All Questions
39
questions
0
votes
0
answers
96
views
Microsoft.AspNetCore.Antiforgery.AntiforgeryValidationException while ASP.NET Core 8.0 MVC app trying to connect with IdentityServer4 App in IIS
We are migrating our projects from .NET 6.0 to .NET 8.0, where I am getting this error.
We have one ASP.NET Core MVC application which is trying to connect to the IdentityServer4 application for ...
1
vote
0
answers
84
views
RBAC in ASP .NET
I'm using asp .net idneitty and duende identity server so i have 2 tables in my data base ASPNETROLES and ApiScope (api1.read ,api1.write , .....) my probleme is that i want to assign those scopes to ...
1
vote
1
answer
936
views
What is the best way to implement different User Roles/Permissions depending on "Project"?
Our current API leverages ASP.Net Identity and Policy Based permissions for Authorization. It uses User Roles as claims for this. These claims are intercepted by a ClaimsTransformer class and the user ...
1
vote
0
answers
442
views
How to configure Google Authentication using IdentityServer4 avoiding external authentication error?
I am trying to configure Google authentication for my app using IdentityServer4. Here's my configuration code:
private static IServiceCollection AddGoogleAuthProviderServices(
this ...
3
votes
1
answer
255
views
What's the technical advantage of claim/role/policy authorization as opposed to plain check of a user's ID?
I used Identity Server and protected endpoints with policies and roles. Those are reflected in the access token I'm distributing to the client. Today, I got the suggestion that instead of protecting a ...
14
votes
4
answers
18k
views
IdentityServer4 Invalid Redirect_Uri Error
I created 3 separate projects, web api project, an web mvc project, and a asp.net core app. I am using IdentityServer4 with asp.net core identity. I have a project solution id that has the information ...
0
votes
1
answer
585
views
Identity Server 4 and relative URL
I have an application that includes a reactjs UI, .net core Web API and Identity Server 4 for authorization. The application works fine in my development environment.
Now, I am deploying it to staging(...
0
votes
2
answers
1k
views
Getting 401 from browser but 200 from postman with Asp.net core and Identityserver 4
I tried everything and I keep getting 401 error when I try to reach my api from a react App.
My Api is a asp.net core protected with Identity server.
From Postman, I can request an access token and ...
0
votes
1
answer
121
views
Hitting [Authorize] always redirects to /account/login in IdentityServer4
If I hit an endpoint that has the [Authorize] attribute, I get redirected to /Account/Login?returnUrl=XXX.
Is there a way to change this behavior? I've already changed LoginUrl in ...
0
votes
1
answer
940
views
Custom Authorization attribute doesn't allow authorize in asp.net core 3
.Net core app authenticates with IdentityServer. I'm working without https.
I created custom authorization attribute, but it doesn't allow authorize. And I can't catch a problem.
Logs:
dbug: Microsoft....
0
votes
1
answer
562
views
How do you properly grant access to an ApiResource for a given client in Identity Server 4.0.3?
Previously we could define the following configuration, and it would work:
public static IEnumerable<ApiScope> GetApiScopes() =>
new List<ApiScope>
{
new ApiScope(
...
0
votes
1
answer
934
views
Identity Server without Login
Im trying to implement IdentityServer authorization and my scenario is below:
we have one home page for all our application "www.vision2025.com" and i have link to my mvc application "...
0
votes
2
answers
694
views
Handling authorization with IdentityServer4
I'm extremely confused on how to use a centralized IDP with both authentication and authorization. The architecture for my project was to be a single web API and one React client. I wanted to keep ...
0
votes
1
answer
343
views
How to connect Asp.net core Identity user to IdentityServer4 user
I have an IdentityServer4 deployed with a backing SQL server database.
I also have an Asp.NET Core WebAppi services deployed tha is using IdentityServer4 as authority.
Then I have a Typescrip SPA ...
0
votes
1
answer
4k
views
How to add an authorization policy with multiple scopes?
options.AddPolicy("Account", policy => policy.RequireClaim(JwtClaimTypes.Scope, "account"));
options.AddPolicy("AccountWrite", policy => policy.RequireClaim(JwtClaimTypes.Scope, "account.write"))...