AspNet.Security.OpenIdConnect.Server is an OpenID Connect server middleware that you can use in any ASP.NET 5 application and that works with the official OpenID Connect client middleware developed by Microsoft or with any standards-compliant OAuth2/OpenID Connect client.
The latest official release can be found on NuGet and the nightly builds on MyGet.
Based on OAuthAuthorizationServerMiddleware from Katana 3, AspNet.Security.OpenIdConnect.Server exposes similar primitives and can be directly registered in Startup.cs using the UseOpenIdConnectServer extension method:
app.UseOpenIdConnectServer(options => {
options.Provider = new OpenIdConnectServerProvider {
// Implement OnValidateClientRedirectUri to support interactive flows like code/implicit/hybrid.
OnValidateClientRedirectUri = context => {
if (string.Equals(context.ClientId, "client_id", StringComparison.Ordinal) &&
string.Equals(context.RedirectUri, "redirect_uri", StringComparison.Ordinal)) {
context.Validate();
}
return Task.FromResult(0);
}
// Implement OnValidateClientAuthentication to support flows using the token endpoint.
OnValidateClientAuthentication = context => {
if (string.Equals(context.ClientId, "client_id", StringComparison.Ordinal) &&
string.Equals(context.ClientSecret, "client_secret", StringComparison.Ordinal)) {
context.Validate();
}
return Task.FromResult(0);
}
};
});See https://github.com/aspnet-security/AspNet.Security.OpenIdConnect.Server/tree/vNext/samples/Mvc for a sample using MVC 6 and showing how to configure a new OpenID Connect server using a custom OpenIdConnectServerProvider implementation to validate client applications.
Need help or wanna share your thoughts? Don't hesitate to join our dedicated chat rooms:
- JabbR: https://jabbr.net/#/rooms/aspnet-contrib
- Gitter: https://gitter.im/aspnet-contrib/AspNet.Security.OpenIdConnect.Server
AspNet.Security.OpenIdConnect.Server is actively maintained by Kévin Chalet. Contributions are welcome and can be submitted using pull requests.
This project is licensed under the Apache License. This means that you can use, modify and distribute it freely. See http://www.apache.org/licenses/LICENSE-2.0.html for more details.