I send a request into my API with an invalid access token, I get the following response:
Base Address: https://localhost:54701/
Token Expired: True
IsSuccessStatusCode: ...
1
vote
0
answers
69
views
Migrating from OWIN .NET Framework to OpenIddict .NET Core
I have an existing .NET Framework Web API currently in production which is in the process of being upgraded to .NET 6.
The application uses the built-in .NET Framework OWIN solution for generating ...
0
votes
1
answer
90
views
Openiddict UseSystemNetHttp vs UseLocalServer
I'm trying to integrate OpenIddict to my application. My target system consist of one AuthServer which should issue oidc access_token and a set of web services (Service Providers) which are hosted as ...
1
vote
0
answers
252
views
Best practice when using OpenIddict application properties
I'm using the Properties column in my OpenIddict applications to store some metadata about an application instead of using a custom entity - comments on this post custom properties within token imply ...
0
votes
1
answer
101
views
The specified 'scope' is invalid. while refreshing token
I'm migrating from id4 to openiddict. So far everything is working well.
Authorizing and getting a token via the authorization_code grant works fine.
Except for when I want to refresh a token.
I'm ...
0
votes
1
answer
131
views
The specified 'redirect_uri' is not valid for this client application in OpenIdDict in ASP.NET Core
I have created two project and setup server in one project and in another setup a client. I have created database table to store the client information. I have also stored the RedirectUris in the ...
0
votes
0
answers
48
views
Trying to Authenticate using CookieAuthenticationDefaults.AuthenticationScheme with OpenIddict through angular client application
Trying to Authenticate using CookieAuthenticationDefaults.AuthenticationScheme with OpenIddict through angular client application but cookie not authenticated. does anyone know whats the issue
[...
0
votes
0
answers
83
views
Stuck on this OpenIddict issue while validation with client creadentials token
System.InvalidOperationException: An identity cannot be extracted from this request.
This generally indicates that the OpenIddict server stack was asked to validate a token for an endpoint it doesn't ...
1
vote
1
answer
207
views
OpenIdDict userinfo endpoint/controller not executed
I am using openiddict and trying to retrieve /userinfo, however, my userinfo controller never executes when debugging, but I do receive a response from the api.
response:
{
"sub": "...
0
votes
0
answers
242
views
How to disable refresh token using angular-auth-oidc-client and openiddict?
I am using angular-auth-oidc-client lib with openiddict as identity server:
openiddict config:
.AddServer(options =>
{
// Enable the authorization, logout, token and userinfo endpoints.
...
1
vote
0
answers
157
views
OpenIddict + postman: The specified 'redirect_uri' is not valid for this client application
Im unable to run an authentication flow with postman using openiddict
i get the error:
error:invalid_request
error_description:The specified 'redirect_uri' is not valid for this client application.
...
0
votes
0
answers
192
views
ClaimsIdentity cant access methods in official OpenIdDict Samples
I have been very frustrated trying to use openiddict. I can't use any of the pre-existing sample since their ClaimsIdentity uses methods that to me aren't available, for example the identity.SetClaims(...
0
votes
0
answers
35
views
How to reload configuration in OpenIdDict?
I'm using instrospection (OpenIdDict v3.1.1) and have 1 application which can work in 2 modes:
standalone mode,
proxy mode - current instance (proxy) forwards request to second instance (master).
In ...
0
votes
0
answers
32
views
SigningKeys per application, is supported in openiddict 3?
I've been working in a POC with OpenIddict v3, assessing if it covers all the use cases in our currently IDServer.
The only use-case I don't find how to workaround, it's that we have symetric or ...
0
votes
0
answers
314
views
How to authorise with Openiddict in integration tests?
I've got an ASP.NET Core application.
The configuration regarding Openiddict is as follows:
builder.Services.AddOpenIddict()
// Register the OpenIddict core components.
.AddCore(options ...
1
vote
0
answers
131
views
OpenIddict using resource server 401 Error: Requires an authenticated User
I'm passing a token with the authorization: bearer {token} header.
The {token} was just issued by the OpenIddict server which is using DataProtection() to create reference tokens.
The resource server ...
1
vote
1
answer
157
views
Blazor WASM on ASP.NET Core with Open Iddict gRPC unauthorized requests not working even with [AllowAnonymous]
I have blazor wasm app hosted on asp net core and connected by grpc-web. It works perfectly with authorized user but I cant make unauthorized grpc calls. I get this in logs:
OpenIddict.Server....
0
votes
1
answer
294
views
OpenIddict in abp framework - deploy in containerized environment (k8s)
abp version 6.0, tiered (.Web, .HttpApi.Host, .AuthServer), MVC.
The following messages appear in .AuthServer.
Client validation failed because 'https://webpage_url/signin-oidc' was not a valid ...
0
votes
1
answer
392
views
How to use OpenIddict AuthServer and Web API in same project
I've built an OpenIddict OAuth server using the marvelous guide by Robin van der Knaap although I've actually implemented it using Identity instead of cookies.
I'm also trying to run a Web API from ...
0
votes
0
answers
96
views
Suppress `.AspNetCore.OpenIdConnect.Nonce` cookie for Auth Code Flow redirects [OpenIdDict]
OpenIdDict generates nonce and passes it in the query string and cookie in the Auth Code Flow redirects.
Is there a way to constraint nonce to the URL only and don't generate .AspNetCore.OpenIdConnect....
0
votes
1
answer
182
views
Delete the expired or invalid openiddict tokens used in azure function
I am working on an azure function which is a part of a system. The authentication/ authorization of system is controlled by OpenIdDict library. After using our system for sometime in our production, ...
1
vote
1
answer
178
views
how to solve react native UI login problem "This server only accepts HTTPS requests"
I create MVC template & react native
I do all steps in Getting-Started-React-Native
but when I want to login in react native app I get this error
The response was successfully returned as a JSON ...
1
vote
1
answer
64
views
How to force creation of OpenIddict tables in not empty DB
Does anybody know whether there is a way to use default OpenIddict storage functionality in a project which doesn't use Entity Framework and has not empty DB?
I'm trying to integrate Openiddict server ...
1
vote
1
answer
533
views
OWIN Authentication, Authorization code migration from .net framework to .net 6 (Token based Authentication)
We have implemented OWIN Authorization to our Web Api's in .Net framework project. Now we are migrating this to .Net6. It seems in .net6/.net core owin authentication is not supported.
I don't find ...
0
votes
2
answers
218
views
ASP.NET Core Web API - authorize enduser applications and daemon app
We have a client application (with logged in user) and daemon services (just API no users) accessing a Web API.
The Web API methods need to check users role claims and scopes before executing the ...
0
votes
0
answers
191
views
OpenIddict returns "The specified grant type is not supported" when api asks for a token to communicate with another api
My architecture looks like below
The client can log in and call the individual APIs with any issue. However, when API 1 tries to call API 2, the token request fails with “The specified grant type is ...
0
votes
1
answer
244
views
Refresh Identity Cookie claims after user makes changes to profile with openiddict
I'm building an app that will use openiddict and asp.net core identity for my identity server and the client is a Blazor WASM BFF app.
I've opted to use cookies for the Blazor app for security ...