openid-connect

Is it safe to store an access_token in a user claim for authorization?

纵然是瞬间 提交于 2020-08-26 01:29:27
问题 So, I was having trouble with Bearer authentication while setting up IdentityServer4. Basically, I wasn't able to call my API resource and was getting a 401 error. When I added the Authorization header with the access_token. I was able to get the data from my web request. using (var client = new HttpClient()) { client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", authToken); var content = await client.GetStringAsync("http://localhost:5000/localapi"); } The way

signin-oidc Also Tries to Call Internal FQDN

杀马特。学长 韩版系。学妹 提交于 2020-08-10 22:52:59
问题 We have an ASP.NET Core application that uses the OpenId Connect authentication protocol. In Azure AD B2C we setup the external FQDN (domain alias) (https://externallink.company.com) as the redirect URI. What we noticed is that after redirecting to https://externallink.company.com/signin-oidc it then redirects to the internal FQDN https://internallink.company.com/signin-oidc which is the URL of the App Service in Azure. The internal link is not accessible outside the company's network and

signin-oidc Also Tries to Call Internal FQDN

99封情书 提交于 2020-08-10 22:48:18
问题 We have an ASP.NET Core application that uses the OpenId Connect authentication protocol. In Azure AD B2C we setup the external FQDN (domain alias) (https://externallink.company.com) as the redirect URI. What we noticed is that after redirecting to https://externallink.company.com/signin-oidc it then redirects to the internal FQDN https://internallink.company.com/signin-oidc which is the URL of the App Service in Azure. The internal link is not accessible outside the company's network and

How to get the id_token in blazor web assembly

北城以北 提交于 2020-08-10 19:54:51
问题 I have got a Blazor WebAssembly (latest 3.2.0) app with oidc Authentication. The asp.net authentication provides a way to get the accessToken but can't see any means to access the id_token (jwt) which is required for my scenario. I can see the id_token in the local storage of the browser. What would be best way to access it? Thanks 回答1: You can read it from the session storage using JSInterop, it is stored at key oidc.user:{app baseUri}:{app client id} : @inject IJSRuntime JSRuntime @inject