Questions tagged [owin-security]

24 questions
9
votes
1 answer

Automatically login local user after registration with IdentityServer3

Using IdentityServer3 I need to automatically login and redirect a local user back to the client application after the user has completed a registration process. Is there an elegant way to do this? From my digging I suspect not, in which case is…
Gavin
  • 5,629
  • 7
  • 44
  • 86
8
votes
2 answers

Get DataProtectionProvider in MVC 5 for dependecy injection correctly

When trying to create a DataProtectionProvider manually I have stumbled upon the Microsoft documenation to DpapiDataProtectionProvider which says: Used to provide the data protection services that are derived from the Data Protection API. It is…
Santhos
  • 3,348
  • 5
  • 30
  • 48
4
votes
1 answer

Getting FacebookAuthenticationProvider instance in IdentityServer (Owin app)

I'm in the middle of an implementation of Thinktecture IdentityServer and am adding the capacity for mobile apps to provide natively obtained Facebook access tokens to the server, which will respond by locally authenticating the user. IdentityServer…
3
votes
2 answers

Registering OWIN IAuthenticationManager using Castle Windsor

Since IAuthenticationManager implementation can be retrieved from OWIN context, but Castle Windsor's component registration must be done before resolving components, how can I register IAuthenticationManager as component to get injected…
Matías Fidemraizer
  • 63,804
  • 18
  • 124
  • 206
3
votes
1 answer

Multiple cookies issue in OWIN security AuthenticationHandler

I am using Facebook Owin Authentication and more or less follow Microsoft sample. I am more or less following the First time user logs in, everything is ok. But if they sign out and try again, it seems like the previous .AspNet.Correlation.Facebook…
2
votes
1 answer

Authentication.Challenge not working with ApiController

With ApiController, Authentication.Challenge not prompting Microsoft login for SSO. it executes SignIn action method, with out any errors. If I change from ApiController to Controller then it's prompting. does any one know how to prompt for…
2
votes
1 answer

Is there anyway to shorten the DpapiDataProtectionProvider Protect output?

Using the provided template for an Asp.Net OWIN MVC app. I get an AccountController with a ForgotPassword method that calls... var code = await manager.GeneratePasswordResetTokenAsync(user.Id); After some research I find out that the code is…
matt_dev
  • 5,176
  • 5
  • 33
  • 44
1
vote
0 answers

How to map additional claims in IdentityServer 4 and MVC .Net 461 framework

We've been using Idsrv4 for about 2 years and we have successfully integrated with .Net Core Apis, .Net Core Apps. Now, we've got a legacy app which is costly to migrate to .Net Core from Net461. I'm trying to integrate our .Net 461 MVC app with…
TTCG
  • 8,805
  • 31
  • 93
  • 141
1
vote
1 answer

CORS doesn't work when GrantResourceOwnerCredentials references System.Web.Helpers

I have a simple (for troubleshooting only) implementation of OAuthAuthorizationServerProvider where I am overriding the GrantResourceOwnerCredentials method like this: public override async Task…
user1843640
  • 3,613
  • 3
  • 31
  • 44
0
votes
1 answer

Getting error OWIN start.cs while web API hosting on prem IIS server and api having azure ad bearer authentication

I have implemented azure ad authentication in SPA app and validating the token using OWIN start.cs. it is working fine in local environment. below code used for token validation: app.UseWindowsAzureActiveDirectoryBearerAuthentication(new…
0
votes
1 answer

External login (via ADFS) from identity server3 responds with http status code 504

I received federation metadata endpoint from customer which I used to configure WsFederationAuthentication in identityserver3. Everything works fine from developer machine like identity server login redirecting to adfs login page, but after…
0
votes
1 answer

invalid signature - JWT is required to have three segments

I am using OAuthAuthorizationServerProvider from Microsoft Owin Security and here is I am using code, var oAuthAuthorizationServerOptions = new OAuthAuthorizationServerOptions() { TokenEndpointPath = new…
user584018
  • 10,186
  • 15
  • 74
  • 160
0
votes
1 answer

ASP.NET Identity change password only admin and delete user without e-mail

I am trying to implement asp identity and owin security. I implement login, create new user and while create new user I assign role to that user. New user is registered with user name and password NOT EMAIL. Only administrator can add new users…
0
votes
1 answer

Why does SerializeTicket() return token with all scopes that resource allows for client

Using AspNet 4.6.2 to generate access tokens, using any Auth flow (have tried Code Flow, Implicit Flow, Client Credentials Flow), using the AuthenticationTokenCreateContext class from Microsoft.Owin.Security.Infrastructure, I have observed some…
JasTonAChair
  • 1,948
  • 1
  • 19
  • 31
0
votes
0 answers

Identity property of AuthenticationTicket class

Identity property of AuthenticationTicket class doesn’t contain the UPN claim for external users. Is this an expected behaviour? Any one issues with this previously? https://learn.microsoft.com/en-us/previous-versions/aspnet/mt152195(v%3Dvs.113) UPN…
s-a-n
  • 767
  • 2
  • 9
  • 27
1
2