Questions tagged [thinktecture-ident-model]

Thinktecture IdentityModel is a versatile helper library to make working with Claims Based Authentication and Windows Identity Foundation easier.

Thinktecture IdentityModel is a versatile helper library to make working with Claims Based Authentication and Windows Identity Foundation easier.

The library is written by Dominick Baier, a security expert involved with the creation of WIF and co-author of Claims Based Identity & Access Control Guide. Source code for the project can be found on Git Hub. Many blog posts on the code can be found on Dominic's blog - leastprivilege.com.

Note - the tag name uses "ident" to fit within 25 character maximum

97 questions
9
votes
1 answer

AuthorizationCodeProvider: Create is never called, how do I generate the authorization code?

I'm setting up my own OAuth2 server. So far, I have succesfully implemented GrantResourceOwnerCredentials in my implementation of OAuthAuthorizationServerProvider. Now, because I am developing an app for our business, I want to implement the OAuth2…
Diana
  • 449
  • 4
  • 13
6
votes
1 answer

How do I use Windows auth with Identity Server 3?

My goal is a Angular app that consumes a web service, with users of the app/web service authenticated using Windows auth. Users should be able to log into a machine on our Windows domain, open a browser and use the Angular app without logging in…
6
votes
2 answers

System.Web.Mvc 5.2.2.0 vs. 5.2.3.0 versioning issue with aspnet_compiler

I have problems when turning on compilation of views in Visual Studio. I have a fairly standard ASP.NET MVC 5 application, with a lot of references. I reference System.Web.Mvc 5.2.3.0 (latest as of now), but the compilation seems to have problems…
6
votes
2 answers

How to decode JWT in PCL that's compatible with Xamarin Android

I have a Xamarin.Forms solution with a PCL assembly, Android application and iOS application, and I want to decode a JWT in the PCL. I can't use Thinktecture.IdentityModel.Core 1.1.0 or System.IdentityModel.Tokens.Jwt 4.0.0 or JWT 1.3.2 because none…
bosco
  • 457
  • 1
  • 5
  • 14
6
votes
2 answers

AngularJs ASP.NET WebApi Authentication with Thinktecture

I´m trying to make an AngularJs web that sends login and password to an ASP.NET WebApi backend and login this user with Thinktecture. I have Thinktecture working fine with other project, ASP.NET MVC, using WS-Federation. Now I´m trying to do…
6
votes
1 answer

How do ASP.NET Identity and Thinktecture.IdentityModel library relate to each other?

I've just started to implement security in our web api service (mostly as a research endeavor). And ran across new ASP.NET Identity and quite mature Thinktecture.IdentityModel library. As I'm not experienced with this whole bunch of…
Pavel Voronin
  • 13,503
  • 7
  • 71
  • 137
6
votes
2 answers

How to expire/update ClaimsIdentity Claims stored in a Web API SessionToken

I am using the excellent Thinktecture.IdentityModel library for performing authentication/authorization in an ASP.NET Web API project which will be consumed from mobile devices and possibly web clients. I am using basic authentication to…
6
votes
1 answer

Is it possible to access Controller/Action attributes from a Message Handler?

Is there a practical way to access the attributes decorating a controller or action from a Message Handler/ DelegatingHandler? From the diagram on Pedro Felix's blog entry, it looks like Message Handler's are too early in the pipeline and the info…
EBarr
  • 11,826
  • 7
  • 63
  • 85
5
votes
1 answer

Moving from Web API 2 Claim-Based-Authentication to ThinkTecture

I am finding that Microsoft's implementation of Claim-Based Authentication is not really up to the expectation of the true Claim-Based setup, and I seems like ThinkTecture is doing a good job of replacing Web API implementation. I am wondering if…
5
votes
1 answer

Thinktecture.IdentityModel with SimpleMembership

I want to use ASP.NET SimpleMembership to authenticate users that consume my WebAPI. Thinktecture has a wonderful authentication library called Thinktecture.IdentityModel (http://thinktecture.github.com/Thinktecture.IdentityModel.45/) with an…
4
votes
1 answer

dotnet core IdentityModel will not introspect tokens

I'm playing around with porting one of my API applications to dotnet core (v2), and probably the most important part of that upgrade is getting my Authentication working. To that end, I've added Thinkteture's IdentityModel package to my project. …
reidLinden
  • 4,020
  • 4
  • 31
  • 46
4
votes
1 answer

Missing owin context

I'm trying to use the ResourceAuthorize attribute from Thinktecture.IdentityModel, but everything stops because there is no owin context. I have a owin startup class which setups the authorization manager [assembly:…
Vegar
  • 12,828
  • 16
  • 85
  • 151
4
votes
4 answers

CORS not working for /token with Thinktecture.IdentityModel.45

(I'm sorry for both posting this issue here and at github, but I really need help with this..) I cannot enable CORS (System.Web.Http.Cors), when using authentication with Thinktecture.IdentityModel.45. I have a problem with the endpoint for token,…
4
votes
2 answers

Thinktecture - Unable to handle an encrypted SAML security token in Web API

In .net Web API, how can I configure Thinktechture Saml2SecurityTokenHandler to use a X509 Certificate to handle an encrypted SAML2 security token (decrypt it before validating). The token was encrypted by Identity Server by configuring the RP to…
RonyK
  • 2,644
  • 5
  • 32
  • 42
4
votes
2 answers

How should I secure my SPA and Web.API?

I have to implement a web site (MVC4/Single Page Application + knockout + Web.API) and I've been reading tons of articles and forums but I still can't figure out about some points in security/authentication and the way to go forward when securing…
1
2 3 4 5 6 7