View source for Identity Server 4

[[Category:CSharp]]
[[Category:ASP.NET]]
[[Category:Security]]
= Sample Usage =
== Nuget ==
install IdentityServer4 Nuget package. 
== Startup.cs ==
=== ConfigureServices ===
 services.AddIdentityServer()
    .AddDevelopmentSigningCredential()
    .AddInMemoryApiResources(Config.GetAllApiResources())
    .AddInMemoryClients(Config.GetClients());
Last two lines are explained below in Config class.  
=== Configure ===
 app.UseIdentityServer();

== Config.cs ==
=== Resources ===
Here we list our Api's 
 public static IEnumerable<ApiResource> GetAllApiResources()
 {
   return new List<ApiResource>
   {
      new ApiResource("MyFirstApi", "Test api" 
   };
 }


=== Clients ===
We list clients and the list of APi's which they can access  
 public static IENumerable<Client> GetClients()
 {
   return new List<Client>
   {
      new Client
     {
         ClientId = "client",
         AllowedGrantTypes = GrantTypes.ClientCredentials, 
         ClientSecrets = 
         { 
            new Secret("secret".Sha256())
         }
        AllowedScopes = { "MyFirstApi" }
      }
   };
 }

==== AllowedScopes ====
List of Api's the client can access



== Discovery Page ==
http://localhost:5000/.well-known/openid-configuration


Get '''token_endpoint''' from discovery page 

== APi ==
=== Nuget ===
install '''IdentityServer4.AccessTokenValidation'''

=== ConfigureServices ===
 services.AddAuthentication("Bearer")
    .AddIdentityServerAuthentication(options => 
    {
        options.Authority = "http://localhost:5000";
        options.RequireHttpsMetadata = false;
        options.ApiName = "MyFirstApi";
    }
=== Configure ===
 app.UseAuthentication();
 app.UseMvc();
=== controller ===
in the beginning of the controller 
 [Authorize]

== Client ==
=== Nuget ===
Install '''IdentityModel'''
=== Usage ===
 var disco = await DiscoveryClient.GetAsync("http://localhost:5000");
 if (disco.IsError)
 {
    Console.WriteLine(disco.Error);
    return;
 }
 //Grab a bearer token
  var tokenClient = new TokenClient(disco.tokenEndpoint, "client", "secret");
  var tokenResponse = await tokenClient.RequestClientCredentialsAsync("MyFirstApi");
 if (tokenResponse.IsError)
 {
    Console.WriteLine(tokenResponse.Error);
   return;
 }
 Console.WriteLine(tokenResponse.Json);
 Console.WriteLine("\n"); 
=== Consume Token ===
==== POST ====
 var client = new HttpClient();
 client.SetBearerToken(tokenResponse.AccessToken);
 
 var customerInfo = new StringContent(
  JsonConvert.SerializeObject(
     new {Id = 10, Firstname = "Ali" }), Encoding.UTF8, "application/json);
  
  var createCustomerResponse = await client.PostAsync("https://localhost:59337/api/customers", customerInfo);
  if (!createCustomerResponse.IsSuccessStatusCode)
 {
    Console.WriteLine(createCustomerResponse.StatusCode);
 }
==== GET ====
  var getCustomerResponse = await client.GetAsync("https://localhost:59337/api/customers");
  if (!getCustomerResponse.IsSuccessStatusCode)
 {
    Console.WriteLine(getCustomerResponse.StatusCode);
 }else
 {
    var content = await getCustomerResponse.Content.ReadAsStringAsync();
   Console.WriteLine(JArray.Parse(content));
 }
 Console.Read();
= Details =
== GrantTypes ==
=== ClientCredentials ===
This type can be used Machine to Machine (Thrusted 1st party) applications 

no user involved
=== Resource Owner Password ====
This type can be used End User to Api applications 

user involved, trusted 1st party apps (spa, js, native 1st party
=== Authorization Code ===
google, facebook, etc, user involved, web app (server app)
=== Implicit === 
web applications, user, server side web apps
=== Hybrid ===
Combination of implicit and authorization code, user, native apps, server side web apps, native desktop, mobile apps

= Templates =
To install templates
 dotnet new -i identityserver4.templates
in command prompt go to IdentityServer project and type (is4ui is a template already installed with the line above)
 dotnet new is4ui