Questions tagged [openiddict]

Versatile OpenID Connect stack for ASP.NET Core and Microsoft.Owin (compatible with ASP.NET 4.6.1). For official support, please visit https://github.com/openiddict/openiddict-core/issues/new/choose.

Filter by
Sorted by
Tagged with
0 votes
0 answers
44 views

openiddict asp.net core : Authenticating error while running in docker while running in without docker it runs perfectly

Error: at reosurce server The introspection response returned by http://identserver:5999/connect/introspect was successfully extracted: {"active": false}. OpenIddict.Validation.AspNetCore ...
0 votes
0 answers
39 views

openiddict "Cannot redirect to the authorization endpoint, the configuration may be missing or invalid"

Basicly in my solution there are two projects. One is regular default api project(WeatherForecastController) other is my openiddict project. My main goal is to use an access token that created by ...
0 votes
0 answers
26 views

OpenIddict with ASP.NET Web Forms Client

I'm new to OpenIddict and OpenID in general, but have managed to get an OpenIddict authentication server up and running, with an Angular app and dotnet core WebAPI client, all on different domains but ...
0 votes
1 answer
97 views

Does OpenIddict violates OAuth and OpenId Connect specifications?

I could not find any information in the documentation of OpenIddict regarding this. Let's look at one of the official OpenIddict samples. // If the consent is implicit or if an authorization was found,...
  • 312
0 votes
0 answers
17 views

OpenIddict - Using custom token descriptor to populate additional custom properties

I have created a custom token entity, custom token store, custom token manager, custom token descriptor so that I can add custom properties to my custom token entity and persist into the custom token ...
0 votes
0 answers
26 views

OpenIddict: "The specified grant type (client_credentials) is not listed as a supported grant type" when calling AuthenticateUsingClientCredentials

I'm currently trying out OpenIddict in a web server with the Client Credentials Flow. When calling AuthenticateUsingClientCredentialsAsync() the server responds with the following error: The specified ...
  • 103
0 votes
0 answers
45 views

Token Authentication using OpenIddict does not work with Local IIS Server but works with IIS Express in ASP.NET Core 6.0

I am using OpenIddict in .Net Core 6.0 for token-based authentication and authorization for my REST/Web API It works within Visual Studio IIS Express but not on my Local IIS server. When I call the ...
  • 797
0 votes
0 answers
20 views

OpenIddict grant_type password is invalid client

I'm using OpenIddict with password flow or password grant type. following the sample here https://github.com/openiddict/openiddict-samples for Hollastin I tried to make request the token with form ...
  • 320
0 votes
0 answers
28 views

How to populate OpenIddict Token custom class properties before it is saved to the database

I want to customise AuthToken by adding a new column to the database. I've created a custom class with an additional property that inherits from OpenIddictEntityFrameworkCoreToken<Guid, ...
-1 votes
0 answers
42 views

How to solve IDX20803: Unable to obtain configuration from "siteurl"/.well-known/openid-configuration

How to solve IDX20803: Unable to obtain configuration from https:/myserver/.well-known/openid-configuration released authorization server and api in to IIS .Net core version 7 Can you please help me ...
0 votes
1 answer
86 views

OpenIdDict Velusia Example: What triggers UserInfo to be hit?

I modelled off strongly off of the Velusia OpenIddict sample (Authorization Code Flow): In the client, the first step to authorization is to go to the login redirect: [HttpGet("~/login")]...
  • 111
0 votes
0 answers
67 views

How to implement claim-based multi-tenancy with OpenIddict?

This a peculiar problem, I suppose. I'm writing my own authorization server both as a way to learn, and as a way to POC our potential future SSO solution for all our in-house apps at the company where ...
0 votes
0 answers
15 views

How can fix the error cannot download OpenIddict examples

I try to clone the openiddict samples repo but I get the error: git.exe clone --progress -v "https://github.com/openiddict/openiddict-samples/tree/dev/samples" "C:\Github\samples" ...
1 vote
0 answers
44 views

OpenidDict 4.0 + MSAL.js fails for Code flow + PKCE due to sending scopes

Problem Openididct v4 started declining the PKCE's Access Token request (RFC 7636, when the client exchanges the authorization code) if the client passes scopes (ref to the line in the code enforcing ...
  • 7,870
0 votes
1 answer
54 views

How can I change authority runtime on OnRedirectToIdentityProvider event listener?

I am using openid dict client and i want to change authority url runtime using OnRedirectToIdentityProvider. options.Events.OnRedirectToIdentityProvider += async context => { ...
0 votes
1 answer
70 views

Migrating to Openiddict 4.0.0 breaks HotChocolate GraphQL authorization for client credentials flow if token encryption is enabled

I've an ASP.NET Core project which hosts both an identity server using Openiddict and a resource server using HotChocolate GraphQL package. Client-credentials flow is enabled in the system. The token ...
0 votes
0 answers
25 views

ADFS WebProvider returns 401 for UserInfo endpoint

After integrating the WebProvider for ActiveDirectoryFederationServices from preview 4.1.0-preview-1.23108.18, a 401 occurs after the frontchannel redirect and userinfo call. Probably this is due to ...
  • 1
0 votes
1 answer
81 views

Updating session cookie on first request to a site and add to custom header on additional requests

I'm using ASP.NET Identity and OpenIddict for a custom authorization server in MVC / Razor Pages. I'm supporting most OpenID flows with OpenIddict and user and admin areas with ASP.NET Identity. The ...
0 votes
0 answers
47 views

OpenIddict Client not passing default scopes to authentication request

When adding a client registration in OpenIddict (via OpenIddictClientRegistration), the registration class has a Scopes property with the description: Gets the list of scopes sent by default as part ...
1 vote
1 answer
104 views

OpenIddict 4 WebProviders does not configure external authentication schemes

I am just wondering if anyone has some experience with this. I am trying out OpenIddict 4.0.0 to put together a real-life solution with the new Identity UI and razor pages approach. However when I ...
0 votes
0 answers
72 views

OpenIdDict distributing client secret

I'm implementing solution, using OpenIdDict library for authorization/authentication, for merchant stores. Now creating OpenIdDict application for every merchant, also every merchant might have ...
1 vote
0 answers
122 views

OpenIddict configuration

I'm in need of a detailed explanation on how I should configure OpenIddict in ASP.NET Core 7. I have been looking at the available examples and documentation for a week now. But I do not understand ...
  • 11
0 votes
1 answer
96 views

Can two different versions of EF Core be used by two separate projects that then reference each other?

I have a .NET solution which consists of some .NET Standard 2.0 class libraries, a few .NET Core 5.0 console apps, a .NET Framework 4.8 MVC website and .NET Framework 4.8 Web API. We use EF Core 3.1.x ...
0 votes
1 answer
66 views

OpenIddict - Customise Invalid Token response to include a JSON body

If I send a request into my API with an invalid access token, I get the following response: Base Address: https://localhost:54701/ Token Expired: True IsSuccessStatusCode: ...
1 vote
0 answers
69 views

Migrating from OWIN .NET Framework to OpenIddict .NET Core

I have an existing .NET Framework Web API currently in production which is in the process of being upgraded to .NET 6. The application uses the built-in .NET Framework OWIN solution for generating ...
0 votes
1 answer
90 views

Openiddict UseSystemNetHttp vs UseLocalServer

I'm trying to integrate OpenIddict to my application. My target system consist of one AuthServer which should issue oidc access_token and a set of web services (Service Providers) which are hosted as ...
1 vote
0 answers
252 views

Best practice when using OpenIddict application properties

I'm using the Properties column in my OpenIddict applications to store some metadata about an application instead of using a custom entity - comments on this post custom properties within token imply ...
0 votes
1 answer
101 views

The specified 'scope' is invalid. while refreshing token

I'm migrating from id4 to openiddict. So far everything is working well. Authorizing and getting a token via the authorization_code grant works fine. Except for when I want to refresh a token. I'm ...
0 votes
1 answer
131 views

The specified 'redirect_uri' is not valid for this client application in OpenIdDict in ASP.NET Core

I have created two project and setup server in one project and in another setup a client. I have created database table to store the client information. I have also stored the RedirectUris in the ...
0 votes
0 answers
48 views

Trying to Authenticate using CookieAuthenticationDefaults.AuthenticationScheme with OpenIddict through angular client application

Trying to Authenticate using CookieAuthenticationDefaults.AuthenticationScheme with OpenIddict through angular client application but cookie not authenticated. does anyone know whats the issue [...
0 votes
0 answers
83 views

Stuck on this OpenIddict issue while validation with client creadentials token

System.InvalidOperationException: An identity cannot be extracted from this request. This generally indicates that the OpenIddict server stack was asked to validate a token for an endpoint it doesn't ...
1 vote
1 answer
207 views

OpenIdDict userinfo endpoint/controller not executed

I am using openiddict and trying to retrieve /userinfo, however, my userinfo controller never executes when debugging, but I do receive a response from the api. response: { "sub": "...
  • 2,304
0 votes
0 answers
242 views

How to disable refresh token using angular-auth-oidc-client and openiddict?

I am using angular-auth-oidc-client lib with openiddict as identity server: openiddict config: .AddServer(options => { // Enable the authorization, logout, token and userinfo endpoints. ...
1 vote
0 answers
157 views

OpenIddict + postman: The specified 'redirect_uri' is not valid for this client application

Im unable to run an authentication flow with postman using openiddict i get the error: error:invalid_request error_description:The specified 'redirect_uri' is not valid for this client application. ...
  • 2,304
0 votes
0 answers
192 views

ClaimsIdentity cant access methods in official OpenIdDict Samples

I have been very frustrated trying to use openiddict. I can't use any of the pre-existing sample since their ClaimsIdentity uses methods that to me aren't available, for example the identity.SetClaims(...
0 votes
0 answers
35 views

How to reload configuration in OpenIdDict?

I'm using instrospection (OpenIdDict v3.1.1) and have 1 application which can work in 2 modes: standalone mode, proxy mode - current instance (proxy) forwards request to second instance (master). In ...
0 votes
0 answers
32 views

SigningKeys per application, is supported in openiddict 3?

I've been working in a POC with OpenIddict v3, assessing if it covers all the use cases in our currently IDServer. The only use-case I don't find how to workaround, it's that we have symetric or ...
0 votes
0 answers
314 views

How to authorise with Openiddict in integration tests?

I've got an ASP.NET Core application. The configuration regarding Openiddict is as follows: builder.Services.AddOpenIddict() // Register the OpenIddict core components. .AddCore(options ...
  • 1,400
1 vote
0 answers
131 views

OpenIddict using resource server 401 Error: Requires an authenticated User

I'm passing a token with the authorization: bearer {token} header. The {token} was just issued by the OpenIddict server which is using DataProtection() to create reference tokens. The resource server ...
1 vote
1 answer
157 views

Blazor WASM on ASP.NET Core with Open Iddict gRPC unauthorized requests not working even with [AllowAnonymous]

I have blazor wasm app hosted on asp net core and connected by grpc-web. It works perfectly with authorized user but I cant make unauthorized grpc calls. I get this in logs: OpenIddict.Server....
0 votes
1 answer
294 views

OpenIddict in abp framework - deploy in containerized environment (k8s)

abp version 6.0, tiered (.Web, .HttpApi.Host, .AuthServer), MVC. The following messages appear in .AuthServer. Client validation failed because 'https://webpage_url/signin-oidc' was not a valid ...
  • 1
0 votes
1 answer
392 views

How to use OpenIddict AuthServer and Web API in same project

I've built an OpenIddict OAuth server using the marvelous guide by Robin van der Knaap although I've actually implemented it using Identity instead of cookies. I'm also trying to run a Web API from ...
0 votes
0 answers
96 views

Suppress `.AspNetCore.OpenIdConnect.Nonce` cookie for Auth Code Flow redirects [OpenIdDict]

OpenIdDict generates nonce and passes it in the query string and cookie in the Auth Code Flow redirects. Is there a way to constraint nonce to the URL only and don't generate .AspNetCore.OpenIdConnect....
  • 7,870
0 votes
1 answer
182 views

Delete the expired or invalid openiddict tokens used in azure function

I am working on an azure function which is a part of a system. The authentication/ authorization of system is controlled by OpenIdDict library. After using our system for sometime in our production, ...
  • 118
1 vote
1 answer
178 views

how to solve react native UI login problem "This server only accepts HTTPS requests"

I create MVC template & react native I do all steps in Getting-Started-React-Native but when I want to login in react native app I get this error The response was successfully returned as a JSON ...
1 vote
1 answer
64 views

How to force creation of OpenIddict tables in not empty DB

Does anybody know whether there is a way to use default OpenIddict storage functionality in a project which doesn't use Entity Framework and has not empty DB? I'm trying to integrate Openiddict server ...
1 vote
1 answer
533 views

OWIN Authentication, Authorization code migration from .net framework to .net 6 (Token based Authentication)

We have implemented OWIN Authorization to our Web Api's in .Net framework project. Now we are migrating this to .Net6. It seems in .net6/.net core owin authentication is not supported. I don't find ...
0 votes
2 answers
218 views

ASP.NET Core Web API - authorize enduser applications and daemon app

We have a client application (with logged in user) and daemon services (just API no users) accessing a Web API. The Web API methods need to check users role claims and scopes before executing the ...
  • 487
0 votes
0 answers
191 views

OpenIddict returns "The specified grant type is not supported" when api asks for a token to communicate with another api

My architecture looks like below The client can log in and call the individual APIs with any issue. However, when API 1 tries to call API 2, the token request fails with “The specified grant type is ...
  • 487
0 votes
1 answer
244 views

Refresh Identity Cookie claims after user makes changes to profile with openiddict

I'm building an app that will use openiddict and asp.net core identity for my identity server and the client is a Blazor WASM BFF app. I've opted to use cookies for the Blazor app for security ...
  • 981

1
2 3 4 5
9