├── .gitignore
├── LICENSE
├── README.md
├── Rsk.Samples.IdentityServer.AdminUIIntegration.Tests
    ├── AccountControllerIntegrationTests.cs
    ├── AccountControllerUnitTests.cs
    ├── AccountServiceUnitTests.cs
    ├── AdminUIIntegration.Tests.csproj
    └── ExternalProvidersServiceTests.cs
├── Rsk.Samples.IdentityServer.AdminUiIntegration.sln
└── Rsk.Samples.IdentityServer.AdminUiIntegration
    ├── AccessTokenValidation
        └── Selector.cs
    ├── CN=RSKSampleIdentityServer.pfx
    ├── Controllers
        ├── AccountController.cs
        ├── ConsentController.cs
        ├── DiagnosticsController.cs
        ├── GrantsController.cs
        ├── HomeController.cs
        └── WebhookController.cs
    ├── CustomOidcConfigureOptions.cs
    ├── Demo
        ├── DemoCorsPolicy.cs
        └── DemoRedirectUriValidator.cs
    ├── Dockerfile
    ├── Extensions
        └── EventSinkExtExtensions.cs
    ├── Middleware
        ├── SecurityHeadersAttribute.cs
        └── XForwardedPrefixMiddleware.cs
    ├── Models
        ├── ConsentInputModel.cs
        ├── ConsentViewModel.cs
        ├── DiagnosticsViewModel.cs
        ├── ErrorViewModel.cs
        ├── ExternalProvider.cs
        ├── GrantsViewModel.cs
        ├── LoggedOutViewModel.cs
        ├── LoginInputModel.cs
        ├── LoginViewModel.cs
        ├── LogoutInputModel.cs
        ├── LogoutViewModel.cs
        ├── RegisterInputModel.cs
        ├── RegisterViewModel.cs
        ├── ScopeViewModel.cs
        ├── SendResetMfaOneTimeLinkResult.cs
        └── WebhookModel.cs
    ├── Program.cs
    ├── Properties
        └── launchSettings.json
    ├── Rsk.Samples.IdentityServer.AdminUiIntegration.csproj
    ├── Services
        ├── AccountService.cs
        ├── ConsentService.cs
        ├── CustomEventSink.cs
        ├── ExternalProviderService.cs
        ├── IAccountService.cs
        ├── IExternalProviderService.cs
        ├── ProcessConsentResult.cs
        └── WebhookService.cs
    ├── Startup.cs
    ├── Views
        ├── Account
        │   ├── LoggedOut.cshtml
        │   ├── Login.cshtml
        │   ├── Logout.cshtml
        │   └── Register.cshtml
        ├── Consent
        │   ├── Index.cshtml
        │   └── _ScopeListItem.cshtml
        ├── Diagnostics
        │   └── Index.cshtml
        ├── Grants
        │   └── Index.cshtml
        ├── Home
        │   └── Index.cshtml
        ├── Shared
        │   ├── Error.cshtml
        │   ├── _Layout.cshtml
        │   └── _ValidationSummary.cshtml
        ├── _ViewImports.cshtml
        └── _ViewStart.cshtml
    ├── appsettings.json
    ├── appsettings.testing.json
    ├── gulpfile.js
    ├── package-lock.json
    ├── package.json
    ├── src
        ├── css
        │   ├── components
        │   │   ├── buttons.css
        │   │   ├── cms.css
        │   │   ├── containers.css
        │   │   ├── forms.css
        │   │   ├── js.css
        │   │   ├── messages.css
        │   │   ├── row-block.css
        │   │   └── skip-link.css
        │   ├── copy
        │   │   ├── fontawesome
        │   │   │   └── all.css
        │   │   └── webfonts
        │   │   │   ├── fa-brands-400.eot
        │   │   │   ├── fa-brands-400.svg
        │   │   │   ├── fa-brands-400.ttf
        │   │   │   ├── fa-brands-400.woff
        │   │   │   ├── fa-brands-400.woff2
        │   │   │   ├── fa-light-300.eot
        │   │   │   ├── fa-light-300.svg
        │   │   │   ├── fa-light-300.ttf
        │   │   │   ├── fa-light-300.woff
        │   │   │   ├── fa-light-300.woff2
        │   │   │   ├── fa-regular-400.eot
        │   │   │   ├── fa-regular-400.svg
        │   │   │   ├── fa-regular-400.ttf
        │   │   │   ├── fa-regular-400.woff
        │   │   │   ├── fa-regular-400.woff2
        │   │   │   ├── fa-solid-900.eot
        │   │   │   ├── fa-solid-900.svg
        │   │   │   ├── fa-solid-900.ttf
        │   │   │   ├── fa-solid-900.woff
        │   │   │   └── fa-solid-900.woff2
        │   ├── plugins
        │   │   ├── first-child.js
        │   │   └── last-child.js
        │   ├── preflight
        │   │   └── reset.css
        │   ├── print.css
        │   ├── site.css
        │   └── utilities
        │   │   ├── clear.css
        │   │   ├── columns.css
        │   │   ├── hyphens.css
        │   │   ├── position.css
        │   │   ├── transitions.css
        │   │   ├── translate.css
        │   │   ├── wordbreak.css
        │   │   └── wordspacing.css
        └── js
        │   ├── signout-redirect.js
        │   └── site.js
    ├── tailwind.js
    ├── tempkey.jwk
    └── wwwroot
        ├── css
            ├── print.css
            ├── print.min.css
            ├── site.css
            └── site.min.css
        ├── favicon.ico
        ├── fonts
            ├── fontawesome
            │   ├── css
            │   │   └── all.min.css
            │   └── webfonts
            │   │   ├── fa-brands-400.eot
            │   │   ├── fa-brands-400.svg
            │   │   ├── fa-brands-400.ttf
            │   │   ├── fa-brands-400.woff
            │   │   ├── fa-brands-400.woff2
            │   │   ├── fa-regular-400.eot
            │   │   ├── fa-regular-400.svg
            │   │   ├── fa-regular-400.ttf
            │   │   ├── fa-regular-400.woff
            │   │   ├── fa-regular-400.woff2
            │   │   ├── fa-solid-900.eot
            │   │   ├── fa-solid-900.svg
            │   │   ├── fa-solid-900.ttf
            │   │   ├── fa-solid-900.woff
            │   │   └── fa-solid-900.woff2
            └── google
            │   └── webfonts
            │       ├── roboto-400.woff
            │       ├── roboto-400.woff2
            │       ├── roboto-500.woff
            │       ├── roboto-500.woff2
            │       ├── roboto-700.woff
            │       └── roboto-700.woff2
        ├── img
            └── forms
            │   └── select.png
        └── js
            ├── signout-redirect.js
            ├── signout-redirect.min.js
            ├── site.js
            └── site.min.js


/.gitignore:
--------------------------------------------------------------------------------
  1 | ## Ignore Visual Studio temporary files, build results, and
  2 | ## files generated by popular Visual Studio add-ons.
  3 | 
  4 | # MacOS Files
  5 | *.DS_Store
  6 | 
  7 | # User-specific files
  8 | *.suo
  9 | *.user
 10 | *.userosscache
 11 | *.sln.docstates
 12 | 
 13 | # User-specific files (MonoDevelop/Xamarin Studio)
 14 | *.userprefs
 15 | 
 16 | # Build results
 17 | [Dd]ebug/
 18 | [Dd]ebugPublic/
 19 | [Rr]elease/
 20 | [Rr]eleases/
 21 | x64/
 22 | x86/
 23 | bld/
 24 | [Bb]in/
 25 | [Oo]bj/
 26 | [Ll]og/
 27 | [Oo]ut/
 28 | 
 29 | # Visual Studio 2015 cache/options directory
 30 | .vs/
 31 | # Uncomment if you have tasks that create the project's static files in wwwroot
 32 | #wwwroot/
 33 | 
 34 | # MSTest test Results
 35 | [Tt]est[Rr]esult*/
 36 | [Bb]uild[Ll]og.*
 37 | 
 38 | # NUNIT
 39 | *.VisualState.xml
 40 | TestResult.xml
 41 | 
 42 | # Build Results of an ATL Project
 43 | [Dd]ebugPS/
 44 | [Rr]eleasePS/
 45 | dlldata.c
 46 | 
 47 | # DNX
 48 | project.lock.json
 49 | artifacts/
 50 | 
 51 | *_i.c
 52 | *_p.c
 53 | *_i.h
 54 | *.ilk
 55 | *.meta
 56 | *.obj
 57 | *.pch
 58 | *.pdb
 59 | *.pgc
 60 | *.pgd
 61 | *.rsp
 62 | *.sbr
 63 | *.tlb
 64 | *.tli
 65 | *.tlh
 66 | *.tmp
 67 | *.tmp_proj
 68 | *.log
 69 | *.vspscc
 70 | *.vssscc
 71 | .builds
 72 | *.pidb
 73 | *.svclog
 74 | *.scc
 75 | 
 76 | # Chutzpah Test files
 77 | _Chutzpah*
 78 | 
 79 | # Visual C++ cache files
 80 | ipch/
 81 | *.aps
 82 | *.ncb
 83 | *.opendb
 84 | *.opensdf
 85 | *.sdf
 86 | *.cachefile
 87 | *.VC.db
 88 | *.VC.VC.opendb
 89 | 
 90 | # Visual Studio profiler
 91 | *.psess
 92 | *.vsp
 93 | *.vspx
 94 | *.sap
 95 | 
 96 | # TFS 2012 Local Workspace
 97 | $tf/
 98 | 
 99 | # Guidance Automation Toolkit
100 | *.gpState
101 | 
102 | # ReSharper is a .NET coding add-in
103 | _ReSharper*/
104 | *.[Rr]e[Ss]harper
105 | *.DotSettings.user
106 | 
107 | # JustCode is a .NET coding add-in
108 | .JustCode
109 | 
110 | # TeamCity is a build add-in
111 | _TeamCity*
112 | 
113 | # DotCover is a Code Coverage Tool
114 | *.dotCover
115 | 
116 | # NCrunch
117 | _NCrunch_*
118 | .*crunch*.local.xml
119 | nCrunchTemp_*
120 | 
121 | # MightyMoose
122 | *.mm.*
123 | AutoTest.Net/
124 | 
125 | # Web workbench (sass)
126 | .sass-cache/
127 | 
128 | # Installshield output folder
129 | [Ee]xpress/
130 | 
131 | # DocProject is a documentation generator add-in
132 | DocProject/buildhelp/
133 | DocProject/Help/*.HxT
134 | DocProject/Help/*.HxC
135 | DocProject/Help/*.hhc
136 | DocProject/Help/*.hhk
137 | DocProject/Help/*.hhp
138 | DocProject/Help/Html2
139 | DocProject/Help/html
140 | 
141 | # Click-Once directory
142 | publish/
143 | 
144 | # Publish Web Output
145 | *.[Pp]ublish.xml
146 | *.azurePubxml
147 | # TODO: Comment the next line if you want to checkin your web deploy settings
148 | # but database connection strings (with potential passwords) will be unencrypted
149 | *.pubxml
150 | *.publishproj
151 | 
152 | # Microsoft Azure Web App publish settings. Comment the next line if you want to
153 | # checkin your Azure Web App publish settings, but sensitive information contained
154 | # in these scripts will be unencrypted
155 | PublishScripts/
156 | 
157 | # NuGet Packages
158 | *.nupkg
159 | # The packages folder can be ignored because of Package Restore
160 | **/packages/*
161 | # except build/, which is used as an MSBuild target.
162 | !**/packages/build/
163 | # Uncomment if necessary however generally it will be regenerated when needed
164 | #!**/packages/repositories.config
165 | # NuGet v3's project.json files produces more ignoreable files
166 | *.nuget.props
167 | *.nuget.targets
168 | 
169 | # Microsoft Azure Build Output
170 | csx/
171 | *.build.csdef
172 | 
173 | # Microsoft Azure Emulator
174 | ecf/
175 | rcf/
176 | 
177 | # Windows Store app package directories and files
178 | AppPackages/
179 | BundleArtifacts/
180 | Package.StoreAssociation.xml
181 | _pkginfo.txt
182 | 
183 | # Visual Studio cache files
184 | # files ending in .cache can be ignored
185 | *.[Cc]ache
186 | # but keep track of directories ending in .cache
187 | !*.[Cc]ache/
188 | 
189 | # Others
190 | ClientBin/
191 | ~$*
192 | *~
193 | *.dbmdl
194 | *.dbproj.schemaview
195 | *.pfx
196 | *.publishsettings
197 | node_modules/
198 | orleans.codegen.cs
199 | 
200 | #Do not ignore Sample PFX file
201 | !CN=RSKSampleIdentityServer.pfx
202 | 
203 | # Since there are multiple workflows, uncomment next line to ignore bower_components
204 | # (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
205 | #bower_components/
206 | 
207 | # RIA/Silverlight projects
208 | Generated_Code/
209 | 
210 | # Backup & report files from converting an old project file
211 | # to a newer Visual Studio version. Backup files are not needed,
212 | # because we have git ;-)
213 | _UpgradeReport_Files/
214 | Backup*/
215 | UpgradeLog*.XML
216 | UpgradeLog*.htm
217 | 
218 | # SQL Server files
219 | *.mdf
220 | *.ldf
221 | 
222 | # Business Intelligence projects
223 | *.rdl.data
224 | *.bim.layout
225 | *.bim_*.settings
226 | 
227 | # Microsoft Fakes
228 | FakesAssemblies/
229 | 
230 | # GhostDoc plugin setting file
231 | *.GhostDoc.xml
232 | 
233 | # Node.js Tools for Visual Studio
234 | .ntvs_analysis.dat
235 | 
236 | # Visual Studio 6 build log
237 | *.plg
238 | 
239 | # Visual Studio 6 workspace options file
240 | *.opt
241 | 
242 | # Visual Studio LightSwitch build output
243 | **/*.HTMLClient/GeneratedArtifacts
244 | **/*.DesktopClient/GeneratedArtifacts
245 | **/*.DesktopClient/ModelManifest.xml
246 | **/*.Server/GeneratedArtifacts
247 | **/*.Server/ModelManifest.xml
248 | _Pvt_Extensions
249 | 
250 | # Paket dependency manager
251 | .paket/paket.exe
252 | paket-files/
253 | 
254 | # FAKE - F# Make
255 | .fake/
256 | 
257 | # JetBrains Rider
258 | .idea/
259 | *.sln.iml
260 | 
261 | 
262 | node_modules/
263 | 


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
  1 |                                  Apache License
  2 |                            Version 2.0, January 2004
  3 |                         http://www.apache.org/licenses/
  4 | 
  5 |    TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
  6 | 
  7 |    1. Definitions.
  8 | 
  9 |       "License" shall mean the terms and conditions for use, reproduction,
 10 |       and distribution as defined by Sections 1 through 9 of this document.
 11 | 
 12 |       "Licensor" shall mean the copyright owner or entity authorized by
 13 |       the copyright owner that is granting the License.
 14 | 
 15 |       "Legal Entity" shall mean the union of the acting entity and all
 16 |       other entities that control, are controlled by, or are under common
 17 |       control with that entity. For the purposes of this definition,
 18 |       "control" means (i) the power, direct or indirect, to cause the
 19 |       direction or management of such entity, whether by contract or
 20 |       otherwise, or (ii) ownership of fifty percent (50%) or more of the
 21 |       outstanding shares, or (iii) beneficial ownership of such entity.
 22 | 
 23 |       "You" (or "Your") shall mean an individual or Legal Entity
 24 |       exercising permissions granted by this License.
 25 | 
 26 |       "Source" form shall mean the preferred form for making modifications,
 27 |       including but not limited to software source code, documentation
 28 |       source, and configuration files.
 29 | 
 30 |       "Object" form shall mean any form resulting from mechanical
 31 |       transformation or translation of a Source form, including but
 32 |       not limited to compiled object code, generated documentation,
 33 |       and conversions to other media types.
 34 | 
 35 |       "Work" shall mean the work of authorship, whether in Source or
 36 |       Object form, made available under the License, as indicated by a
 37 |       copyright notice that is included in or attached to the work
 38 |       (an example is provided in the Appendix below).
 39 | 
 40 |       "Derivative Works" shall mean any work, whether in Source or Object
 41 |       form, that is based on (or derived from) the Work and for which the
 42 |       editorial revisions, annotations, elaborations, or other modifications
 43 |       represent, as a whole, an original work of authorship. For the purposes
 44 |       of this License, Derivative Works shall not include works that remain
 45 |       separable from, or merely link (or bind by name) to the interfaces of,
 46 |       the Work and Derivative Works thereof.
 47 | 
 48 |       "Contribution" shall mean any work of authorship, including
 49 |       the original version of the Work and any modifications or additions
 50 |       to that Work or Derivative Works thereof, that is intentionally
 51 |       submitted to Licensor for inclusion in the Work by the copyright owner
 52 |       or by an individual or Legal Entity authorized to submit on behalf of
 53 |       the copyright owner. For the purposes of this definition, "submitted"
 54 |       means any form of electronic, verbal, or written communication sent
 55 |       to the Licensor or its representatives, including but not limited to
 56 |       communication on electronic mailing lists, source code control systems,
 57 |       and issue tracking systems that are managed by, or on behalf of, the
 58 |       Licensor for the purpose of discussing and improving the Work, but
 59 |       excluding communication that is conspicuously marked or otherwise
 60 |       designated in writing by the copyright owner as "Not a Contribution."
 61 | 
 62 |       "Contributor" shall mean Licensor and any individual or Legal Entity
 63 |       on behalf of whom a Contribution has been received by Licensor and
 64 |       subsequently incorporated within the Work.
 65 | 
 66 |    2. Grant of Copyright License. Subject to the terms and conditions of
 67 |       this License, each Contributor hereby grants to You a perpetual,
 68 |       worldwide, non-exclusive, no-charge, royalty-free, irrevocable
 69 |       copyright license to reproduce, prepare Derivative Works of,
 70 |       publicly display, publicly perform, sublicense, and distribute the
 71 |       Work and such Derivative Works in Source or Object form.
 72 | 
 73 |    3. Grant of Patent License. Subject to the terms and conditions of
 74 |       this License, each Contributor hereby grants to You a perpetual,
 75 |       worldwide, non-exclusive, no-charge, royalty-free, irrevocable
 76 |       (except as stated in this section) patent license to make, have made,
 77 |       use, offer to sell, sell, import, and otherwise transfer the Work,
 78 |       where such license applies only to those patent claims licensable
 79 |       by such Contributor that are necessarily infringed by their
 80 |       Contribution(s) alone or by combination of their Contribution(s)
 81 |       with the Work to which such Contribution(s) was submitted. If You
 82 |       institute patent litigation against any entity (including a
 83 |       cross-claim or counterclaim in a lawsuit) alleging that the Work
 84 |       or a Contribution incorporated within the Work constitutes direct
 85 |       or contributory patent infringement, then any patent licenses
 86 |       granted to You under this License for that Work shall terminate
 87 |       as of the date such litigation is filed.
 88 | 
 89 |    4. Redistribution. You may reproduce and distribute copies of the
 90 |       Work or Derivative Works thereof in any medium, with or without
 91 |       modifications, and in Source or Object form, provided that You
 92 |       meet the following conditions:
 93 | 
 94 |       (a) You must give any other recipients of the Work or
 95 |           Derivative Works a copy of this License; and
 96 | 
 97 |       (b) You must cause any modified files to carry prominent notices
 98 |           stating that You changed the files; and
 99 | 
100 |       (c) You must retain, in the Source form of any Derivative Works
101 |           that You distribute, all copyright, patent, trademark, and
102 |           attribution notices from the Source form of the Work,
103 |           excluding those notices that do not pertain to any part of
104 |           the Derivative Works; and
105 | 
106 |       (d) If the Work includes a "NOTICE" text file as part of its
107 |           distribution, then any Derivative Works that You distribute must
108 |           include a readable copy of the attribution notices contained
109 |           within such NOTICE file, excluding those notices that do not
110 |           pertain to any part of the Derivative Works, in at least one
111 |           of the following places: within a NOTICE text file distributed
112 |           as part of the Derivative Works; within the Source form or
113 |           documentation, if provided along with the Derivative Works; or,
114 |           within a display generated by the Derivative Works, if and
115 |           wherever such third-party notices normally appear. The contents
116 |           of the NOTICE file are for informational purposes only and
117 |           do not modify the License. You may add Your own attribution
118 |           notices within Derivative Works that You distribute, alongside
119 |           or as an addendum to the NOTICE text from the Work, provided
120 |           that such additional attribution notices cannot be construed
121 |           as modifying the License.
122 | 
123 |       You may add Your own copyright statement to Your modifications and
124 |       may provide additional or different license terms and conditions
125 |       for use, reproduction, or distribution of Your modifications, or
126 |       for any such Derivative Works as a whole, provided Your use,
127 |       reproduction, and distribution of the Work otherwise complies with
128 |       the conditions stated in this License.
129 | 
130 |    5. Submission of Contributions. Unless You explicitly state otherwise,
131 |       any Contribution intentionally submitted for inclusion in the Work
132 |       by You to the Licensor shall be under the terms and conditions of
133 |       this License, without any additional terms or conditions.
134 |       Notwithstanding the above, nothing herein shall supersede or modify
135 |       the terms of any separate license agreement you may have executed
136 |       with Licensor regarding such Contributions.
137 | 
138 |    6. Trademarks. This License does not grant permission to use the trade
139 |       names, trademarks, service marks, or product names of the Licensor,
140 |       except as required for reasonable and customary use in describing the
141 |       origin of the Work and reproducing the content of the NOTICE file.
142 | 
143 |    7. Disclaimer of Warranty. Unless required by applicable law or
144 |       agreed to in writing, Licensor provides the Work (and each
145 |       Contributor provides its Contributions) on an "AS IS" BASIS,
146 |       WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
147 |       implied, including, without limitation, any warranties or conditions
148 |       of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
149 |       PARTICULAR PURPOSE. You are solely responsible for determining the
150 |       appropriateness of using or redistributing the Work and assume any
151 |       risks associated with Your exercise of permissions under this License.
152 | 
153 |    8. Limitation of Liability. In no event and under no legal theory,
154 |       whether in tort (including negligence), contract, or otherwise,
155 |       unless required by applicable law (such as deliberate and grossly
156 |       negligent acts) or agreed to in writing, shall any Contributor be
157 |       liable to You for damages, including any direct, indirect, special,
158 |       incidental, or consequential damages of any character arising as a
159 |       result of this License or out of the use or inability to use the
160 |       Work (including but not limited to damages for loss of goodwill,
161 |       work stoppage, computer failure or malfunction, or any and all
162 |       other commercial damages or losses), even if such Contributor
163 |       has been advised of the possibility of such damages.
164 | 
165 |    9. Accepting Warranty or Additional Liability. While redistributing
166 |       the Work or Derivative Works thereof, You may choose to offer,
167 |       and charge a fee for, acceptance of support, warranty, indemnity,
168 |       or other liability obligations and/or rights consistent with this
169 |       License. However, in accepting such obligations, You may act only
170 |       on Your own behalf and on Your sole responsibility, not on behalf
171 |       of any other Contributor, and only if You agree to indemnify,
172 |       defend, and hold each Contributor harmless for any liability
173 |       incurred by, or claims asserted against, such Contributor by reason
174 |       of your accepting any such warranty or additional liability.
175 | 
176 |    END OF TERMS AND CONDITIONS
177 | 
178 |    APPENDIX: How to apply the Apache License to your work.
179 | 
180 |       To apply the Apache License to your work, attach the following
181 |       boilerplate notice, with the fields enclosed by brackets "{}"
182 |       replaced with your own identifying information. (Don't include
183 |       the brackets!)  The text should be enclosed in the appropriate
184 |       comment syntax for the file format. We also recommend that a
185 |       file or class name and description of purpose be included on the
186 |       same "printed page" as the copyright notice for easier
187 |       identification within third-party archives.
188 | 
189 |    Copyright {yyyy} {name of copyright owner}
190 | 
191 |    Licensed under the Apache License, Version 2.0 (the "License");
192 |    you may not use this file except in compliance with the License.
193 |    You may obtain a copy of the License at
194 | 
195 |        http://www.apache.org/licenses/LICENSE-2.0
196 | 
197 |    Unless required by applicable law or agreed to in writing, software
198 |    distributed under the License is distributed on an "AS IS" BASIS,
199 |    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
200 |    See the License for the specific language governing permissions and
201 |    limitations under the License.
202 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # Sample IdentityServer (Duende) AdminUI Integration
 2 | **IdentityServer implementation using the ASP.NET Identity schema from the [AdminUI product](https://www.identityserver.com/products/adminui) from [Rock Solid Knowledge](https://www.identityserver.com).**
 3 | 
 4 | This package uses the AdminUI ASP.NET Identity schema found on [NuGet](https://www.nuget.org/packages/IdentityExpress.Identity/):
 5 | 
 6 | `Install-Package IdentityExpress.Identity`
 7 | 
 8 | ---
 9 | 
10 | *For AdminUI documentation, visit [IdentityServer.com](https://www.identityserver.com/documentation/adminui/)*
11 | 
12 | This Package uses a pre-generated embedded certificate and is not suitable for production


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUIIntegration.Tests/AccountControllerIntegrationTests.cs:
--------------------------------------------------------------------------------
  1 | using System;
  2 | using System.Collections.Generic;
  3 | using System.IO;
  4 | using System.Net.Http;
  5 | using System.Threading.Tasks;
  6 | using IdentityExpress.Identity;
  7 | using Microsoft.AspNetCore.Hosting;
  8 | using Microsoft.AspNetCore.Identity;
  9 | using Microsoft.AspNetCore.TestHost;
 10 | using Microsoft.EntityFrameworkCore;
 11 | using Microsoft.Extensions.Configuration;
 12 | using Rsk.Samples.IdentityServer.AdminUiIntegration;
 13 | using Xunit;
 14 | 
 15 | namespace AdminUIIntegration.Tests
 16 | {
 17 |     public class AccountControllerIntegrationTests
 18 |     {
 19 |         private HttpClient client;
 20 |         private DbContextOptions<IdentityExpressDbContext> options;
 21 |         private ILookupNormalizer normalizer;
 22 | 
 23 |         public AccountControllerIntegrationTests()
 24 |         {
 25 |             var pathUri = new Uri(@"../../../../Rsk.Samples.IdentityServer.AdminUiIntegration", UriKind.Relative);
 26 |             var path = Path.GetFullPath(Path.Combine(Directory.GetCurrentDirectory(), pathUri.ToString()));
 27 | 
 28 |             var config = new ConfigurationBuilder()
 29 |                 .SetBasePath(path)
 30 |                 .AddJsonFile("appsettings.testing.json").Build();
 31 | 
 32 |             normalizer = new UpperInvariantLookupNormalizer();
 33 |             options = new DbContextOptionsBuilder<IdentityExpressDbContext>().UseSqlite(config.GetValue<string>("IdentityConnectionString")).Options;
 34 | 
 35 |             using (var context = new IdentityExpressDbContext(options))
 36 |                 context.Database.EnsureCreated();
 37 |             
 38 |             var testServer = new TestServer(new WebHostBuilder().UseStartup<Startup>().UseContentRoot(path).UseEnvironment("testing"));
 39 |             client = testServer.CreateClient();
 40 |         }
 41 | 
 42 |         [Fact]
 43 |         public async Task Register_WhenModelIsValidWithNullPassword_ExpectSuccessAndUserPasswordSet()
 44 |         {
 45 |             //arrange
 46 |             var username = Guid.NewGuid().ToString();
 47 |             var user = new IdentityExpressUser()
 48 |             {
 49 |                 UserName = username,
 50 |                 NormalizedUserName = normalizer.NormalizeName(username)
 51 |             };
 52 | 
 53 |             await using (var context = new IdentityExpressDbContext(options))
 54 |             {
 55 |                 context.Users.Add(user);
 56 |                 await context.SaveChangesAsync();
 57 |             }
 58 | 
 59 |             var registerInputModel = new List<KeyValuePair<string, string>> {
 60 |                 new KeyValuePair<string, string>("ConfirmPassword", "Password123!"),
 61 |                 new KeyValuePair<string, string>("Password", "Password123!"),
 62 |                 new KeyValuePair<string, string>("Username", username)
 63 |             };
 64 | 
 65 |             //act
 66 |             var result = await client.PostAsync("/account/register", new FormUrlEncodedContent(registerInputModel));
 67 | 
 68 |             //assert
 69 |             Assert.True(result.IsSuccessStatusCode);
 70 | 
 71 |             IdentityExpressUser foundUser;
 72 |             await using (var context = new IdentityExpressDbContext(options))
 73 |             {
 74 |                 foundUser = await context.Users.FirstOrDefaultAsync(x => x.UserName == username);
 75 |             }
 76 | 
 77 |             Assert.NotNull(foundUser);
 78 |             Assert.NotNull(foundUser.PasswordHash);
 79 |         }
 80 | 
 81 |         // TODO: Post with user who already has password
 82 | 
 83 |         [Fact]
 84 |         public async Task Register_WhenUserAlreadyHasPassword_ExpectFailureAndPasswordNotUpdated()
 85 |         {
 86 |             //arrange
 87 |             var username = Guid.NewGuid().ToString();
 88 |             var user = new IdentityExpressUser()
 89 |             {
 90 |                 UserName = username,
 91 |                 NormalizedUserName = normalizer.NormalizeName(username)       
 92 |             };
 93 | 
 94 |             var passwordHasher = new PasswordHasher<IdentityExpressUser>();
 95 |             var hash = passwordHasher.HashPassword(user, "hello");
 96 |             user.PasswordHash = hash;
 97 | 
 98 |             await using (var context = new IdentityExpressDbContext(options))
 99 |             {
100 |                 context.Users.Add(user);
101 |                 await context.SaveChangesAsync();
102 |             }
103 | 
104 |             var registerInputModel = new List<KeyValuePair<string, string>> {
105 |                 new KeyValuePair<string, string>("ConfirmPassword", "Password123!"),
106 |                 new KeyValuePair<string, string>("Password", "Password123!"),
107 |                 new KeyValuePair<string, string>("Username", username)
108 |             };
109 | 
110 |             //act
111 |             var result = await client.PostAsync("/account/register", new FormUrlEncodedContent(registerInputModel));
112 | 
113 |             //assert
114 |             Assert.True(result.IsSuccessStatusCode);
115 | 
116 |             IdentityExpressUser foundUser;
117 |             await using (var context = new IdentityExpressDbContext(options))
118 |             {
119 |                 foundUser = await context.Users.FirstOrDefaultAsync(x => x.UserName == username);
120 |             }
121 | 
122 |             Assert.NotNull(foundUser);
123 |             Assert.Equal(hash, foundUser.PasswordHash);
124 |         }
125 |     }
126 | }
127 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUIIntegration.Tests/AccountControllerUnitTests.cs:
--------------------------------------------------------------------------------
  1 | using System.Threading.Tasks;
  2 | using Duende.IdentityServer.Models;
  3 | using IdentityExpress.Identity;
  4 | using Duende.IdentityServer.Services;
  5 | using Duende.IdentityServer.Stores;
  6 | using Microsoft.AspNetCore.Authentication;
  7 | using Microsoft.AspNetCore.Http;
  8 | using Microsoft.AspNetCore.Identity;
  9 | using Microsoft.AspNetCore.Mvc;
 10 | using Microsoft.AspNetCore.Mvc.Routing;
 11 | using Moq;
 12 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Controllers;
 13 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Models;
 14 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Services;
 15 | using Xunit;
 16 | 
 17 | namespace AdminUIIntegration.Tests
 18 | {
 19 |     public class AccountControllerUnitTests
 20 |     {
 21 |         private readonly Mock<UserManager<IdentityExpressUser>> mockUserManager;
 22 |         private readonly Mock<IIdentityServerInteractionService> mockInteraction;
 23 |         private readonly Mock<IClientStore> mockClientStore;
 24 |         private readonly Mock<IHttpContextAccessor> mockAccessor;
 25 |         private readonly Mock<IAuthenticationSchemeProvider> mockSchemeProvider;
 26 |         private readonly Mock<IEventService> mockEvents;
 27 |         private readonly Mock<IAccountService> mockAccountService;
 28 |         private readonly Mock<IUrlHelperFactory> mockUrlHelper;
 29 |         private readonly Mock<IExternalProviderService> mockExternalProviderService;
 30 | 
 31 |         private readonly Mock<HttpContext> mockHttpContext;
 32 |         private readonly Mock<IRequestCookieCollection> mockRequestCookies;
 33 | 
 34 |         public AccountControllerUnitTests()
 35 |         {
 36 |             mockInteraction = new Mock<IIdentityServerInteractionService>();
 37 |             mockClientStore = new Mock<IClientStore>();
 38 |             mockAccessor = new Mock<IHttpContextAccessor>();
 39 |             var userStoreMock = new Mock<IUserStore<IdentityExpressUser>>();
 40 |             mockUserManager = new Mock<UserManager<IdentityExpressUser>>(userStoreMock.Object, null, null, null, null, null, null, null, null);
 41 |             mockSchemeProvider = new Mock<IAuthenticationSchemeProvider>();
 42 |             mockEvents = new Mock<IEventService>();
 43 |             mockAccountService = new Mock<IAccountService>();
 44 |             mockUrlHelper = new Mock<IUrlHelperFactory>();
 45 |             mockExternalProviderService = new Mock<IExternalProviderService>();
 46 |             mockHttpContext = new Mock<HttpContext>();
 47 |             mockRequestCookies = new Mock<IRequestCookieCollection>();
 48 |         }
 49 | 
 50 |         private AccountController CreateSut(bool withExternalCookie = false)
 51 |         { 
 52 |             if (withExternalCookie)
 53 |             {
 54 |                 mockRequestCookies.Setup(x => x["Identity.External"]).Returns("FakeCookie");
 55 |             }
 56 | 
 57 |             mockHttpContext.Setup(x => x.Request.Cookies).Returns(mockRequestCookies.Object);
 58 |             
 59 |             var sut = new AccountController(
 60 |                 mockInteraction.Object,
 61 |                 mockUserManager.Object,
 62 |                 mockEvents.Object,
 63 |                 mockAccountService.Object,
 64 |                 mockUrlHelper.Object,
 65 |                 mockExternalProviderService.Object);
 66 | 
 67 |             sut.ControllerContext = new ControllerContext
 68 |             {
 69 |                 HttpContext = mockHttpContext.Object,
 70 |             };
 71 |             
 72 |             return sut;
 73 |         }
 74 | 
 75 |         [Fact]
 76 |         public async Task Login_WhenNotExternal_ShouldCallBuildLoginViewModelAsync()
 77 |         {
 78 |             var testReturnUrl = "";
 79 |             var testLoginViewModel = new LoginViewModel
 80 |             {
 81 |                 EnableLocalLogin = true,
 82 |                 ReturnUrl = testReturnUrl,
 83 |                 Username = "LoginHunt",
 84 |             };
 85 |             
 86 |             mockAccountService.Setup(x => x.BuildLoginViewModelAsync(It.IsAny<string>()))
 87 |                 .ReturnsAsync(testLoginViewModel);
 88 |             
 89 |             var sut = CreateSut();
 90 | 
 91 |             var actual = await sut.Login(testReturnUrl);
 92 | 
 93 |             mockAccountService.Verify(x => x.BuildLoginViewModelAsync(testReturnUrl));
 94 | 
 95 |             var viewResult = Assert.IsType<ViewResult>(actual);
 96 |             Assert.Equal(viewResult.Model, testLoginViewModel);
 97 |         }
 98 | 
 99 |         [Fact]
100 |         public async Task Login_WhenExternal_ShouldCallBuildLinkLoginViewModel()
101 |         {
102 |             var testReturnUrl = "";
103 |             var testLoginViewModel = new LoginViewModel
104 |             {
105 |                 EnableLocalLogin = true,
106 |                 LinkSetup = true,
107 |                 ReturnUrl = testReturnUrl,
108 |                 Username = "LoginHunt",
109 |             };
110 |             
111 |             mockAccountService.Setup(x => x.BuildLinkLoginViewModel(It.IsAny<string>()))
112 |                 .Returns(testLoginViewModel);
113 |             
114 |             var sut = CreateSut(withExternalCookie: true);
115 | 
116 |             var actual = await sut.Login(testReturnUrl);
117 | 
118 |             mockAccountService.Verify(x => x.BuildLinkLoginViewModel(testReturnUrl));
119 | 
120 |             var viewResult = Assert.IsType<ViewResult>(actual);
121 |             Assert.Equal(viewResult.Model, testLoginViewModel);
122 |         }
123 | 
124 |         [Fact]
125 |         public async Task Login_WhenModelPassedIn_WithButtonNotLogin_AndNullAuthContext_ShouldRedirectToBase()
126 |         {
127 |             var testLoginModel = new LoginInputModel
128 |             {
129 |                 Username = "tuser",
130 |                 Password = "somepassword",
131 |                 RememberLogin = true,
132 |                 ReturnUrl = "https://some.return.com",
133 |             };
134 | 
135 |             mockInteraction.Setup(x => x.GetAuthorizationContextAsync(It.IsAny<string>()))
136 |                 .ReturnsAsync(() => null);
137 |             
138 |             var sut = CreateSut();
139 |             var actual = await sut.Login(testLoginModel, "cancel");
140 | 
141 |             var viewResult = Assert.IsType<RedirectResult>(actual);
142 |             Assert.Equal("~/", viewResult.Url);
143 |         }
144 | 
145 |         [Fact]
146 |         public async Task Login_WhenModelPassedIn_WithButtonNotLogin_AndAuthContextReturned_ShouldRedirectToReturnUrl()
147 |         {
148 |             var testLoginModel = new LoginInputModel
149 |             {
150 |                 Username = "tuser",
151 |                 Password = "somepassword",
152 |                 RememberLogin = true,
153 |                 ReturnUrl = "https://some.return.com",
154 |             };
155 | 
156 |             var authRequest = new AuthorizationRequest();
157 | 
158 |             mockInteraction.Setup(x => x.GetAuthorizationContextAsync(It.IsAny<string>()))
159 |                 .ReturnsAsync(() => authRequest);
160 | 
161 |             var sut = CreateSut();
162 |             var actual = await sut.Login(testLoginModel, "cancel");
163 |             
164 |             mockInteraction.Verify(x => x.DenyAuthorizationAsync(authRequest, AuthorizationError.AccessDenied, null));
165 | 
166 |             var viewResult = Assert.IsType<RedirectResult>(actual);
167 |             Assert.Equal(testLoginModel.ReturnUrl, viewResult.Url);
168 |         }
169 |         
170 |         //Returns view when modelState is invalid.
171 |         [Fact]
172 |         public async Task Register_WhenModelStateIsInvalid_()
173 |         {
174 |             //arrange
175 |             var controller = CreateSut();
176 |             var model = new RegisterInputModel();
177 |             controller.ModelState.AddModelError("", "Unit Test Error");
178 |             //act
179 |             var result = await controller.Register(model);
180 | 
181 |             //assert
182 |             var viewResult = Assert.IsType<ViewResult>(result);
183 |             Assert.False(viewResult.ViewData.ModelState.IsValid);
184 |             Assert.Equal(1, viewResult.ViewData.ModelState.ErrorCount);
185 |         }
186 | 
187 |         [Fact]
188 |         public async Task Register_WhenUserCannotBeFound_ExpectModelStateHassInvalidUsernameErrorMessage()
189 |         {
190 |             //arrange
191 |             var controller = CreateSut();
192 | 
193 |             mockUserManager.Setup(x => x.FindByNameAsync(It.IsAny<string>())).ReturnsAsync(null as IdentityExpressUser);
194 | 
195 |             var model = new RegisterInputModel {
196 |                 Username = "Hello"
197 |             };
198 | 
199 |             //act
200 |             var result = await controller.Register(model);
201 | 
202 |             //assert
203 |             var viewResult = Assert.IsType<ViewResult>(result);
204 |             Assert.False(viewResult.ViewData.ModelState.IsValid);
205 |             Assert.Single(viewResult.ViewData.ModelState);
206 |             Assert.Equal("Username does not exist", viewResult.ViewData.ModelState.Root.Errors[0].ErrorMessage);
207 |         }
208 | 
209 |         [Fact]
210 |         public async Task Register_WhenAddPasswordFails_ExpectUpdateToNotBeCalledAndModelStateToHaveErrors()
211 |         {
212 |             //arrange
213 |             var controller = CreateSut();
214 | 
215 |             mockUserManager.Setup(x => x.FindByNameAsync(It.IsAny<string>())).ReturnsAsync(new IdentityExpressUser());
216 |             mockUserManager.Setup(x => x.AddPasswordAsync(It.IsAny<IdentityExpressUser>(), It.IsAny<string>())).ReturnsAsync(IdentityResult.Failed(new IdentityError {Description = "Error" }));
217 |            
218 |             var model = new RegisterInputModel
219 |             {
220 |                 Username = "Hello"
221 |             };
222 | 
223 |             //act
224 |             var result = await controller.Register(model);
225 |             //assert
226 |             var viewResult = Assert.IsType<ViewResult>(result);
227 |             Assert.False(viewResult.ViewData.ModelState.IsValid);
228 |             mockUserManager.Verify(x => x.UpdateAsync(It.IsAny<IdentityExpressUser>()), Times.Never);
229 |         }
230 | 
231 |         [Fact]
232 |         public async Task Register_WhenAddPasswordSuccees_ExpectUpdateToHaveBeenCalled()
233 |         {
234 |             //arrange
235 |             var controller = CreateSut();
236 |             mockUserManager.Setup(x => x.FindByNameAsync(It.IsAny<string>())).ReturnsAsync(new IdentityExpressUser());
237 |             mockUserManager.Setup(x => x.UpdateAsync(It.IsAny<IdentityExpressUser>())).ReturnsAsync(IdentityResult.Success);
238 |             mockUserManager.Setup(x => x.AddPasswordAsync(It.IsAny<IdentityExpressUser>(), It.IsAny<string>())).ReturnsAsync(IdentityResult.Success);
239 | 
240 |             var model = new RegisterInputModel
241 |             {
242 |                 Username = "Hello"
243 |             };
244 | 
245 |             //act
246 |             var result = await controller.Register(model);
247 |             //assert
248 |             var viewResult = Assert.IsType<ViewResult>(result);
249 |             Assert.True(viewResult.ViewData.ModelState.IsValid);
250 |             mockUserManager.Verify(x => x.UpdateAsync(It.IsAny<IdentityExpressUser>()), Times.Once);
251 |         }
252 |     }
253 | }
254 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUIIntegration.Tests/AccountServiceUnitTests.cs:
--------------------------------------------------------------------------------
  1 | using System.Collections.Generic;
  2 | using System.Security.Claims;
  3 | using System.Threading.Tasks;
  4 | using IdentityModel;
  5 | using Duende.IdentityServer.Models;
  6 | using Duende.IdentityServer.Services;
  7 | using Duende.IdentityServer.Stores;
  8 | using Microsoft.AspNetCore.Authentication;
  9 | using Microsoft.AspNetCore.Http;
 10 | using Moq;
 11 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Services;
 12 | using Xunit;
 13 | 
 14 | namespace AdminUIIntegration.Tests
 15 | {
 16 |     public class AccountServiceUnitTests
 17 |     {
 18 |         private readonly Mock<IIdentityServerInteractionService> mockInteraction = new();
 19 |         private readonly Mock<IClientStore> mockClientStore = new();
 20 |         private readonly Mock<IHttpContextAccessor> mockAccessor = new();
 21 |         private readonly Mock<IAuthenticationSchemeProvider> mockSchemeProvider = new();
 22 |         private readonly Mock<IExternalProviderService> mockExternalProviderService = new();
 23 |         private readonly Mock<IAuthenticationHandlerProvider> mockAuthenticationHandlerProvider = new();
 24 | 
 25 | 
 26 |         private AccountService CreateSut()
 27 |         {
 28 |             return new AccountService(
 29 |                 mockInteraction.Object, 
 30 |                 mockAccessor.Object, 
 31 |                 mockSchemeProvider.Object, 
 32 |                 mockClientStore.Object, 
 33 |                 mockExternalProviderService.Object, 
 34 |                 mockAuthenticationHandlerProvider?.Object);
 35 |         }
 36 | 
 37 |         [Fact]
 38 |         public void BuildLinkLoginViewModel_WithUrl_ShouldReturnLoginModelForLinkSetup()
 39 |         {
 40 |             var testUrl = "https://test.com";
 41 |             var sut = CreateSut();
 42 | 
 43 |             var actual = sut.BuildLinkLoginViewModel(testUrl);
 44 |             
 45 |             Assert.Equal(testUrl, actual.ReturnUrl);
 46 |             Assert.True(actual.EnableLocalLogin);
 47 |             Assert.True(actual.LinkSetup);
 48 |         }
 49 | 
 50 |         [Fact]
 51 |         public async Task BuildLoggedOutViewModelAsync_WhenSuccessfulLogout_ShowCorrectLogoutView()
 52 |         {
 53 |             //arrange
 54 |             const string logoutId = "logoutId";
 55 |             const string iFrameUrl = "iframeUrl";
 56 |             const string redirectUrl = "redirectUrl";
 57 | 
 58 |             var user = new ClaimsPrincipal(new ClaimsIdentity(new[]
 59 |             {
 60 |                 new Claim(ClaimTypes.Name, "name"),
 61 |                 new Claim(JwtClaimTypes.IdentityProvider, "client")
 62 |             }));
 63 | 
 64 |             var client = new Client
 65 |             {
 66 |                 ClientId = "clientId",
 67 |                 ClientName = "clientName",
 68 |                 PostLogoutRedirectUris = new List<string> { redirectUrl}
 69 |             };
 70 | 
 71 |             var logoutMessge = new LogoutMessage
 72 |             {
 73 |                 ClientId = client.ClientId,
 74 |                 ClientName = client.ClientName,
 75 |                 ClientIds = new List<string>
 76 |                 {
 77 |                     client.ClientId
 78 |                 },
 79 |                 SessionId = "sessionId",
 80 |                 SubjectId = "subjectId",
 81 |                 PostLogoutRedirectUri = redirectUrl
 82 |             };
 83 | 
 84 |             LogoutRequest logoutRequest = new LogoutRequest(iFrameUrl, logoutMessge);
 85 |             mockInteraction.Setup(x => x.GetLogoutContextAsync(logoutId))
 86 |                 .ReturnsAsync(logoutRequest).Verifiable();
 87 | 
 88 |             mockAccessor.SetupGet(x => x.HttpContext.User).Returns(user).Verifiable();
 89 | 
 90 |             //act
 91 |             var result = await CreateSut().BuildLoggedOutViewModelAsync(logoutId);
 92 | 
 93 |             //assert
 94 |             Assert.True(result.AutomaticRedirectAfterSignOut);
 95 |             Assert.Equal(redirectUrl, result.PostLogoutRedirectUri);
 96 |             Assert.Equal(client.ClientName, result.ClientName);
 97 |             Assert.Equal(iFrameUrl, result.SignOutIframeUrl);
 98 |             Assert.Equal(logoutId, result.LogoutId);
 99 | 
100 |             mockInteraction.Verify();
101 |             mockAccessor.Verify();
102 | 
103 |         }
104 |     }
105 | }
106 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUIIntegration.Tests/AdminUIIntegration.Tests.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk">
 2 | 
 3 |   <PropertyGroup>    
 4 |     <TargetFramework>net8.0</TargetFramework>
 5 |   </PropertyGroup>
 6 | 
 7 |   <ItemGroup>
 8 |     <PackageReference Include="FluentAssertions" Version="7.1.0" />
 9 |     <PackageReference Include="IdentityModel.AspNetCore.OAuth2Introspection" Version="6.2.0" />
10 |     <PackageReference Include="Microsoft.AspNetCore.TestHost" Version="8.0.12" />
11 |     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.12.0" />
12 |     <PackageReference Include="Moq" Version="4.20.72" />
13 |     <PackageReference Include="xunit" Version="2.9.3" />
14 |     <PackageReference Include="xunit.runner.visualstudio" Version="3.0.1">
15 |       <PrivateAssets>all</PrivateAssets>
16 |       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
17 |     </PackageReference>
18 |   </ItemGroup>
19 | 
20 |   <ItemGroup>
21 |     <ProjectReference Include="..\Rsk.Samples.IdentityServer.AdminUiIntegration\Rsk.Samples.IdentityServer.AdminUiIntegration.csproj" />
22 |   </ItemGroup>
23 | 
24 | </Project>
25 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUIIntegration.Tests/ExternalProvidersServiceTests.cs:
--------------------------------------------------------------------------------
  1 | using System.Collections.Generic;
  2 | using System.Threading.Tasks;
  3 | using Duende.IdentityServer.Models;
  4 | using Duende.IdentityServer.Stores;
  5 | using FluentAssertions;
  6 | using Microsoft.AspNetCore.Authentication;
  7 | using Microsoft.AspNetCore.Authentication.Cookies;
  8 | using Microsoft.AspNetCore.Authentication.OpenIdConnect;
  9 | using Microsoft.Extensions.Configuration;
 10 | using Moq;
 11 | using Rsk.AspNetCore.Authentication.Saml2p;
 12 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Models;
 13 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Services;
 14 | using Xunit;
 15 | 
 16 | namespace AdminUIIntegration.Tests;
 17 | 
 18 | public class ExternalProvidersServiceTests
 19 | {
 20 |     private readonly Mock<IAuthenticationSchemeProvider> authenticationSchemeProviderMock = new();
 21 |     private readonly Mock<IIdentityProviderStore> identityProviderStoreMock = new();
 22 |     private readonly Mock<IConfiguration> configurationMock = new();
 23 | 
 24 |     private readonly List<AuthenticationScheme> fakeAuthSchemesIncRsk = new List<AuthenticationScheme>
 25 |     {
 26 |         new AuthenticationScheme("Cookies", null, typeof(CookieAuthenticationHandler)),
 27 |         new AuthenticationScheme("rsk-oidc-scheme", "RSK OIDC Scheme", typeof(OpenIdConnectHandler)),
 28 |         new AuthenticationScheme("rsk-saml-scheme", "RSK SAML Scheme", typeof(Saml2pAuthenticationHandler)),
 29 |     };
 30 |     
 31 |     private readonly List<IdentityProviderName> fakeDuendeSchemes = new List<IdentityProviderName>
 32 |     {
 33 |         new IdentityProviderName { Scheme = "disabled-scheme", DisplayName = "Disabled Scheme", Enabled = false },
 34 |         new IdentityProviderName { Scheme = "duende-oidc-scheme", DisplayName = "Duende OIDC Scheme", Enabled = true },
 35 |         new IdentityProviderName { Scheme = "duende-saml-scheme", DisplayName = "Duende SAML Scheme", Enabled = true },
 36 |     };
 37 | 
 38 |     public ExternalProvidersServiceTests()
 39 |     {
 40 |         authenticationSchemeProviderMock.Setup(x => x.GetAllSchemesAsync())
 41 |             .ReturnsAsync(fakeAuthSchemesIncRsk);
 42 |         
 43 |         identityProviderStoreMock.Setup(x => x.GetAllSchemeNamesAsync())
 44 |             .ReturnsAsync(fakeDuendeSchemes);
 45 |     }
 46 | 
 47 |     private ExternalProviderService CreateSut()
 48 |     {
 49 |         return new ExternalProviderService(authenticationSchemeProviderMock?.Object, identityProviderStoreMock?.Object, configurationMock?.Object);
 50 |     }
 51 | 
 52 |     private void SetConfig(string value)
 53 |     {
 54 |         var mockSection = new Mock<IConfigurationSection>();
 55 |         mockSection.Setup(x => x.Value).Returns(value);
 56 |         
 57 |         configurationMock.Setup(x => x.GetSection("DynamicAuth:Mode"))
 58 |             .Returns(mockSection.Object);
 59 |     }
 60 | 
 61 |     [Fact] public async Task GetAll_WhenDisabled_ShouldBeEmpty()
 62 |     {
 63 |         SetConfig("Disabled"); //Could be anything as long as it isn't Rsk or Duende
 64 |         
 65 |         var sut = CreateSut();
 66 | 
 67 |         var actual = await sut.GetAll();
 68 | 
 69 |         actual.Should().BeEmpty();
 70 |     }
 71 | 
 72 |     [Fact] public async Task GetAll_WhenDuende_ShouldOnlyReturnDuendeEnabledDynamicProviders()
 73 |     {
 74 |         SetConfig("Duende");
 75 |         
 76 |         var sut = CreateSut();
 77 | 
 78 |         var actual = await sut.GetAll();
 79 | 
 80 |         var expected = new List<ExternalProvider>
 81 |         {
 82 |             new ExternalProvider { AuthenticationScheme = "duende-oidc-scheme", DisplayName = "Duende OIDC Scheme", },
 83 |             new ExternalProvider { AuthenticationScheme = "duende-saml-scheme", DisplayName = "Duende SAML Scheme", },
 84 |         };
 85 | 
 86 |         actual.Should().BeEquivalentTo(expected);
 87 |     }
 88 | 
 89 |     [Fact] public async Task GetAll_WhenRsk_ShouldOnlyReturnRskDynamicProviders()
 90 |     {
 91 |         SetConfig("Rsk");
 92 |         
 93 |         var sut = CreateSut();
 94 | 
 95 |         var actual = await sut.GetAll();
 96 |         
 97 |         var expected = new List<ExternalProvider>
 98 |         {
 99 |             new ExternalProvider { AuthenticationScheme = "rsk-oidc-scheme", DisplayName = "RSK OIDC Scheme", },
100 |             new ExternalProvider { AuthenticationScheme = "rsk-saml-scheme", DisplayName = "RSK SAML Scheme", },
101 |         };
102 | 
103 |         actual.Should().BeEquivalentTo(expected);
104 |     }
105 | 
106 |     [Fact]
107 |     public async Task GetScheme_WhenDisabled_ShouldNotReturnAnything()
108 |     {
109 |         SetConfig("Disabled"); //Could be anything as long as it isn't Rsk or Duende
110 |         
111 |         var sut = CreateSut();
112 | 
113 |         var actualDuende = await sut.GetScheme("duende-oidc-scheme");
114 | 
115 |         actualDuende.Should().BeNull();
116 | 
117 |         var actualRsk = await sut.GetScheme("rsk-oidc-scheme");
118 | 
119 |         actualRsk.Should().BeNull();
120 |     }
121 | 
122 |     [Fact]
123 |     public async Task GetScheme_WhenDuende_ShouldNotReturnDuendeExternalProvider()
124 |     {
125 |         SetConfig("Duende");
126 |         
127 |         var sut = CreateSut();
128 | 
129 |         var actualDuende = await sut.GetScheme("duende-oidc-scheme");
130 | 
131 |         actualDuende.Should().NotBeNull();
132 |         actualDuende.AuthenticationScheme.Should().Be("duende-oidc-scheme");
133 |         actualDuende.DisplayName.Should().Be("Duende OIDC Scheme");
134 | 
135 |         var actualRsk = await sut.GetScheme("rsk-saml-scheme");
136 | 
137 |         actualRsk.Should().BeNull();
138 |     }
139 | 
140 |     [Fact]
141 |     public async Task GetScheme_WhenRsk_ShouldNotReturnRskExternalProvider()
142 |     {
143 |         SetConfig("Rsk");
144 |         
145 |         var sut = CreateSut();
146 | 
147 |         var actualDuende = await sut.GetScheme("duende-oidc-scheme");
148 | 
149 |         actualDuende.Should().BeNull();
150 | 
151 |         var actualRsk = await sut.GetScheme("rsk-saml-scheme");
152 | 
153 |         actualRsk.Should().NotBeNull();
154 |         actualRsk.AuthenticationScheme.Should().Be("rsk-saml-scheme");
155 |         actualRsk.DisplayName.Should().Be("RSK SAML Scheme");
156 |     }
157 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration.sln:
--------------------------------------------------------------------------------
 1 | 
 2 | Microsoft Visual Studio Solution File, Format Version 12.00
 3 | # Visual Studio 15
 4 | VisualStudioVersion = 15.0.26430.13
 5 | MinimumVisualStudioVersion = 10.0.40219.1
 6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Rsk.Samples.IdentityServer.AdminUiIntegration", "Rsk.Samples.IdentityServer.AdminUiIntegration\Rsk.Samples.IdentityServer.AdminUiIntegration.csproj", "{F6F8D777-08BD-44EE-A627-A67EF315360F}"
 7 | EndProject
 8 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "AdminUIIntegration.Tests", "Rsk.Samples.IdentityServer.AdminUIIntegration.Tests\AdminUIIntegration.Tests.csproj", "{830D4D2D-4F89-4C36-A12C-544176CDE15F}"
 9 | EndProject
10 | Global
11 | 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
12 | 		Debug|Any CPU = Debug|Any CPU
13 | 		Release|Any CPU = Release|Any CPU
14 | 	EndGlobalSection
15 | 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
16 | 		{F6F8D777-08BD-44EE-A627-A67EF315360F}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
17 | 		{F6F8D777-08BD-44EE-A627-A67EF315360F}.Debug|Any CPU.Build.0 = Debug|Any CPU
18 | 		{F6F8D777-08BD-44EE-A627-A67EF315360F}.Release|Any CPU.ActiveCfg = Release|Any CPU
19 | 		{F6F8D777-08BD-44EE-A627-A67EF315360F}.Release|Any CPU.Build.0 = Release|Any CPU
20 | 		{830D4D2D-4F89-4C36-A12C-544176CDE15F}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
21 | 		{830D4D2D-4F89-4C36-A12C-544176CDE15F}.Debug|Any CPU.Build.0 = Debug|Any CPU
22 | 		{830D4D2D-4F89-4C36-A12C-544176CDE15F}.Release|Any CPU.ActiveCfg = Release|Any CPU
23 | 		{830D4D2D-4F89-4C36-A12C-544176CDE15F}.Release|Any CPU.Build.0 = Release|Any CPU
24 | 	EndGlobalSection
25 | 	GlobalSection(SolutionProperties) = preSolution
26 | 		HideSolutionNode = FALSE
27 | 	EndGlobalSection
28 | EndGlobal
29 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/AccessTokenValidation/Selector.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Linq;
 3 | using Microsoft.AspNetCore.Http;
 4 | 
 5 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.AccessTokenValidation
 6 | {
 7 |     /// <summary>
 8 |     /// Provides helper functions for forwarding logic
 9 |     /// </summary>
10 |     public static class Selector
11 |     {
12 |         /// <summary>
13 |         /// Provides a forwarding func for JWT vs reference tokens (based on existence of dot in token)
14 |         /// </summary>
15 |         /// <param name="introspectionScheme">Scheme name of the introspection handler</param>
16 |         /// <returns></returns>
17 |         public static Func<HttpContext, string> ForwardReferenceToken(string introspectionScheme = "introspection")
18 |         {
19 |             string Select(HttpContext context)
20 |             {
21 |                 var (scheme, credential) = GetSchemeAndCredential(context);
22 |                 if (scheme.Equals("Bearer", StringComparison.OrdinalIgnoreCase) &&
23 |                     !credential.Contains("."))
24 |                 {
25 |                     return introspectionScheme;
26 |                 }
27 | 
28 |                 return null;
29 |             }
30 | 
31 |             return Select;
32 |         }
33 |         
34 |         /// <summary>
35 |         /// Extracts scheme and credential from Authorization header (if present)
36 |         /// </summary>
37 |         /// <param name="context"></param>
38 |         /// <returns></returns>
39 |         public static (string, string) GetSchemeAndCredential(HttpContext context)
40 |         {
41 |             var header = context.Request.Headers["Authorization"].FirstOrDefault();
42 | 
43 |             if (string.IsNullOrEmpty(header))
44 |             {
45 |                 return ("", "");
46 |             }
47 | 
48 |             var parts = header.Split(' ', StringSplitOptions.RemoveEmptyEntries);
49 |             if (parts.Length != 2)
50 |             {
51 |                 return ("", "");
52 |             }
53 | 
54 |             return (parts[0], parts[1]);
55 |         }
56 |     }
57 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/CN=RSKSampleIdentityServer.pfx:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/CN=RSKSampleIdentityServer.pfx


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Controllers/ConsentController.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | 
 5 | using System.Threading.Tasks;
 6 | using Duende.IdentityServer.Extensions;
 7 | using Duende.IdentityServer.Services;
 8 | using Microsoft.AspNetCore.Mvc;
 9 | using Microsoft.Extensions.Logging;
10 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Middleware;
11 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Models;
12 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Services;
13 | 
14 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Controllers
15 | {
16 |     /// <summary>
17 |     /// This controller processes the consent UI
18 |     /// </summary>
19 |     [SecurityHeaders]
20 |     public class ConsentController : Controller
21 |     {
22 |         private readonly ConsentService consent;
23 | 
24 |         public ConsentController(
25 |             IIdentityServerInteractionService interaction,
26 |             IEventService events,
27 |             ILogger<ConsentController> logger)
28 |         {
29 |             consent = new ConsentService(interaction, events, logger);
30 |         }
31 | 
32 |         /// <summary>
33 |         /// Shows the consent screen
34 |         /// </summary>
35 |         /// <param name="returnUrl"></param>
36 |         /// <returns></returns>
37 |         [HttpGet]
38 |         public async Task<IActionResult> Index(string returnUrl)
39 |         {
40 |             var vm = await consent.BuildViewModelAsync(returnUrl);
41 |             if (vm != null)
42 |             {
43 |                 return View("Index", vm);
44 |             }
45 | 
46 |             return View("Error");
47 |         }
48 | 
49 |         /// <summary>
50 |         /// Handles the consent screen postback
51 |         /// </summary>
52 |         [HttpPost]
53 |         [ValidateAntiForgeryToken]
54 |         public async Task<IActionResult> Index(ConsentInputModel model)
55 |         {
56 |             var result = await consent.ProcessConsent(model, User.GetSubjectId());
57 | 
58 |             if (result.IsRedirect)
59 |             {
60 |                 return Redirect(result.RedirectUri);
61 |             }
62 | 
63 |             if (result.HasValidationError)
64 |             {
65 |                 ModelState.AddModelError("", result.ValidationError);
66 |             }
67 | 
68 |             if (result.ShowView)
69 |             {
70 |                 return View("Index", result.ViewModel);
71 |             }
72 | 
73 |             return View("Error");
74 |         }
75 |     }
76 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Controllers/DiagnosticsController.cs:
--------------------------------------------------------------------------------
 1 | using System.Threading.Tasks;
 2 | using Microsoft.AspNetCore.Authentication;
 3 | using Microsoft.AspNetCore.Authorization;
 4 | using Microsoft.AspNetCore.Mvc;
 5 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Middleware;
 6 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Models;
 7 | 
 8 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Controllers
 9 | {
10 |     [Authorize]
11 |     [SecurityHeaders]
12 |     public class DiagnosticsController : Controller
13 |     {
14 |         public async Task<IActionResult> Index()
15 |         {
16 |             var model = new DiagnosticsViewModel(await HttpContext.AuthenticateAsync());
17 |             return View(model);
18 |         }
19 |     }
20 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Controllers/GrantsController.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | 
 5 | using System.Collections.Generic;
 6 | using System.Linq;
 7 | using System.Threading.Tasks;
 8 | using Duende.IdentityServer.Services;
 9 | using Duende.IdentityServer.Stores;
10 | using Microsoft.AspNetCore.Authorization;
11 | using Microsoft.AspNetCore.Mvc;
12 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Middleware;
13 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Models;
14 | 
15 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Controllers
16 | {
17 |     /// <summary>
18 |     /// This sample controller allows a user to revoke grants given to clients
19 |     /// </summary>
20 |     [SecurityHeaders]
21 |     [Authorize]
22 |     public class GrantsController : Controller
23 |     {
24 |         private readonly IIdentityServerInteractionService interaction;
25 |         private readonly IClientStore clients;
26 |         private readonly IResourceStore resources;
27 | 
28 |         public GrantsController(IIdentityServerInteractionService interaction,
29 |             IClientStore clients,
30 |             IResourceStore resources)
31 |         {
32 |             this.interaction = interaction;
33 |             this.clients = clients;
34 |             this.resources = resources;
35 |         }
36 | 
37 |         /// <summary>
38 |         /// Show list of grants
39 |         /// </summary>
40 |         [HttpGet]
41 |         public async Task<IActionResult> Index()
42 |         {
43 |             return View("Index", await BuildViewModelAsync());
44 |         }
45 | 
46 |         /// <summary>
47 |         /// Handle postback to revoke a client
48 |         /// </summary>
49 |         [HttpPost]
50 |         [ValidateAntiForgeryToken]
51 |         public async Task<IActionResult> Revoke(string clientId)
52 |         {
53 |             await interaction.RevokeUserConsentAsync(clientId);
54 |             return RedirectToAction("Index");
55 |         }
56 | 
57 |         private async Task<GrantsViewModel> BuildViewModelAsync()
58 |         {
59 |             var grants = await interaction.GetAllUserGrantsAsync();
60 | 
61 |             var list = new List<GrantViewModel>();
62 |             foreach(var grant in grants)
63 |             {
64 |                 var client = await clients.FindClientByIdAsync(grant.ClientId);
65 |                 if (client != null)
66 |                 {
67 |                     var resources = await this.resources.FindResourcesByScopeAsync(grant.Scopes);
68 | 
69 |                     var item = new GrantViewModel
70 |                     {
71 |                         ClientId = client.ClientId,
72 |                         ClientName = client.ClientName ?? client.ClientId,
73 |                         ClientLogoUrl = client.LogoUri,
74 |                         ClientUrl = client.ClientUri,
75 |                         Description = grant.Description,
76 |                         Created = grant.CreationTime,
77 |                         Expires = grant.Expiration,
78 |                         IdentityGrantNames = resources.IdentityResources.Select(x => x.DisplayName ?? x.Name).ToArray(),
79 |                         ApiGrantNames = resources.ApiScopes.Select(x => x.DisplayName ?? x.Name).ToArray()
80 |                     };
81 | 
82 |                     list.Add(item);
83 |                 }
84 |             }
85 | 
86 |             return new GrantsViewModel
87 |             {
88 |                 Grants = list
89 |             };
90 |         }
91 |     }
92 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Controllers/HomeController.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | 
 5 | using System.Threading.Tasks;
 6 | using Duende.IdentityServer.Services;
 7 | using Microsoft.AspNetCore.Mvc;
 8 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Middleware;
 9 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Models;
10 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Services;
11 | 
12 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Controllers
13 | {
14 |     [SecurityHeaders]
15 |     public class HomeController : Controller
16 |     {
17 |         private readonly IIdentityServerInteractionService interaction;
18 |         private readonly IEventStore eventStore;
19 | 
20 |         public HomeController(IIdentityServerInteractionService interaction, IEventStore eventStore)
21 |         {
22 |             this.interaction = interaction;
23 |             this.eventStore = eventStore;
24 |         }
25 | 
26 |         public IActionResult Index()
27 |         {
28 |             return View();
29 |         }
30 | 
31 |         /// <summary>
32 |         /// Shows the error page
33 |         /// </summary>
34 |         public async Task<IActionResult> Error(string errorId)
35 |         {
36 |             var vm = new ErrorViewModel();
37 |             
38 |             // retrieve error details from IdentityServer
39 |             var message = await interaction.GetErrorContextAsync(errorId);
40 |             
41 |             //try and get more details regarding the error from the IdentityServer event cache
42 |             var cachedEventInformation = eventStore.GetEventByTraceID(HttpContext.TraceIdentifier);
43 |             
44 |             if (message != null)
45 |             {
46 |                 vm.Error = message;
47 |                 vm.EventStoreMessage = cachedEventInformation;
48 |             }
49 | 
50 |             return View("Error", vm);
51 |         }
52 |     }
53 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Controllers/WebhookController.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Threading.Tasks;
 3 | using Duende.IdentityServer.Services;
 4 | using IdentityExpress.Identity;
 5 | using Microsoft.AspNetCore.Authorization;
 6 | using Microsoft.AspNetCore.Identity;
 7 | using Microsoft.AspNetCore.Mvc;
 8 | using Microsoft.Extensions.Logging;
 9 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Models;
10 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Services;
11 | 
12 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Controllers
13 | {
14 |     [Route("[controller]")]
15 |     public class WebhookController : Controller
16 |     {
17 |         private readonly WebhookService webhookService;
18 |         private readonly ILogger<WebhookController> logger;
19 |         private readonly ISessionManagementService sessionManagementService;
20 |         
21 |         public WebhookController(ILogger<WebhookController> logger, UserManager<IdentityExpressUser> userManager, ISessionManagementService sessionManagementService)
22 |         {
23 |             webhookService = new WebhookService(userManager);
24 |             
25 |             this.logger = logger ?? throw new ArgumentNullException(nameof(logger));
26 |             this.sessionManagementService = sessionManagementService ?? throw new ArgumentNullException(nameof(sessionManagementService));
27 |         }
28 | 
29 |         [Authorize("webhook")]
30 |         [HttpPost]
31 |         public async Task<IActionResult> ResetMfa([FromBody] WebhookModel dto)
32 |         {
33 |             if (string.IsNullOrEmpty(dto.Email))
34 |             {
35 |                 logger.LogError("Cannot reset Mfa if email does not have value");
36 |                 return BadRequest("Email cannot be null");
37 |             }
38 | 
39 |             var result = await webhookService.SendResetMfaEmail(dto.Username, CreateMfaResetLink);
40 | 
41 |             if (!result.Succeeded)
42 |             {
43 |                 logger.LogError($"ResetMfa webhook failed: {result.ErrorMessage}");
44 |                 return BadRequest(result.ErrorMessage);
45 |             }
46 |             
47 |             return Ok();
48 |         }
49 | 
50 |         [HttpDelete("deletesession/{id}")]
51 |         public async Task<IActionResult> DeleteServerSideSession([FromRoute] string id)
52 |         {
53 |             ArgumentNullException.ThrowIfNull(id);
54 | 
55 |             await sessionManagementService.RemoveSessionsAsync(new RemoveSessionsContext
56 |             {
57 |                 SessionId = id
58 |             });
59 | 
60 |             return Ok();
61 |         }
62 |         
63 |         private Uri CreateMfaResetLink(string subject)
64 |         {
65 |             return new Uri(Url.Action("", "", new { subject }, Request.Scheme));
66 |         }
67 |     }
68 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/CustomOidcConfigureOptions.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authentication.OpenIdConnect;
 2 | using Microsoft.AspNetCore.Http;
 3 | using Microsoft.Extensions.Options;
 4 | 
 5 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration;
 6 | 
 7 | public class CustomOidcConfigureOptions : IConfigureNamedOptions<OpenIdConnectOptions>
 8 | {
 9 |     public void Configure(string name, OpenIdConnectOptions options)
10 |     {
11 |         Configure(options);
12 |     }
13 | 
14 |     public void Configure(OpenIdConnectOptions options)
15 |     {
16 |         options.NonceCookie.SameSite = SameSiteMode.Lax;
17 |         options.NonceCookie.SecurePolicy = CookieSecurePolicy.None;
18 |         options.CorrelationCookie.SameSite = SameSiteMode.Lax;
19 |         options.CorrelationCookie.SecurePolicy = CookieSecurePolicy.None;
20 |     }
21 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Demo/DemoCorsPolicy.cs:
--------------------------------------------------------------------------------
 1 | using System.Threading.Tasks;
 2 | using Duende.IdentityServer.Services;
 3 | 
 4 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Demo
 5 | {
 6 |     /// <summary>
 7 |     /// Allows any CORS origin - DO NOT USE IN PRODUCTION
 8 |     /// </summary>
 9 |     public class DemoCorsPolicy : ICorsPolicyService
10 |     {
11 |         public Task<bool> IsOriginAllowedAsync(string origin)
12 |         {
13 |             return Task.FromResult(true);
14 |         }
15 |     }
16 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Demo/DemoRedirectUriValidator.cs:
--------------------------------------------------------------------------------
 1 | using System.Threading.Tasks;
 2 | using Duende.IdentityServer.Models;
 3 | using Duende.IdentityServer.Validation;
 4 | 
 5 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Demo
 6 | {
 7 |     /// <summary>
 8 |     /// Disables redirect URI validation - DO NOT USE IN PRODUCTION
 9 |     /// </summary>
10 |     public class DemoRedirectUriValidator : IRedirectUriValidator
11 |     {
12 |         public Task<bool> IsRedirectUriValidAsync(string requestedUri, Client client)
13 |         {
14 |             return Task.FromResult(true);
15 |         }
16 | 
17 |         public Task<bool> IsPostLogoutRedirectUriValidAsync(string requestedUri, Client client)
18 |         {
19 |             return Task.FromResult(true);
20 |         }
21 |     }
22 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Dockerfile:
--------------------------------------------------------------------------------
 1 | # Stage 1 - Build
 2 | FROM --platform=$BUILDPLATFORM mcr.microsoft.com/dotnet/sdk:8.0-alpine AS build
 3 | ARG TARGETARCH
 4 | 
 5 | WORKDIR /app
 6 | 
 7 | # packages installed
 8 | RUN apk update && \
 9 |     apk upgrade
10 | 
11 | # Copy csproj and restore as distinct layers
12 | COPY *.csproj .
13 | RUN dotnet restore -a $TARGETARCH
14 | 
15 | # Copy everything else and build
16 | COPY . .
17 | RUN dotnet publish -a $TARGETARCH -o out
18 | 
19 | # Stage 2 - Runtime
20 | FROM mcr.microsoft.com/dotnet/aspnet:8.0 AS runtime
21 | 
22 | ENV ASPNETCORE_ENVIRONMENT=Production
23 | ENV ASPNETCORE_HTTP_PORT=5003
24 | ENV ASPNETCORE_URLS=http://*:5003
25 | ENV DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=false
26 | 
27 | EXPOSE 5003
28 | 
29 | WORKDIR /app
30 | COPY --from=build /app/out .
31 | ENTRYPOINT ["dotnet", "Rsk.Samples.IdentityServer.AdminUiIntegration.dll"]


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Extensions/EventSinkExtExtensions.cs:
--------------------------------------------------------------------------------
 1 | 
 2 | 
 3 | using System.Collections.Generic;
 4 | using Duende.IdentityServer.Events;
 5 | using Duende.IdentityServer.Services;
 6 | using Microsoft.EntityFrameworkCore;
 7 | using Microsoft.Extensions.Caching.Memory;
 8 | using Microsoft.Extensions.DependencyInjection;
 9 | using Microsoft.Extensions.Logging;
10 | using RSK.Audit;
11 | using RSK.Audit.EF;
12 | using Rsk.DuendeIdentityServer.AuditEventSink;
13 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Services;
14 | using AuditProviderFactory = RSK.Audit.EF.AuditProviderFactory;
15 | 
16 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Extensions;
17 | 
18 | public static class EventSinkExtExtensions
19 | {
20 |     public static IServiceCollection AddAuditProviderFactory(this IServiceCollection services, DbContextOptionsBuilder<AuditDatabaseContext> auditDbBuilder)
21 |     {
22 |         RSK.Audit.AuditProviderFactory auditFactory = new AuditProviderFactory(auditDbBuilder.Options);
23 |         services.AddSingleton(auditFactory.CreateAuditSource("IdentityServer"));
24 |         services.AddSingleton<IEventSink, AuditSink>();
25 |         return services;
26 |     }
27 |     
28 |     public static IServiceCollection AddEventSinks(this IServiceCollection services)
29 |     {
30 |         var sp = services.BuildServiceProvider();
31 | 
32 |         var eventSinkAgLogger = sp.GetService<ILogger<EventSinkAggregator>>();
33 |         var defaultEventLogger = sp.GetService<ILogger<DefaultEventService>>();
34 | 
35 |         var eventStore = sp.GetService<IEventStore>();
36 |         var memoryCache = sp.GetService<IMemoryCache>();
37 | 
38 |         IRecordAuditableActions recordAuditableActions = sp.GetService<IRecordAuditableActions>();
39 |         
40 |         
41 |         services.AddSingleton(provider => new EventSinkAggregator(eventSinkAgLogger)  
42 |         {
43 |             EventSinks = new List<IEventSink>()
44 |             {
45 |                 new CustomEventSink(defaultEventLogger, eventStore),
46 |                 new AuditSink(recordAuditableActions),
47 |             }
48 |         });
49 | 
50 |         return services;
51 |     }
52 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Middleware/SecurityHeadersAttribute.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | 
 5 | using Microsoft.AspNetCore.Http;
 6 | using Microsoft.AspNetCore.Mvc;
 7 | using Microsoft.AspNetCore.Mvc.Filters;
 8 | 
 9 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Middleware
10 | {
11 |     public class SecurityHeadersAttribute : ActionFilterAttribute
12 |     {
13 |         public override void OnResultExecuting(ResultExecutingContext context)
14 |         {
15 |             var result = context.Result;
16 |             if (result is ViewResult)
17 |             {
18 |                 // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
19 |                 if (!context.HttpContext.Response.Headers.ContainsKey("X-Content-Type-Options"))
20 |                 {
21 |                     context.HttpContext.Response.Headers.Append("X-Content-Type-Options", "nosniff");
22 |                 }
23 | 
24 |                 // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
25 |                 if (!context.HttpContext.Response.Headers.ContainsKey("X-Frame-Options"))
26 |                 {
27 |                     context.HttpContext.Response.Headers.Append("X-Frame-Options", "SAMEORIGIN");
28 |                 }
29 | 
30 |                 // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
31 |                 var csp = "default-src 'self'; " +
32 |                           "object-src 'none'; " +
33 |                           "img-src 'self'; " +
34 |                           "frame-ancestors 'none'; " +
35 |                           "sandbox allow-forms allow-same-origin allow-scripts allow-popups; " +
36 |                           "base-uri 'self';";
37 | 
38 |                 // also consider adding upgrade-insecure-requests once you have HTTPS in place for production
39 |                 //csp += "upgrade-insecure-requests;";
40 |                 // also an example if you need client images to be displayed from twitter
41 |                 // csp += "img-src 'self' https://pbs.twimg.com;";
42 | 
43 |                 // once for standards compliant browsers
44 |                 if (!context.HttpContext.Response.Headers.ContainsKey("Content-Security-Policy"))
45 |                 {
46 |                     context.HttpContext.Response.Headers.Append("Content-Security-Policy", csp);
47 |                 }
48 |                 // and once again for IE
49 |                 if (!context.HttpContext.Response.Headers.ContainsKey("X-Content-Security-Policy"))
50 |                 {
51 |                     context.HttpContext.Response.Headers.Append("X-Content-Security-Policy", csp);
52 |                 }
53 | 
54 |                 // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
55 |                 if (!context.HttpContext.Response.Headers.ContainsKey("Referrer-Policy"))
56 |                 {
57 |                     context.HttpContext.Response.Headers.Append("Referrer-Policy", "no-referrer");
58 |                 }
59 |             }
60 |         }
61 |     }
62 | }
63 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Middleware/XForwardedPrefixMiddleware.cs:
--------------------------------------------------------------------------------
 1 | using System.Linq;
 2 | using System.Threading.Tasks;
 3 | using Microsoft.AspNetCore.Http;
 4 | 
 5 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Middleware
 6 | {
 7 |     public class XForwardedPrefixMiddleware : IMiddleware
 8 |     {
 9 |         public async Task InvokeAsync(HttpContext context, RequestDelegate next)
10 |         {
11 |             if (context.Request.Headers.TryGetValue("X-Forwarded-Prefix", out var pathBase))
12 |             {
13 |                 context.Request.PathBase = pathBase.Last();
14 | 
15 |                 if (context.Request.Path.StartsWithSegments(context.Request.PathBase, out var path))
16 |                 {
17 |                     context.Request.Path = path;
18 |                 }
19 |             }
20 |             await next(context);
21 |         }
22 |     }
23 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/ConsentInputModel.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | 
 5 | using System.Collections.Generic;
 6 | 
 7 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
 8 | {
 9 |     public class ConsentInputModel
10 |     {
11 |         public string Button { get; set; }
12 |         public IEnumerable<string> ScopesConsented { get; set; }
13 |         public bool RememberConsent { get; set; }
14 |         public string ReturnUrl { get; set; }
15 |         public string Description { get; set; }
16 |     }
17 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/ConsentViewModel.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | 
 5 | using System.Collections.Generic;
 6 | 
 7 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
 8 | {
 9 |     public class ConsentViewModel : ConsentInputModel
10 |     {
11 |         public string ClientName { get; set; }
12 |         public string ClientUrl { get; set; }
13 |         public string ClientLogoUrl { get; set; }
14 |         public bool AllowRememberConsent { get; set; }
15 | 
16 |         public IEnumerable<ScopeViewModel> IdentityScopes { get; set; }
17 |         public IEnumerable<ScopeViewModel> ApiScopes { get; set; }
18 |     }
19 | }
20 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/DiagnosticsViewModel.cs:
--------------------------------------------------------------------------------
 1 | using System.Collections.Generic;
 2 | using System.Text;
 3 | using System.Text.Json;
 4 | using IdentityModel;
 5 | using Microsoft.AspNetCore.Authentication;
 6 | 
 7 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
 8 | {
 9 |     public class DiagnosticsViewModel
10 |     {
11 |         public DiagnosticsViewModel(AuthenticateResult result)
12 |         {
13 |             AuthenticateResult = result;
14 | 
15 |             if (result.Properties.Items.ContainsKey("client_list"))
16 |             {
17 |                 var encoded = result.Properties.Items["client_list"];
18 |                 var bytes = Base64Url.Decode(encoded);
19 |                 var value = Encoding.UTF8.GetString(bytes);
20 | 
21 |                 Clients = JsonSerializer.Deserialize<string[]>(value);
22 |             }
23 |         }
24 | 
25 |         public AuthenticateResult AuthenticateResult { get; }
26 |         public IEnumerable<string> Clients { get; } = new List<string>();
27 |     }
28 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/ErrorViewModel.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | 
 5 | using Duende.IdentityServer.Models;
 6 | 
 7 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
 8 | {
 9 |     public class ErrorViewModel
10 |     {
11 |         public ErrorMessage Error { get; set; }
12 |         public string EventStoreMessage { get; set; }
13 |     }
14 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/ExternalProvider.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | 
 5 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
 6 | {
 7 |     public class ExternalProvider
 8 |     {
 9 |         public string DisplayName { get; set; }
10 |         public string AuthenticationScheme { get; set; }
11 |     }
12 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/GrantsViewModel.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | 
 4 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
 5 | {
 6 |     public class GrantsViewModel
 7 |     {
 8 |         public IEnumerable<GrantViewModel> Grants { get; set; }
 9 |     }
10 | 
11 |     public class GrantViewModel
12 |     {
13 |         public string ClientId { get; set; }
14 |         public string ClientName { get; set; }
15 |         public string ClientUrl { get; set; }
16 |         public string ClientLogoUrl { get; set; }
17 |         public string Description { get; set; }
18 |         public DateTime Created { get; set; }
19 |         public DateTime? Expires { get; set; }
20 |         public IEnumerable<string> IdentityGrantNames { get; set; }
21 |         public IEnumerable<string> ApiGrantNames { get; set; }
22 |     }
23 | }
24 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/LoggedOutViewModel.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | 
 5 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
 6 | {
 7 |     public class LoggedOutViewModel
 8 |     {
 9 |         public string PostLogoutRedirectUri { get; set; }
10 |         public string ClientName { get; set; }
11 |         public string SignOutIframeUrl { get; set; }
12 | 
13 |         public bool AutomaticRedirectAfterSignOut { get; set; }
14 | 
15 |         public string LogoutId { get; set; }
16 |         public bool TriggerExternalSignout => ExternalAuthenticationScheme != null;
17 |         public string ExternalAuthenticationScheme { get; set; }
18 |     }
19 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/LoginInputModel.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | 
 5 | using System.ComponentModel.DataAnnotations;
 6 | 
 7 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
 8 | {
 9 |     public class LoginInputModel
10 |     {
11 |         [Required]
12 |         public string Username { get; set; }
13 |         [Required]
14 |         public string Password { get; set; }
15 |         public bool RememberLogin { get; set; }
16 |         public string ReturnUrl { get; set; }
17 |     }
18 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/LoginViewModel.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | 
 5 | using System;
 6 | using System.Collections.Generic;
 7 | using System.Linq;
 8 | 
 9 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
10 | {
11 |     public class LoginViewModel : LoginInputModel
12 |     {
13 |         public bool EnableLocalLogin { get; set; }
14 |         public bool LinkSetup { get; set; } = false;
15 | 
16 |         public IEnumerable<ExternalProvider> ExternalProviders { get; set; }
17 |         public IEnumerable<ExternalProvider> VisibleExternalProviders => ExternalProviders.Where(x => !String.IsNullOrWhiteSpace(x.DisplayName));
18 | 
19 |         public bool IsExternalLoginOnly => EnableLocalLogin == false && ExternalProviders?.Count() == 1;
20 |         public string ExternalLoginScheme => ExternalProviders?.SingleOrDefault()?.AuthenticationScheme;
21 |     }
22 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/LogoutInputModel.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | 
 5 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
 6 | {
 7 |     public class LogoutInputModel
 8 |     {
 9 |         public string LogoutId { get; set; }
10 |     }
11 | }
12 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/LogoutViewModel.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | 
 5 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
 6 | {
 7 |     public class LogoutViewModel : LogoutInputModel
 8 |     {
 9 |         public bool ShowLogoutPrompt { get; set; }
10 |     }
11 | }
12 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/RegisterInputModel.cs:
--------------------------------------------------------------------------------
 1 | using System.ComponentModel.DataAnnotations;
 2 | 
 3 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
 4 | {
 5 |     public class RegisterInputModel
 6 |     {
 7 |         [Required]
 8 |         public string Username { get; set; }
 9 | 
10 |         [Required]
11 |         public string Password { get; set; }
12 | 
13 |         [Required]
14 |         [Compare("Password", ErrorMessage = "Please make sure your passwords match")]
15 |         [Display(Name = "Confirm password")]
16 |         public string ConfirmPassword { get; set; }
17 |     }
18 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/RegisterViewModel.cs:
--------------------------------------------------------------------------------
1 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
2 | {
3 |     public class RegisterViewModel : RegisterInputModel
4 |     {
5 |         public bool IsSuccess { get; set; }
6 |     }
7 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/ScopeViewModel.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | 
 5 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
 6 | {
 7 |     public class ScopeViewModel
 8 |     {
 9 |         public string Value { get; set; }
10 |         public string DisplayName { get; set; }
11 |         public string Description { get; set; }
12 |         public bool Emphasize { get; set; }
13 |         public bool Required { get; set; }
14 |         public bool Checked { get; set; }
15 |     }
16 | }
17 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/SendResetMfaOneTimeLinkResult.cs:
--------------------------------------------------------------------------------
 1 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
 2 | {
 3 |     public class SendResetMfaOneTimeLinkResult
 4 |     {
 5 |         private SendResetMfaOneTimeLinkResult() {}
 6 | 
 7 |         public bool Succeeded => ErrorMessage == null;
 8 |         public string ErrorMessage { get; private set; }
 9 | 
10 |         public static SendResetMfaOneTimeLinkResult Success()
11 |         {
12 |             return new SendResetMfaOneTimeLinkResult
13 |             {
14 |                 ErrorMessage = null
15 |             };
16 |         }
17 | 
18 |         public static SendResetMfaOneTimeLinkResult Failed(string error)
19 |         {
20 |             return new SendResetMfaOneTimeLinkResult
21 |             {
22 |                 ErrorMessage = error
23 |             };
24 |         }
25 |     }
26 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Models/WebhookModel.cs:
--------------------------------------------------------------------------------
1 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Models
2 | {
3 |     public class WebhookModel
4 |     {
5 |         public string Subject { get; set; }
6 |         public string Username { get; set; }
7 |         public string Email { get; set; }
8 |     }
9 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Program.cs:
--------------------------------------------------------------------------------
  1 | using System;
  2 | using System.Collections.Generic;
  3 | using System.IO;
  4 | using System.Linq;
  5 | using Duende.IdentityServer;
  6 | using Duende.IdentityServer.EntityFramework.DbContexts;
  7 | using Duende.IdentityServer.EntityFramework.Mappers;
  8 | using Duende.IdentityServer.Models;
  9 | using IdentityModel;
 10 | using Microsoft.AspNetCore.Hosting;
 11 | using Microsoft.Extensions.Configuration;
 12 | using Microsoft.Extensions.DependencyInjection;
 13 | using Microsoft.Extensions.Hosting;
 14 | using Microsoft.Extensions.Logging;
 15 | 
 16 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration
 17 | {
 18 |     public class Program
 19 |     {
 20 |         public static void Main(string[] args)
 21 |         {
 22 |             var host = BuildWebHost(args).Build();
 23 | 
 24 |             var builder = new ConfigurationBuilder()
 25 |                 .SetBasePath(Directory.GetCurrentDirectory())
 26 |                 .AddJsonFile("appsettings.json", true, true)
 27 |                 .AddEnvironmentVariables();
 28 |             var configuration = builder.Build();
 29 |             
 30 |             if (args.Contains("seed"))
 31 |             {
 32 |                 var isDemo = configuration.GetValue("IsDemo", false);
 33 |                 if (!isDemo)
 34 |                 {
 35 |                     Console.WriteLine("IsDemo Set to False - Not Running Seed");
 36 |                     // Per https://tldp.org/LDP/abs/html/exitcodes.html
 37 |                     Environment.ExitCode = 126;
 38 |                     return;
 39 |                 }
 40 | 
 41 |                 //ONLY FOR DEMO PURPOSES
 42 |                 using (var scope = host.Services.CreateScope())
 43 |                 {
 44 |                     var dbContext = scope.ServiceProvider.GetRequiredService<ConfigurationDbContext>();
 45 |                     var exitCode = Config.Seed(dbContext);
 46 |                     Environment.ExitCode = exitCode;
 47 |                 }
 48 |                 return;
 49 |             }
 50 |             
 51 |             host.Run();
 52 |         }
 53 | 
 54 |         public static IHostBuilder BuildWebHost(string[] args) =>
 55 |             Host.CreateDefaultBuilder(args)
 56 |                 .ConfigureWebHostDefaults(webBuilder =>
 57 |                 {
 58 |                     webBuilder.UseStartup<Startup>()
 59 |                         .ConfigureLogging((context, logging) =>
 60 |                         {
 61 |                             logging.AddDebug();
 62 |                             logging.AddConsole();
 63 | 
 64 |                             // Suppress some of the SQL Statements output from EF
 65 |                             logging.AddFilter("Microsoft.EntityFrameworkCore.Database.Command", LogLevel.Warning);
 66 |                         });
 67 |                 });
 68 |     }
 69 |     
 70 |     /// <summary>
 71 |     /// Quickstart config
 72 |     /// </summary>
 73 |     public static class Config
 74 |     {
 75 |         public static int Seed(ConfigurationDbContext context)
 76 |         {
 77 |             var missingClients = Clients.Where(x => !context.Clients.Any(y => y.ClientId == x.ClientId));
 78 |             context.Clients.AddRange(missingClients.Select(x => x.ToEntity()));
 79 |             var missingApiResources = ApiResources.Where(x => !context.ApiResources.Any(y => y.Name == x.Name));
 80 |             context.ApiResources.AddRange(missingApiResources.Select(x => x.ToEntity()));
 81 |             var missingApiScopes = ApiScopes.Where(x => !context.ApiScopes.Any(y => y.Name == x.Name));
 82 |             context.ApiScopes.AddRange(missingApiScopes.Select(x => x.ToEntity()));
 83 |             
 84 |             var missingIdentityResources = IdentityResources.Where(x => !context.IdentityResources.Any(y => y.Name == x.Name));
 85 |             foreach (var idr in missingIdentityResources)
 86 |             {
 87 |                 var idrToEntity = idr.ToEntity();
 88 |                 
 89 |                 if (idrToEntity.Name == IdentityServerConstants.StandardScopes.OpenId ||
 90 |                     idrToEntity.Name == IdentityServerConstants.StandardScopes.Profile)
 91 |                 {
 92 |                     idrToEntity.NonEditable = true;
 93 |                 }
 94 |                 
 95 |                 context.IdentityResources.Add(idrToEntity);
 96 |             }
 97 | 
 98 |             try
 99 |             {
100 |                 context.SaveChanges();
101 |             }
102 |             catch (Exception)
103 |             {
104 |                 return 1;
105 |             }
106 |             return 0;
107 |         }
108 | 
109 |         public static IEnumerable<IdentityResource> IdentityResources =>
110 |             new List<IdentityResource>
111 |             {
112 |                 new IdentityResources.OpenId(),
113 |                 new IdentityResources.Profile(),
114 |                 new IdentityResources.Email(),
115 |                 new IdentityResources.Phone(),
116 |                 
117 |                 new("verification", new List<string> { JwtClaimTypes.Email, JwtClaimTypes.EmailVerified })
118 |             };
119 | 
120 |         private static IEnumerable<ApiResource> ApiResources => new[]
121 |         {
122 |             new ApiResource("api1", "Sample API")
123 |             {
124 |                 Scopes = new[] {"api1"}, 
125 |                 ApiSecrets = new List<Secret> { new Secret("api1Secret") }
126 |             },
127 |             new ApiResource("admin_ui_webhooks", "Admin UI Webhooks")
128 |             {
129 |                 Scopes = new [] {"admin_ui_webhooks"}, 
130 |                 ApiSecrets = new List<Secret> { new Secret("adminUiWebhooksSecret") }
131 |             }
132 |         };
133 |         
134 |         private static IEnumerable<ApiScope> ApiScopes => new[] {new ApiScope("api1", "Sample API - full access"), new ApiScope("admin_ui_webhooks", "Admin UI Webhooks")};
135 | 
136 |         private static IEnumerable<Client> Clients =>
137 |             new[]
138 |             {
139 |                 // machine to machine client
140 |                 new Client
141 |                 {
142 |                     ClientId = "client",
143 |                     ClientName = "Machine to Machine Client",
144 |                     ClientSecrets = {new Secret("secret".Sha256())},
145 |                     Description = "Demo client credentials app. Client secret = 'secret'.",
146 |                     AllowedGrantTypes = GrantTypes.ClientCredentials,
147 |                     AllowedScopes = {"api1"},
148 |                     RequireDPoP = false,
149 |                 },
150 | 
151 |                 // interactive ASP.NET Core MVC client
152 |                 new Client
153 |                 {
154 |                     ClientId = "web",
155 |                     ClientName = "Web Client",
156 |                     ClientSecrets = {new Secret("secret".Sha256())},
157 |                     Description = "Demo auth code + PKCE app. Client secret = 'secret'.",
158 |                     AllowedGrantTypes = GrantTypes.Code,
159 |                     RedirectUris = {"https://localhost:5002/signin-oidc"},
160 |                     PostLogoutRedirectUris = {"https://localhost:5002/signout-callback-oidc"},
161 |                     AllowedScopes = new List<string>
162 |                     {
163 |                         IdentityServerConstants.StandardScopes.OpenId,
164 |                         IdentityServerConstants.StandardScopes.Profile,
165 |                         "verification",
166 |                         "api1"
167 |                     },
168 |                     RequireDPoP = false,
169 |                 }
170 |             };
171 |     }
172 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "$schema": "http://json.schemastore.org/launchsettings.json",
 3 |   "profiles": {
 4 |     "Rsk.Samples.IdentityServer.AdminUiIntegration": {
 5 |       "commandName": "Project",
 6 |       "environmentVariables": {
 7 |       },
 8 |       "applicationUrl": "https://localhost:5003"    }
 9 |   }
10 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Rsk.Samples.IdentityServer.AdminUiIntegration.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk.Web">
 2 |   <PropertyGroup>
 3 |     <TargetFramework>net8.0</TargetFramework>
 4 |     <RootNamespace>Rsk.Samples.IdentityServer.AdminUiIntegration</RootNamespace>
 5 |   </PropertyGroup>
 6 |   <ItemGroup>
 7 |     <Content Include="src\css\print.css" />
 8 |     <Content Include="src\css\site.css" />
 9 |     <Content Include="src\js\signout-redirect.js" />
10 |     <Content Include="src\js\site.js" />
11 |   </ItemGroup>
12 |   <ItemGroup>
13 |     <EmbeddedResource Include="CN=RSKSampleIdentityServer.pfx">
14 |       <CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
15 |     </EmbeddedResource>
16 |   </ItemGroup>
17 | 
18 |   <ItemGroup Condition="'$(TargetFramework)'=='net8.0'">
19 |   </ItemGroup>
20 |   
21 |   <ItemGroup>
22 |     <!--  Framework Specific Packages  -->
23 |     <PackageReference Include="Microsoft.AspNetCore.Authentication.Google" Version="8.0.12" />
24 |     <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.12" />
25 |     <PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="8.0.12" />
26 |     <PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="8.0.4" />
27 |     <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="8.0.12" />
28 |     <PackageReference Include="Pomelo.EntityFrameworkCore.MySql" Version="8.0.2" />
29 |     <PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="8.0.12" />
30 | 
31 |     <!--  Framework Agnostic Packages  -->
32 |     <PackageReference Include="Duende.BFF" Version="2.3.0" />
33 |     <PackageReference Include="Duende.BFF.EntityFramework" Version="2.3.0" />
34 |     <PackageReference Include="Duende.IdentityServer" Version="7.1.0" />
35 |     <PackageReference Include="Duende.IdentityServer.AspNetIdentity" Version="7.1.0" />
36 |     <PackageReference Include="Duende.IdentityServer.EntityFramework" Version="7.1.0" />
37 |     <PackageReference Include="IdentityExpress.Identity" Version="6.0.1" />
38 |     <PackageReference Include="IdentityModel.AspNetCore.OAuth2Introspection" Version="6.2.0" />
39 |     <PackageReference Include="IdentityServer4.AccessTokenValidation" Version="3.0.1" />
40 |     <PackageReference Include="Microsoft.Data.SqlClient" Version="6.0.1" />
41 |     <PackageReference Include="Microsoft.Extensions.Logging" Version="9.0.1" />
42 |     <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="9.0.1" />
43 |     <PackageReference Include="Microsoft.IdentityModel.Protocols" Version="8.3.1" />
44 |     <PackageReference Include="Microsoft.IdentityModel.Protocols.OpenIdConnect" Version="8.3.1" />
45 |     <PackageReference Include="Microsoft.IdentityModel.Tokens.Saml" Version="8.3.1" />
46 |     <PackageReference Include="Rsk.DuendeIdentityServer.AuditEventSink" Version="3.0.0" />
47 |     <PackageReference Include="Rsk.Audit.EF" Version="2.0.0" />
48 |     <PackageReference Include="Rsk.DynamicAuthenticationProviders" Version="2.0.0" />
49 |     <PackageReference Include="Rsk.DynamicAuthenticationProviders.EntityFramework" Version="2.0.0" />
50 |     <PackageReference Include="Rsk.DynamicAuthenticationProviders.Saml" Version="2.0.0" />
51 |     <PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.3.1" />
52 |     <PackageReference Include="Rsk.Saml.DuendeIdentityServer" Version="9.2.0" />
53 |     <PackageReference Include="Rsk.Saml.DuendeIdentityServer.EntityFramework" Version="9.2.0" />
54 |   </ItemGroup>
55 | </Project>


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Services/AccountService.cs:
--------------------------------------------------------------------------------
  1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
  2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
  3 | 
  4 | 
  5 | using System.Linq;
  6 | using System.Threading.Tasks;
  7 | using Duende.IdentityServer;
  8 | using Duende.IdentityServer.Extensions;
  9 | using Duende.IdentityServer.Services;
 10 | using Duende.IdentityServer.Stores;
 11 | using IdentityModel;
 12 | using Microsoft.AspNetCore.Authentication;
 13 | using Microsoft.AspNetCore.Http;
 14 | using Microsoft.Extensions.DependencyInjection;
 15 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Models;
 16 | 
 17 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Services
 18 | {
 19 |     public class AccountService: IAccountService
 20 |     {
 21 |         private readonly IClientStore clientStore;
 22 |         private readonly IIdentityServerInteractionService interaction;
 23 |         private readonly IHttpContextAccessor httpContextAccessor;
 24 |         private readonly IAuthenticationSchemeProvider schemeProvider;
 25 |         private readonly IExternalProviderService externalProviderService;
 26 |         private readonly IAuthenticationHandlerProvider authenticationHandlerProvider;
 27 | 
 28 |         public AccountService(
 29 |             IIdentityServerInteractionService interaction,
 30 |             IHttpContextAccessor httpContextAccessor,
 31 |             IAuthenticationSchemeProvider schemeProvider,
 32 |             IClientStore clientStore,
 33 |             IExternalProviderService externalProviderService,
 34 |             IAuthenticationHandlerProvider authenticationHandlerProvider)
 35 |         {
 36 |             this.interaction = interaction;
 37 |             this.httpContextAccessor = httpContextAccessor;
 38 |             this.schemeProvider = schemeProvider;
 39 |             this.clientStore = clientStore;
 40 |             this.externalProviderService = externalProviderService;
 41 |             this.authenticationHandlerProvider = authenticationHandlerProvider;
 42 |         }
 43 |         
 44 |         public async Task<LoginViewModel> BuildLoginViewModelAsync(string returnUrl)
 45 |         {
 46 |             var context = await interaction.GetAuthorizationContextAsync(returnUrl);
 47 |             if (context?.IdP != null && await schemeProvider.GetSchemeAsync(context.IdP) != null)
 48 |             {
 49 |                 var local = context.IdP == IdentityServerConstants.LocalIdentityProvider;
 50 | 
 51 |                 // this is meant to short circuit the UI and only trigger the one external IdP
 52 |                 var vm = new LoginViewModel
 53 |                 {
 54 |                     EnableLocalLogin = local,
 55 |                     ReturnUrl = returnUrl,
 56 |                     Username = context.LoginHint,
 57 |                 };
 58 | 
 59 |                 if (!local)
 60 |                 {
 61 |                     vm.ExternalProviders = new[] { new ExternalProvider { AuthenticationScheme = context.IdP } };
 62 |                 }
 63 | 
 64 |                 return vm;
 65 |             }
 66 | 
 67 |             var providers = await externalProviderService.GetAll();
 68 | 
 69 |             var allowLocal = true;
 70 |             if (context?.Client.ClientId != null)
 71 |             {
 72 |                 var client = await clientStore.FindEnabledClientByIdAsync(context.Client.ClientId);
 73 |                 if (client != null)
 74 |                 {
 75 |                     allowLocal = client.EnableLocalLogin;
 76 | 
 77 |                     if (client.IdentityProviderRestrictions != null && client.IdentityProviderRestrictions.Any())
 78 |                     {
 79 |                         providers = providers.Where(provider => client.IdentityProviderRestrictions.Contains(provider.AuthenticationScheme)).ToList();
 80 |                     }
 81 |                 }
 82 |             }
 83 | 
 84 |             return new LoginViewModel
 85 |             {
 86 |                 EnableLocalLogin = allowLocal,
 87 |                 ReturnUrl = returnUrl,
 88 |                 Username = context?.LoginHint,
 89 |                 ExternalProviders = providers.ToArray()
 90 |             };
 91 |         }
 92 | 
 93 |         public LoginViewModel BuildLinkLoginViewModel(string returnUrl)
 94 |         {
 95 |             return new LoginViewModel
 96 |             {
 97 |                 EnableLocalLogin = true,
 98 |                 LinkSetup = true,
 99 |                 ReturnUrl = returnUrl,
100 |             };
101 |         }
102 | 
103 |         public async Task<LoginViewModel> BuildLoginViewModelAsync(LoginInputModel model)
104 |         {
105 |             var vm = await BuildLoginViewModelAsync(model.ReturnUrl);
106 |             vm.Username = model.Username;
107 |             vm.RememberLogin = model.RememberLogin;
108 |             return vm;
109 |         }
110 | 
111 |         public async Task<LogoutViewModel> BuildLogoutViewModelAsync(string logoutId)
112 |         {
113 |             var vm = new LogoutViewModel { LogoutId = logoutId, ShowLogoutPrompt = true };
114 | 
115 |             if (httpContextAccessor.HttpContext.User?.Identity.IsAuthenticated != true)
116 |             {
117 |                 // if the user is not authenticated, then just show logged out page
118 |                 vm.ShowLogoutPrompt = false;
119 |                 return vm;
120 |             }
121 | 
122 |             var context = await interaction.GetLogoutContextAsync(logoutId);
123 |             if (context?.ShowSignoutPrompt == false)
124 |             {
125 |                 // it's safe to automatically sign-out
126 |                 vm.ShowLogoutPrompt = false;
127 |                 return vm;
128 |             }
129 | 
130 |             // show the logout prompt. this prevents attacks where the user
131 |             // is automatically signed out by another malicious web page.
132 |             return vm;
133 |         }
134 | 
135 |         public async Task<LoggedOutViewModel> BuildLoggedOutViewModelAsync(string logoutId)
136 |         {
137 |             // get context information (client name, post logout redirect URI and iframe for federated signout)
138 |             var logout = await interaction.GetLogoutContextAsync(logoutId);
139 | 
140 |             var vm = new LoggedOutViewModel
141 |             {
142 |                 AutomaticRedirectAfterSignOut = true,
143 |                 PostLogoutRedirectUri = logout?.PostLogoutRedirectUri,
144 |                 ClientName = logout?.ClientName,
145 |                 SignOutIframeUrl = logout?.SignOutIFrameUrl,
146 |                 LogoutId = logoutId
147 |             };
148 | 
149 |             var user = httpContextAccessor?.HttpContext?.User;
150 |             if (user?.Identity?.IsAuthenticated == true)
151 |             {
152 |                 var idp = user.FindFirst(JwtClaimTypes.IdentityProvider)?.Value;
153 |                 if (idp != null && idp != IdentityServerConstants.LocalIdentityProvider)
154 |                 {
155 |                     var authenticationHandler = await authenticationHandlerProvider.GetHandlerAsync(this.httpContextAccessor.HttpContext, idp);
156 | 
157 |                     if (authenticationHandler != null)
158 |                     {
159 |                         if (vm.LogoutId == null)
160 |                         {
161 |                             // if there's no current logout context, we need to create one
162 |                             // this captures necessary info from the current logged in user
163 |                             // before we signout and redirect away to the external IdP for signout
164 |                             vm.LogoutId = await interaction.CreateLogoutContextAsync();
165 |                         }
166 |                         
167 |                         vm.ExternalAuthenticationScheme = idp;
168 |                     }
169 |                 }
170 |             }
171 | 
172 |             return vm;
173 |         }
174 | 
175 |         public RegisterViewModel BuildRegisterViewModel()
176 |         {
177 |             var vm = new RegisterViewModel();
178 |             return vm;
179 |         }
180 | 
181 |         public RegisterViewModel BuildRegisterViewModel(RegisterInputModel model, bool success)
182 |         {
183 |             RegisterViewModel newModel = new RegisterViewModel
184 |             {
185 |                 IsSuccess = success,
186 |                 Username = model.Username,
187 |                 Password = model.Password,
188 |                 ConfirmPassword = model.ConfirmPassword
189 |             };
190 |             return newModel;
191 |         }
192 |     }
193 | }
194 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Services/ConsentService.cs:
--------------------------------------------------------------------------------
  1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
  2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
  3 | 
  4 | 
  5 | using System;
  6 | using System.Collections.Generic;
  7 | using System.Linq;
  8 | using System.Threading.Tasks;
  9 | using Duende.IdentityServer;
 10 | using Duende.IdentityServer.Events;
 11 | using Duende.IdentityServer.Models;
 12 | using Duende.IdentityServer.Services;
 13 | using Duende.IdentityServer.Validation;
 14 | using Microsoft.Extensions.Logging;
 15 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Models;
 16 | 
 17 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Services
 18 | {
 19 |     public class ConsentService
 20 |     {
 21 |         private readonly IIdentityServerInteractionService interaction;
 22 |         private readonly IEventService events;
 23 |         private readonly ILogger logger;
 24 | 
 25 |         public ConsentService(
 26 |             IIdentityServerInteractionService interaction,
 27 |             IEventService events,
 28 |             ILogger logger)
 29 |         {
 30 |             this.interaction = interaction;
 31 |             this.events = events;
 32 |             this.logger = logger;
 33 |         }
 34 | 
 35 |         public async Task<ProcessConsentResult> ProcessConsent(ConsentInputModel model, string userId)
 36 |         {
 37 |             var result = new ProcessConsentResult();
 38 | 
 39 |             // validate return url is still valid
 40 |             var request = await interaction.GetAuthorizationContextAsync(model.ReturnUrl);
 41 |             if (request == null) return result;
 42 | 
 43 |             ConsentResponse grantedConsent = null;
 44 | 
 45 |             // user clicked 'no' - send back the standard 'access_denied' response
 46 |             if (model.Button == "no")
 47 |             {
 48 |                 grantedConsent = new ConsentResponse {Error = AuthorizationError.AccessDenied};
 49 | 
 50 |                 // emit event
 51 |                 await events.RaiseAsync(new ConsentDeniedEvent(userId, request.Client.ClientId,
 52 |                     request.ValidatedResources.RawScopeValues));
 53 |             }
 54 |             // user clicked 'yes' - validate the data
 55 |             else if (model.Button == "yes")
 56 |             {
 57 |                 // if the user consented to some scope, build the response model
 58 |                 if (model.ScopesConsented != null && model.ScopesConsented.Any())
 59 |                 {
 60 |                     var scopes = model.ScopesConsented;
 61 | 
 62 |                     if (!request.ValidatedResources.Resources.OfflineAccess)
 63 |                     {
 64 |                         scopes = scopes.Where(x =>
 65 |                             x != IdentityServerConstants.StandardScopes.OfflineAccess);
 66 |                     }
 67 |                     
 68 |                     grantedConsent = new ConsentResponse
 69 |                     {
 70 |                         RememberConsent = model.RememberConsent,
 71 |                         ScopesValuesConsented = scopes.ToArray(),
 72 |                         Description = model.Description
 73 |                     };
 74 | 
 75 |                     // emit event
 76 |                     await events.RaiseAsync(new ConsentGrantedEvent(userId, request.Client.ClientId,
 77 |                         request.ValidatedResources.RawScopeValues, grantedConsent.ScopesValuesConsented,
 78 |                         grantedConsent.RememberConsent));
 79 |                 }
 80 |                 else
 81 |                 {
 82 |                     result.ValidationError = "You must pick at least one permission";
 83 |                 }
 84 |             }
 85 |             else
 86 |             {
 87 |                 result.ValidationError = "Invalid selection";
 88 |             }
 89 | 
 90 |             if (grantedConsent != null)
 91 |             {
 92 |                 // communicate outcome of consent back to identityserver
 93 |                 await interaction.GrantConsentAsync(request, grantedConsent);
 94 | 
 95 |                 // indicate that's it ok to redirect back to authorization endpoint
 96 |                 result.RedirectUri = model.ReturnUrl;
 97 |                 result.Client = request.Client;
 98 |             }
 99 |             else
100 |             {
101 |                 // we need to redisplay the consent UI
102 |                 result.ViewModel = await BuildViewModelAsync(model.ReturnUrl, model);
103 |             }
104 | 
105 |             return result;
106 |         }
107 | 
108 |         public async Task<ConsentViewModel> BuildViewModelAsync(string returnUrl, ConsentInputModel model = null)
109 |         {
110 |             var request = await interaction.GetAuthorizationContextAsync(returnUrl);
111 |             if (request != null)
112 |             {
113 |                 return CreateConsentViewModel(model, returnUrl, request);
114 |             }
115 | 
116 |             logger.LogError("No consent request matching request: {0}", returnUrl);
117 |             return null;
118 |         }
119 | 
120 |         private ConsentViewModel CreateConsentViewModel(ConsentInputModel model, string returnUrl, AuthorizationRequest request)
121 |         {
122 |             var vm = new ConsentViewModel
123 |             {
124 |                 RememberConsent = model?.RememberConsent ?? true,
125 |                 ScopesConsented = model?.ScopesConsented ?? Enumerable.Empty<string>(),
126 |                 Description = model?.Description,
127 | 
128 |                 ReturnUrl = returnUrl,
129 | 
130 |                 ClientName = request.Client.ClientName ?? request.Client.ClientId,
131 |                 ClientUrl = request.Client.ClientUri,
132 |                 ClientLogoUrl = request.Client.LogoUri,
133 |                 AllowRememberConsent = request.Client.AllowRememberConsent
134 |             };
135 | 
136 |             vm.IdentityScopes = request.ValidatedResources.Resources.IdentityResources.Select(x =>
137 |                 CreateScopeViewModel(x, vm.ScopesConsented.Contains(x.Name) || model == null)).ToArray();
138 | 
139 |             var apiScopes = new List<ScopeViewModel>();
140 |             foreach (var parsedScope in request.ValidatedResources.ParsedScopes)
141 |             {
142 |                 var apiScope = request.ValidatedResources.Resources.FindApiScope(parsedScope.ParsedName);
143 |                 if (apiScope != null)
144 |                 {
145 |                     var scopeVm = CreateScopeViewModel(parsedScope, apiScope,
146 |                         vm.ScopesConsented.Contains(parsedScope.RawValue) || model == null);
147 |                     apiScopes.Add(scopeVm);
148 |                 }
149 |             }
150 | 
151 |             if (request.ValidatedResources.Resources.OfflineAccess)
152 |             {
153 |                 apiScopes.Add(GetOfflineAccessScope(
154 |                     vm.ScopesConsented.Contains(IdentityServerConstants.StandardScopes.OfflineAccess) ||
155 |                     model == null));
156 |             }
157 | 
158 |             vm.ApiScopes = apiScopes;
159 | 
160 |             return vm;
161 |         }
162 | 
163 |         private ScopeViewModel CreateScopeViewModel(IdentityResource identity, bool check)
164 |         {
165 |             {
166 |                 return new ScopeViewModel
167 |                 {
168 |                     Value = identity.Name,
169 |                     DisplayName = identity.DisplayName ?? identity.Name,
170 |                     Description = identity.Description,
171 |                     Emphasize = identity.Emphasize,
172 |                     Required = identity.Required,
173 |                     Checked = check || identity.Required
174 |                 };
175 |             }
176 |         }
177 | 
178 | 
179 |         public ScopeViewModel CreateScopeViewModel(ParsedScopeValue parsedScopeValue, ApiScope apiScope, bool check)
180 |         {
181 |             var displayName = apiScope.DisplayName ?? apiScope.Name;
182 |             if (!String.IsNullOrWhiteSpace(parsedScopeValue.ParsedParameter))
183 |             {
184 |                 displayName += ":" + parsedScopeValue.ParsedParameter;
185 |             }
186 | 
187 |             return new ScopeViewModel
188 |             {
189 |                 Value = parsedScopeValue.RawValue,
190 |                 DisplayName = displayName,
191 |                 Description = apiScope.Description,
192 |                 Emphasize = apiScope.Emphasize,
193 |                 Required = apiScope.Required,
194 |                 Checked = check || apiScope.Required
195 |             };
196 |         }
197 | 
198 |         private ScopeViewModel GetOfflineAccessScope(bool check)
199 |         {
200 |             return new ScopeViewModel
201 |             {
202 |                 Value = IdentityServerConstants.StandardScopes.OfflineAccess,
203 |                 DisplayName = "Offline Access",
204 |                 Description = "Access to your applications and resources, even when you are offline",
205 |                 Emphasize = true,
206 |                 Checked = check
207 |             };
208 |         }
209 |     }
210 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Services/CustomEventSink.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Text.Json;
 3 | using System.Threading.Tasks;
 4 | using Duende.IdentityServer.Events;
 5 | using Duende.IdentityServer.Services;
 6 | using Microsoft.Extensions.Caching.Memory;
 7 | using Microsoft.Extensions.Logging;
 8 | 
 9 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Services
10 | {
11 |     /// <summary>
12 |     /// Implements the DefaultEventSink functionality, but in addition, when event types are error or failure, will add the event to the custom event store cache
13 |     /// </summary>
14 |     public sealed class CustomEventSink : IEventSink
15 |     {
16 |         private readonly ILogger logger;
17 |         private readonly IEventStore eventStore;
18 | 
19 |         public CustomEventSink(ILogger<DefaultEventService> logger, IEventStore eventStore)
20 |         {
21 |             this.logger = logger;
22 |             this.eventStore = eventStore;
23 |         }
24 | 
25 |         public Task PersistAsync(Event evt)
26 |         {
27 |             try
28 |             {
29 |                 if (evt == null) throw new ArgumentNullException(nameof(evt));
30 | 
31 |                 logger.LogInformation("{@event}", evt);
32 | 
33 |                 if (evt.EventType == EventTypes.Error || evt.EventType == EventTypes.Failure) eventStore.AddEvent(evt);
34 | 
35 |                 return Task.CompletedTask;
36 |             }
37 |             catch(Exception err)
38 |             {
39 |                 logger.LogError(err, "An error occurred while logging and storing an event");
40 |                 return Task.CompletedTask;
41 |             }
42 |         }
43 |     }
44 | 
45 |     public interface IEventStore
46 |     {
47 |         string GetEventByTraceID(string traceID);
48 |         void AddEvent(Event evt);
49 |     }
50 | 
51 |     /// <summary>
52 |     /// Stores IdentityServer error and failure events in a memory cache a capacity of holding 10 events
53 |     /// </summary>
54 |     public class ErrorEventStore : IEventStore
55 |     {
56 |         private readonly IMemoryCache cache;
57 | 
58 |         public ErrorEventStore(IMemoryCache cache)
59 |         {
60 |             this.cache = cache ?? throw new ArgumentNullException(nameof(cache));
61 |         }
62 | 
63 |         public string GetEventByTraceID(string traceID)
64 |         {
65 |             cache.TryGetValue(traceID, out string eventDetails);
66 |             return eventDetails;
67 |         }
68 | 
69 |         public void AddEvent(Event evt)
70 |         {
71 |             cache.Set(evt.ActivityId, JsonSerializer.Serialize(evt), new MemoryCacheEntryOptions
72 |             {
73 |                 Size = 1
74 |             });
75 |         }
76 |     }
77 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Services/ExternalProviderService.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.Linq;
 4 | using System.Threading.Tasks;
 5 | using Duende.IdentityServer.Stores;
 6 | using Microsoft.AspNetCore.Authentication;
 7 | using Microsoft.Extensions.Configuration;
 8 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Models;
 9 | 
10 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Services;
11 | 
12 | public class ExternalProviderService: IExternalProviderService
13 | {
14 |     private readonly IAuthenticationSchemeProvider schemeProvider;
15 |     private readonly IIdentityProviderStore identityProviderStore;
16 |     private readonly IConfiguration configuration;
17 | 
18 |     public ExternalProviderService(
19 |         IAuthenticationSchemeProvider schemeProvider,
20 |         IIdentityProviderStore identityProviderStore,
21 |         IConfiguration configuration)
22 |     {
23 |         this.schemeProvider = schemeProvider ?? throw new ArgumentNullException(nameof(schemeProvider));
24 |         this.identityProviderStore = identityProviderStore ?? throw new ArgumentNullException(nameof(identityProviderStore));
25 |         this.configuration = configuration ?? throw new ArgumentNullException(nameof(configuration));
26 |     }
27 |     
28 |     public async Task<IEnumerable<ExternalProvider>> GetAll()
29 |     {
30 |         var mode = configuration.GetValue<string>("DynamicAuth:Mode");
31 |         var providers = new List<ExternalProvider>();
32 | 
33 |         switch (mode)
34 |         {
35 |             case "Rsk":
36 |                 providers.AddRange(await GetRskSchemes());
37 |                 break;
38 |             case "Duende":
39 |                 providers.AddRange(await GetDuendeSchemes());
40 |                 break;
41 |         }
42 |         
43 |         return providers;
44 |     }
45 | 
46 |     public async Task<ExternalProvider> GetScheme(string scheme)
47 |     {
48 |         return (await GetAll()).FirstOrDefault(x => x.AuthenticationScheme == scheme);
49 |     }
50 | 
51 |     private async Task<IEnumerable<ExternalProvider>> GetRskSchemes()
52 |     {
53 |         var schemes = await schemeProvider.GetAllSchemesAsync();
54 |         
55 |         return schemes
56 |             .Where(x => x.DisplayName != null)
57 |             .Select(x => new ExternalProvider
58 |             {
59 |                 DisplayName = x.DisplayName ?? x.Name,
60 |                 AuthenticationScheme = x.Name
61 |             }).ToList();
62 |     }
63 | 
64 |     private async Task<IEnumerable<ExternalProvider>> GetDuendeSchemes()
65 |     {
66 |         return (await identityProviderStore.GetAllSchemeNamesAsync())
67 |             .Where(x => x.Enabled)
68 |             .Select(x => new ExternalProvider
69 |             {
70 |                 AuthenticationScheme = x.Scheme,
71 |                 DisplayName = x.DisplayName
72 |             });
73 |     }
74 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Services/IAccountService.cs:
--------------------------------------------------------------------------------
 1 | using System.Threading.Tasks;
 2 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Models;
 3 | 
 4 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Services;
 5 | 
 6 | public interface IAccountService
 7 | {
 8 |     Task<LoginViewModel> BuildLoginViewModelAsync(string returnUrl);
 9 |     LoginViewModel BuildLinkLoginViewModel(string returnUrl);
10 |     Task<LoginViewModel> BuildLoginViewModelAsync(LoginInputModel model);
11 |     Task<LogoutViewModel> BuildLogoutViewModelAsync(string logoutId);
12 |     Task<LoggedOutViewModel> BuildLoggedOutViewModelAsync(string logoutId);
13 |     RegisterViewModel BuildRegisterViewModel();
14 |     RegisterViewModel BuildRegisterViewModel(RegisterInputModel model, bool success);
15 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Services/IExternalProviderService.cs:
--------------------------------------------------------------------------------
 1 | using System.Collections.Generic;
 2 | using System.Threading.Tasks;
 3 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Models;
 4 | 
 5 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Services;
 6 | 
 7 | public interface IExternalProviderService
 8 | {
 9 |     Task<IEnumerable<ExternalProvider>> GetAll();
10 |     Task<ExternalProvider> GetScheme(string scheme);
11 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Services/ProcessConsentResult.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | 
 5 | using Duende.IdentityServer.Models;
 6 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Models;
 7 | 
 8 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Services
 9 | {
10 |     public class ProcessConsentResult
11 |     {
12 |         public bool IsRedirect => RedirectUri != null;
13 |         public string RedirectUri { get; set; }
14 |         public Client Client { get; set; }
15 | 
16 |         public bool ShowView => ViewModel != null;
17 |         public ConsentViewModel ViewModel { get; set; }
18 | 
19 |         public bool HasValidationError => ValidationError != null;
20 |         public string ValidationError { get; set; }
21 |     }
22 | }
23 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Services/WebhookService.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Threading.Tasks;
 3 | using IdentityExpress.Identity;
 4 | using Microsoft.AspNetCore.Identity;
 5 | using Rsk.Samples.IdentityServer.AdminUiIntegration.Models;
 6 | 
 7 | namespace Rsk.Samples.IdentityServer.AdminUiIntegration.Services
 8 | {
 9 |     public class WebhookService
10 |     {
11 |         private readonly UserManager<IdentityExpressUser> userManager;
12 | 
13 |         public WebhookService(UserManager<IdentityExpressUser> userManager)
14 |         {
15 |             this.userManager = userManager ?? throw new ArgumentNullException(nameof(userManager));
16 |         }
17 |         
18 |         public async Task<SendResetMfaOneTimeLinkResult> SendResetMfaEmail(string username, Func<string, Uri> registrationUrl)
19 |         {
20 |             if (string.IsNullOrEmpty(username)) throw new ArgumentNullException(nameof(username));
21 |             if (registrationUrl == null) throw new ArgumentNullException(nameof(registrationUrl));
22 |             
23 |             var user = await userManager.FindByNameAsync(username);
24 |             if (user == null)
25 |             {
26 |                 return SendResetMfaOneTimeLinkResult.Failed($"No user exists with username: {username}");
27 |             }
28 |             
29 |             // -- Suggested Flow -- //
30 |             
31 |             //1. Send an email to your user wanting to reset their MFA
32 |             //2. The user will click the link and then be prompted to log into IdentityServer
33 |             //3. After successfully logging in, they will be prompted to create a new MFA provider
34 |             //4. Previous MFA providers will then be removed
35 |             
36 |             return SendResetMfaOneTimeLinkResult.Success();
37 |         }
38 |     }
39 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Views/Account/LoggedOut.cshtml:
--------------------------------------------------------------------------------
 1 | @model Rsk.Samples.IdentityServer.AdminUiIntegration.Models.LoggedOutViewModel
 2 | @{
 3 | 	// set this so the layout rendering sees an anonymous user
 4 | 	ViewData["signed-out"] = true;
 5 | }
 6 | 
 7 | @section banner
 8 | {
 9 | 	<div class="bg-navy text-white px-6 py-8 md:py-12 lg:py-16 relative z-10">
10 | 		<div class="container w-full text-left mx-auto self-center">
11 | 			<div class="max-w-lg">
12 | 				<div class="flex flex-wrap items-center">
13 | 					<h1 class="font-bold w-full text-3xl lg:text-4xl leading-tight">Logout</h1>
14 | 				</div>
15 | 			</div>
16 | 		</div>
17 | 	</div>
18 | }
19 | 
20 | <div class="cms">
21 | 	<p><strong>You are now logged out of IdentityServer.</strong></p>
22 | </div>
23 | 
24 | 
25 | @if (Model.PostLogoutRedirectUri != null)
26 | {
27 | 	<div class="form-actions">
28 | 		<a class="btn PostLogoutRedirectUri" href="@Model.PostLogoutRedirectUri">Return to @Model.ClientName</a>
29 | 	</div>
30 | }
31 | 
32 | @if (Model.SignOutIframeUrl != null)
33 | {
34 | 	<iframe width="0" height="0" class="signout" src="@Model.SignOutIframeUrl"></iframe>
35 | }
36 | 
37 | @section scripts
38 | {
39 | 	@if (Model.AutomaticRedirectAfterSignOut)
40 | 	{
41 | 		<script src="~/js/signout-redirect.min.js" asp-append-version="true"></script>
42 | 	}
43 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Views/Account/Login.cshtml:
--------------------------------------------------------------------------------
 1 | @model Rsk.Samples.IdentityServer.AdminUiIntegration.Models.LoginViewModel
 2 | 
 3 | @section banner
 4 | {
 5 | 	<div class="bg-navy text-white px-6 py-8 md:py-12 lg:py-16 relative z-10">
 6 | 		<div class="container w-full text-left mx-auto self-center">
 7 | 			<div class="max-w-lg">
 8 | 				<div class="flex flex-wrap items-center">
 9 | 					<h1 class="font-bold w-full text-3xl lg:text-4xl leading-tight">Login</h1>
10 | 				</div>
11 | 			</div>
12 | 		</div>
13 | 	</div>
14 | }
15 | 
16 | @await Html.PartialAsync("_ValidationSummary")
17 | 
18 | @if (Model.LinkSetup)
19 | {
20 | 	<div class="message message-warning" role="alert">
21 | 		<div>
22 | 			<h2 class="text-base">No Linked User for External Login</h2>
23 | 			<ul class="mt-1">
24 | 				<li>There were no users connected to this external login, please now login with you local credentials to
25 | 					create a link.</li>
26 | 			</ul>
27 | 		</div>
28 | 	</div>
29 | }
30 | 
31 | @if (Model.EnableLocalLogin)
32 | {
33 | 	<form asp-route="Login">
34 | 		<input type="hidden" asp-for="ReturnUrl" />
35 | 		<div class="form-group">
36 | 			<label class="form-label" asp-for="Username"></label>
37 | 			<input class="form-control" asp-for="Username" />
38 | 		</div>
39 | 		<div class="form-group">
40 | 			<label class="form-label" asp-for="Password"></label>
41 | 			<input type="password" class="form-control" asp-for="Password" autocomplete="off" />
42 | 		</div>
43 | 		<div class="form-group">
44 | 			<ul class="form-checks">
45 | 				<li class="form-checks__item">
46 | 					<label class="form-checks__label" asp-for="RememberLogin">
47 | 						<input class="form-checks__input" asp-for="RememberLogin">
48 | 						<span class="form-checks__text">Remember me</span>
49 | 					</label>
50 | 				</li>
51 | 			</ul>
52 | 		</div>
53 | 		<div class="form-actions">
54 | 			<button id="LoginBtn" class="btn" name="button" value="login">Login</button>
55 | 			<button class="btn btn-text ml-6" name="button" value="cancel">Cancel</button>
56 | 		</div>
57 | 	</form>
58 | }
59 | 
60 | @if (!Model.LinkSetup && Model.VisibleExternalProviders.Any())
61 | {
62 | 	<section class="border-t border-navy-lightest mt-6 pt-6 first-child:border-0 first-child:mt-0 first-child:pt-0">
63 | 		<h3 class="font-semibold text-base mb-3">External Login</h3>
64 | 		<ul class="flex items-start flex-wrap list-reset -mt-2 -ml-2">
65 | 			@foreach (var provider in Model.VisibleExternalProviders)
66 | 			{
67 | 				<li class="pt-2 pl-2">
68 | 					<a class="btn btn-line btn-small"
69 | 						 asp-action="ExternalLogin"
70 | 						 asp-route-provider="@provider.AuthenticationScheme"
71 | 						 asp-route-returnUrl="@Model.ReturnUrl">
72 | 						@provider.DisplayName
73 | 					</a>
74 | 				</li>
75 | 			}
76 | 		</ul>
77 | 	</section>
78 | }
79 | 
80 | @if (!Model.LinkSetup && !Model.EnableLocalLogin && !Model.VisibleExternalProviders.Any())
81 | {
82 | 	<div class="message message-warning" role="alert">
83 | 		<div>
84 | 			<h2 class="text-base">Invalid login request</h2>
85 | 			<ul class="mt-1">
86 | 				<li>There are no login schemes configured for this client</li>
87 | 			</ul>
88 | 		</div>
89 | 	</div>
90 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Views/Account/Logout.cshtml:
--------------------------------------------------------------------------------
 1 | @model Rsk.Samples.IdentityServer.AdminUiIntegration.Models.LogoutViewModel
 2 | 
 3 | @section banner
 4 | {
 5 | 	<div class="bg-navy text-white px-6 py-8 md:py-12 lg:py-16 relative z-10">
 6 | 		<div class="container w-full text-left mx-auto self-center">
 7 | 			<div class="max-w-lg">
 8 | 				<div class="flex flex-wrap items-center">
 9 | 					<h1 class="font-bold w-full text-3xl lg:text-4xl leading-tight">Logout</h1>
10 | 				</div>
11 | 			</div>
12 | 		</div>
13 | 	</div>
14 | }
15 | 
16 | <div class="cms">
17 | 	<p><strong>Are you sure you want to logout of IdentityServer?</strong></p>
18 | </div>
19 | 
20 | <form asp-action="Logout">
21 | 	<input type="hidden" name="logoutId" value="@Model.LogoutId"  />
22 | 	<div class="form-actions">
23 | 		<button class="btn btn-primary">Yes</button>
24 | 	</div>
25 | </form>


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Views/Account/Register.cshtml:
--------------------------------------------------------------------------------
 1 | @model Rsk.Samples.IdentityServer.AdminUiIntegration.Models.RegisterViewModel
 2 | 
 3 | @section banner
 4 | {
 5 | 	<div class="bg-navy text-white px-6 py-8 md:py-12 lg:py-16 relative z-10">
 6 | 		<div class="container w-full text-left mx-auto self-center">
 7 | 			<div class="max-w-lg">
 8 | 				<div class="flex flex-wrap items-center">
 9 | 					<h1 class="font-bold w-full text-3xl lg:text-4xl leading-tight">Register</h1>
10 | 				</div>
11 | 			</div>
12 | 		</div>
13 | 	</div>
14 | }
15 | 
16 | <div class="message message-error" role="alert">
17 | 	<div>
18 | 		<h3 class="text-base mb-1 uppercase">Danger!</h3>
19 | 		<ul>
20 | 			<li><u>DO NOT</u> use this registration in production</li>
21 | 			<li>This is intended for demo purposes only</li>
22 | 		</ul>
23 | 	</div>
24 | </div>
25 | 
26 | @if (Model.IsSuccess)
27 | {
28 | 	<div class="message message-success" role="alert">
29 | 		<div>
30 | 			<h3 class="text-base mb-1">Success</h3>
31 | 			<ul>
32 | 				<li>New user registration was successfully completed</li>
33 | 			</ul>
34 | 		</div>
35 | 	</div>
36 | }
37 | 
38 | @await Html.PartialAsync("_ValidationSummary")
39 | 
40 | <form asp-route="Register" method="post">
41 | 	<div class="form-group">
42 | 		<label class="form-label" asp-for="Username"></label>
43 | 		<input class="form-control" asp-for="Username" />
44 | 	</div>
45 | 	<div class="form-group">
46 | 		<label class="form-label" asp-for="Password"></label>
47 | 		<input type="password" class="form-control" asp-for="Password" autocomplete="off" />
48 | 	</div>
49 | 	<div class="form-group">
50 | 		<label class="form-label" asp-for="ConfirmPassword"></label>
51 | 		<input type="password" class="form-control" asp-for="ConfirmPassword" autocomplete="off" />
52 | 	</div>
53 | 	<div class="form-actions">
54 | 		<button class="btn" type="submit">Register</button>
55 | 	</div>
56 | </form>


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Views/Consent/Index.cshtml:
--------------------------------------------------------------------------------
 1 | @model Rsk.Samples.IdentityServer.AdminUiIntegration.Models.ConsentViewModel
 2 | 
 3 | @section banner
 4 | 	{
 5 | 	<div class="bg-navy text-white px-6 py-8 md:py-12 lg:py-16 relative z-10">
 6 | 		<div class="container w-full text-left mx-auto self-center">
 7 | 			<div class="max-w-lg">
 8 | 				<h1 class="font-bold text-3xl lg:text-4xl leading-tight">Consent</h1>
 9 | 				<p class="text-sm text-navy-lighter mt-1">@Model.ClientName is requesting your permission</p>
10 | 			</div>
11 | 		</div>
12 | 	</div>
13 | }
14 | 
15 | <div class="flex items-start mb-6">
16 | 	@if (Model.ClientLogoUrl != null)
17 | 	{
18 | 		<img class="hidden sm:block w-16 -mt-2 mr-4" src="@Model.ClientLogoUrl" alt="" />
19 | 	}
20 | 	<p>
21 | 		<strong>
22 | 			@Model.ClientName is requesting your permission@(Model.ClientUrl != null ? ": " : ".")
23 | 		</strong>
24 | 		@if (Model.ClientUrl != null)
25 | 		{
26 | 			<span class="block">
27 | 				<a class="font-bold text-red inline-block max-w-full hover:text-navy break-words truncate trans" href="@Model.ClientUrl" target="_blank">
28 | 					<span class="fas fa-link" aria-hidden="true"></span>
29 | 					<span class="ml-1">@Model.ClientUrl</span>
30 | 				</a>
31 | 			</span>
32 | 		}
33 | 	</p>
34 | </div>
35 | <div class="cms mb-6">
36 | 	<p>Uncheck any permissions you do not wish to grant to @Model.ClientName.</p>
37 | </div>
38 | 
39 | @await Html.PartialAsync("_ValidationSummary")
40 | 
41 | <form asp-action="Index">
42 | 	<input type="hidden" asp-for="ReturnUrl" />
43 | 	@if (Model.IdentityScopes.Any())
44 | 	{
45 | 		<section class="border border-navy-lightest overflow-hidden rounded mb-6">
46 | 			<h2 class="bg-navy-lightest text-base px-6 py-4">
47 | 				<span class="fas fa-user-alt fa-fw" aria-hidden="true"></span>
48 | 				<span class="ml-2">Personal Information</span>
49 | 			</h2>
50 | 			<div class="px-6 py-4">
51 | 				<ul class="form-checks">
52 | 					@foreach (var scope in Model.IdentityScopes)
53 | 					{
54 | 						@await Html.PartialAsync("_ScopeListItem", scope)
55 | 					}
56 | 				</ul>
57 | 			</div>
58 | 		</section>
59 | 	}
60 | 	@if (Model.ApiScopes.Any())
61 | 	{
62 | 		<section class="border border-navy-lightest overflow-hidden rounded mb-6">
63 | 			<h2 class="bg-navy-lightest text-base px-6 py-4">
64 | 				<span class="fas fa-tasks fa-fw" aria-hidden="true"></span>
65 | 				<span class="ml-2">Application Access</span>
66 | 			</h2>
67 | 			<div class="px-6 py-4">
68 | 				<ul class="form-checks">
69 | 					@foreach (var scope in Model.ApiScopes)
70 | 					{
71 | 						@await Html.PartialAsync("_ScopeListItem", scope)
72 | 					}
73 | 				</ul>
74 | 			</div>
75 | 		</section>
76 | 	}
77 | 	@if (Model.AllowRememberConsent)
78 | 	{
79 | 		<div class="form-group">
80 | 			<ul class="form-checks">
81 | 				<li class="form-checks__item">
82 | 					<label class="form-checks__label">
83 | 						<input class="form-checks__input" asp-for="RememberConsent" />
84 | 						<span class="form-checks__text">Remember my decision(s)</span>
85 | 					</label>
86 | 				</li>
87 | 			</ul>
88 | 		</div>
89 | 	}
90 | 	<div class="form-actions">
91 | 		<button class="btn mr-4" name="button" value="yes">Yes, allow</button>
92 | 		<button class="btn btn-line" name="button" value="no">No, do not allow</button>
93 | 	</div>
94 | </form>


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Views/Consent/_ScopeListItem.cshtml:
--------------------------------------------------------------------------------
 1 | @model Rsk.Samples.IdentityServer.AdminUiIntegration.Models.ScopeViewModel
 2 | 
 3 | <li class="form-checks__item">
 4 | 	<label class="form-checks__label">
 5 | 		<input class="form-checks__input"
 6 | 					 type="checkbox"
 7 | 					 name="ScopesConsented"
 8 | 					 id="scopes_@Model.Value"
 9 | 					 value="@Model.Value"
10 | 					 checked="@Model.Checked"
11 | 					 disabled="@Model.Required" />
12 | 		<span class="form-checks__text">
13 | 			@Model.DisplayName
14 | 			@if (Model.Required)
15 | 			{
16 | 				<span class="text-red" aria-label="Required">*</span>
17 | 			}
18 | 			@if (Model.Emphasize)
19 | 			{
20 | 				<span class="fas fa-exclamation-triangle text-orange text-sm ml-1"></span>
21 | 			}
22 | 			@if (Model.Description != null)
23 | 			{
24 | 				<span class="block font-normal text-navy-light text-sm mt-1">@Model.Description</span>
25 | 			}
26 | 		</span>
27 | 		@if (Model.Required)
28 | 		{
29 | 			<input type="hidden"
30 | 						 name="ScopesConsented"
31 | 						 value="@Model.Value" />
32 | 		}
33 | 	</label>
34 | </li>


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Views/Diagnostics/Index.cshtml:
--------------------------------------------------------------------------------
 1 | @model Rsk.Samples.IdentityServer.AdminUiIntegration.Models.DiagnosticsViewModel
 2 | 
 3 | @section banner
 4 | {
 5 | 	<div class="bg-navy text-white px-6 py-8 md:py-12 lg:py-16 relative z-10">
 6 | 		<div class="container w-full text-left mx-auto self-center">
 7 | 			<div class="max-w-lg">
 8 | 				<div class="flex flex-wrap items-center">
 9 | 					<h1 class="font-bold w-full text-3xl lg:text-4xl leading-tight">Cookie Details</h1>
10 | 				</div>
11 | 			</div>
12 | 		</div>
13 | 	</div>
14 | }
15 | 
16 | <div class="cms mb-6">
17 | 	<p><strong>Below are the claims and properties present in your authentication cookie.</strong></p>
18 | </div>
19 | 
20 | 
21 | <h2>Claims</h2>
22 | <dl>
23 |     @foreach (var claim in Model.AuthenticateResult.Principal.Claims)
24 |     {
25 |         <dt>@claim.Type</dt>
26 |         <dd>@claim.Value</dd>
27 |     }
28 | </dl>
29 | 
30 | <h2>Properties</h2>
31 | <dl>
32 |     @foreach (var prop in Model.AuthenticateResult.Properties.Items)
33 |     {
34 |         <dt>@prop.Key</dt>
35 |         <dd>@prop.Value</dd>
36 |     }
37 |     @if (Model.Clients.Any())
38 |     {
39 |         <dt>Clients</dt>
40 |         <dd>
41 |             @{
42 |                 var clients = Model.Clients.ToArray();
43 |                 for(var i = 0; i < clients.Length; i++)
44 |                 {
45 |                     <text>@clients[i]</text>
46 |                     if (i < clients.Length - 1)
47 |                     {
48 |                         <text>, </text>
49 |                     }
50 |                 }
51 |             }
52 |         </dd>
53 |     }
54 | </dl>
55 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Views/Grants/Index.cshtml:
--------------------------------------------------------------------------------
  1 | @model Rsk.Samples.IdentityServer.AdminUiIntegration.Models.GrantsViewModel
  2 | 
  3 | @section banner
  4 | {
  5 | 	<div class="bg-navy text-white px-6 py-8 md:py-12 lg:py-16 relative z-10">
  6 | 		<div class="container w-full text-left mx-auto self-center">
  7 | 			<div class="max-w-lg">
  8 | 				<div class="flex flex-wrap items-center">
  9 | 					<h1 class="font-bold w-full text-3xl lg:text-4xl leading-tight">Client Application Access</h1>
 10 | 				</div>
 11 | 			</div>
 12 | 		</div>
 13 | 	</div>
 14 | }
 15 | 
 16 | <div class="cms mb-6">
 17 | 	<p><strong>Below are the applications you have granted access and the resources they have access to.</strong></p>
 18 | </div>
 19 | 
 20 | @if (Model.Grants.Any() == false)
 21 | {
 22 | 	<div class="message" role="alert">
 23 | 		<div>
 24 | 			<h2 class="text-base">Notice</h2>
 25 | 			<p>You have not given access to any applications.</p>
 26 | 		</div>
 27 | 	</div>
 28 | }
 29 | else
 30 | {
 31 | 	foreach (var grant in Model.Grants)
 32 | 	{
 33 | 		<section class="border border-navy-lightest overflow-hidden  rounded mb-6 last-child:mb-0">
 34 | 			<div class="flex items-center bg-navy-lightest px-6 py-4">
 35 | 				@if (grant.ClientLogoUrl != null)
 36 | 				 {
 37 | 					 <div class="hidden sm:block w-10 mr-3" aria-hidden="true">
 38 | 						 <img class="block" src="@grant.ClientLogoUrl" alt=""/>
 39 | 					 </div>
 40 | 				 }
 41 | 				<h2 class="text-base">@grant.ClientName</h2>
 42 | 			</div>
 43 | 			<div class="flex flex-wrap items-start lg:flex-no-wrap">
 44 | 				<div class="flex w-full px-6 py-4">
 45 | 					<div class="w-full">
 46 | 						<ul class="flex flex-wrap list-reset text-xs leading-none text-navy-light mt-1">
 47 | 							<li class="mr-4">
 48 | 								Created: @grant.Created.ToString("yyyy-MM-dd")
 49 | 							</li>
 50 | 							@if (grant.Expires.HasValue)
 51 | 							{
 52 | 								<li>
 53 | 									Expires: @grant.Expires.Value.ToString("yyyy-MM-dd")
 54 | 								</li>
 55 | 							}
 56 | 						</ul>
 57 | 						<div class="flex flex-wrap items-start -ml-2 mt-1 text-sm print-grid">
 58 | 							<div class="pt-2 pl-2 w-full sm:w-1/2 md:w-full lg:w-1/2 print-grid__col-1/2">
 59 | 								<p class="font-semibold text-base">Identity Grants</p>
 60 | 								<div class="mt-1">
 61 | 									@if (grant.IdentityGrantNames.Any())
 62 | 									{
 63 | 										<ul class="list-reset mt-1 ml-2">
 64 | 											@foreach (var name in grant.IdentityGrantNames)
 65 | 											{
 66 | 												<li class="flex items-start">
 67 | 													<span class="block bg-red w-1 h-1 rounded-full mt-2 mr-2" aria-hidden="true"></span>
 68 | 													<span>@name</span>
 69 | 												</li>
 70 | 											}
 71 | 										</ul>
 72 | 									}
 73 | 									else
 74 | 									{
 75 | 										<p class="text-navy-lighter italic text-xs">None</p>
 76 | 									}
 77 | 								</div>
 78 | 							</div>
 79 | 							<div class="pt-2 pl-2 w-full sm:w-1/2 md:w-full lg:w-1/2 print-grid__col-1/2">
 80 | 								<p class="font-semibold text-base">API Grants</p>
 81 | 								<div class="mt-1">
 82 | 									@if (grant.ApiGrantNames.Any())
 83 | 									{
 84 | 										<ul class="list-reset ml-2">
 85 | 											@foreach (var name in grant.ApiGrantNames)
 86 | 											{
 87 | 												<li class="flex items-start">
 88 | 													<span class="block bg-red w-1 h-1 rounded-full mt-2 mr-2" aria-hidden="true"></span>
 89 | 													<span>@name</span>
 90 | 												</li>
 91 | 											}
 92 | 										</ul>
 93 | 									}
 94 | 									else
 95 | 									{
 96 | 										<p class="text-navy-lighter italic text-xs">None</p>
 97 | 									}
 98 | 								</div>
 99 | 							</div>
100 | 						</div>
101 | 					</div>
102 | 				</div>
103 | 				<div class="flex-no-shrink self-center border-t border-navy-lightest lg:border-0 text-center px-6 py-4 w-full lg:w-auto">
104 | 					<form asp-action="Revoke">
105 | 						<input type="hidden" name="clientId" value="@grant.ClientId" />
106 | 						<button class="btn btn-small" aria-label="Revoke Access">Revoke</button>
107 | 					</form>
108 | 				</div>
109 | 			</div>
110 | 		</section>
111 | 	}
112 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Views/Home/Index.cshtml:
--------------------------------------------------------------------------------
  1 | @using Duende.IdentityServer.Extensions
  2 | @{
  3 | 	string name = null;
  4 | 	if (!true.Equals(ViewData["signed-out"]))
  5 | 	{
  6 | 		name = Context.User?.GetDisplayName();
  7 | 	}
  8 | 	bool signedIn = !string.IsNullOrWhiteSpace(name);
  9 | }
 10 | 
 11 | @section banner
 12 | {
 13 | 	<div class="bg-navy text-white px-6 py-8 md:py-12 lg:py-16 relative z-10">
 14 | 		<div class="container w-full text-left mx-auto self-center">
 15 | 			<div class="max-w-lg">
 16 | 				<div class="flex flex-wrap items-center">
 17 | 					<h1 class="font-bold w-full text-3xl lg:text-4xl leading-tight">Welcome to IdentityServer</h1>
 18 | 				</div>
 19 | 			</div>
 20 | 		</div>
 21 | 	</div>
 22 | }
 23 | 
 24 | <div class="no-print">
 25 | 
 26 | 	<section class="mb-6 lg:mb-10">
 27 | 		<h2 class="text-xl mb-1">Let's get started...</h2>
 28 | 		<p class="text-navy-light text-sm mb-5">IdentityServer publishes a <a class="underline hover:no-underline" href="~/.well-known/openid-configuration" target="_blank">discovery document</a> where you can find metadata and links to all the endpoints, key material, etc.</p>
 29 | 		<ul class="flex flex-wrap list-reset -mt-4 -ml-4">
 30 | 			@if (signedIn)
 31 | 			{
 32 | 				<li class="w-full pt-4 pl-4 sm:w-1/2 md:w-full lg:w-1/4">
 33 | 					<a class="flex items-center justify-center h-32 bg-navy-lightest shadow-inner-md font-semibold text-center leading-tight text-navy p-2 rounded hover:bg-navy hover:text-white trans" asp-action="Logout" asp-controller="Account">
 34 | 						<span class="block">
 35 | 							<span class="fas fa-sign-out-alt block text-4xl" aria-hidden="true"></span>
 36 | 							<span class="block mt-3">Logout</span>
 37 | 						</span>
 38 | 					</a>
 39 | 				</li>
 40 | 			}
 41 | 			else
 42 | 			{
 43 | 				<li class="w-full pt-4 pl-4 sm:w-1/2 md:w-full lg:w-1/4">
 44 | 					<a class="flex items-center justify-center h-32 bg-navy-lightest shadow-inner-md font-semibold text-center leading-tight text-navy p-2 rounded hover:bg-navy hover:text-white trans" asp-action="Login" asp-controller="Account">
 45 | 						<span class="block">
 46 | 							<span class="fas fa-user block text-4xl" aria-hidden="true"></span>
 47 | 							<span class="block mt-3">Login</span>
 48 | 						</span>
 49 | 					</a>
 50 | 				</li>
 51 | 			}
 52 | 			<li class="w-full pt-4 pl-4 sm:w-1/2 md:w-full lg:w-1/4">
 53 | 				<a class="flex items-center justify-center h-32 bg-navy-lightest shadow-inner-md font-semibold text-center leading-tight text-navy p-2 rounded hover:bg-navy hover:text-white trans" asp-action="Index" asp-controller="Grants">
 54 | 					<span class="block">
 55 | 						<span class="fas fa-globe-europe block text-4xl" aria-hidden="true"></span>
 56 | 						<span class="block mt-3">Grants</span>
 57 | 					</span>
 58 | 				</a>
 59 | 			</li>
 60 | 		</ul>
 61 | 	</section>
 62 | 
 63 | 	<section class="mb-6 lg:mb-10">
 64 | 		<h2 class="text-xl mb-3">Documentation</h2>
 65 | 		<ul class="flex flex-wrap list-reset -mt-4 -ml-4">
 66 | 			<li class="w-full pt-4 pl-4 sm:w-1/2 md:w-full lg:w-1/4">
 67 | 				<a class="flex items-center justify-center h-32 bg-navy-lightest shadow-inner-md font-semibold text-center leading-tight text-navy p-2 rounded hover:bg-navy hover:text-white trans" href="https://github.com/DuendeSoftware/IdentityServer" target="_blank">
 68 | 					<span class="block">
 69 | 						<span class="fab fa-github block text-4xl" aria-hidden="true"></span>
 70 | 						<span class="block mt-3">IdentityServer<span class="block">on GitHub</span></span>
 71 | 					</span>
 72 | 				</a>
 73 | 			</li>
 74 | 			<li class="w-full pt-4 pl-4 sm:w-1/2 md:w-full lg:w-1/4">
 75 | 				<a class="flex items-center justify-center h-32 bg-navy-lightest shadow-inner-md font-semibold text-center leading-tight text-navy p-2 rounded hover:bg-navy hover:text-white trans" href="https://www.identityserver.com/documentation/adminui" target="_blank">
 76 | 					<span class="block">
 77 | 						<span class="fas fa-file-alt block text-4xl" aria-hidden="true"></span>
 78 | 						<span class="block mt-3">AdminUI <span class="block">documentation</span></span>
 79 | 					</span>
 80 | 				</a>
 81 | 			</li>
 82 | 			<li class="w-full pt-4 pl-4 sm:w-1/2 md:w-full lg:w-1/4">
 83 | 				<a class="flex items-center justify-center h-32 bg-navy-lightest shadow-inner-md font-semibold text-center leading-tight text-navy p-2 rounded hover:bg-navy hover:text-white trans" href="https://www.identityserver.com/documentation/saml2p" target="_blank">
 84 | 					<span class="block">
 85 | 						<span class="fas fa-file-alt block text-4xl" aria-hidden="true"></span>
 86 | 						<span class="block mt-3">SAML2P <span class="block">documentation</span></span>
 87 | 					</span>
 88 | 				</a>
 89 | 			</li>
 90 | 			<li class="w-full pt-4 pl-4 sm:w-1/2 md:w-full lg:w-1/4">
 91 | 				<a class="flex items-center justify-center h-32 bg-navy-lightest shadow-inner-md font-semibold text-center leading-tight text-navy p-2 rounded hover:bg-navy hover:text-white trans" href="https://www.identityserver.com/documentation/wsfed" target="_blank">
 92 | 					<span class="block">
 93 | 						<span class="fas fa-file-alt block text-4xl" aria-hidden="true"></span>
 94 | 						<span class="block mt-3">WS-Fed <span class="block">documentation</span></span>
 95 | 					</span>
 96 | 				</a>
 97 | 			</li>
 98 | 		</ul>
 99 | 	</section>
100 | 
101 | 	<section>
102 | 		<h2 class="text-xl mb-3">Flexible support plans</h2>
103 | 		<ul class="flex flex-wrap list-reset -mt-4 -ml-4">
104 | 			<li class="w-full pt-4 pl-4 sm:w-1/2 md:w-full lg:w-1/4">
105 | 				<a class="flex items-center justify-center h-32 bg-navy-lightest shadow-inner-md font-semibold text-center leading-tight text-navy p-2 rounded hover:bg-navy hover:text-white trans" href="https://www.identityserver.com/services/developer-support" target="_blank">
106 | 					<span class="block">
107 | 						<span class="fas fa-laptop-code block text-4xl" aria-hidden="true"></span>
108 | 						<span class="block mt-3">Developer <span class="block">support</span></span>
109 | 					</span>
110 | 				</a>
111 | 			</li>
112 | 			<li class="w-full pt-4 pl-4 sm:w-1/2 md:w-full lg:w-1/4">
113 | 				<a class="flex items-center justify-center h-32 bg-navy-lightest shadow-inner-md font-semibold text-center leading-tight text-navy p-2 rounded hover:bg-navy hover:text-white trans" href="https://www.identityserver.com/services/production-support" target="_blank">
114 | 					<span class="block">
115 | 						<span class="fas fa-headset block text-4xl" aria-hidden="true"></span>
116 | 						<span class="block mt-3">Production <span class="block">support</span></span>
117 | 					</span>
118 | 				</a>
119 | 			</li>
120 | 			<li class="w-full pt-4 pl-4 sm:w-1/2 md:w-full lg:w-1/4">
121 | 				<a class="flex items-center justify-center h-32 bg-navy-lightest shadow-inner-md font-semibold text-center leading-tight text-navy p-2 rounded hover:bg-navy hover:text-white trans" href="https://www.identityserver.com/services/bespoke-development" target="_blank">
122 | 					<span class="block">
123 | 						<span class="fas fa-code block text-4xl" aria-hidden="true"></span>
124 | 						<span class="block mt-3">Bespoke <span class="block">development</span></span>
125 | 					</span>
126 | 				</a>
127 | 			</li>
128 | 		</ul>
129 | 	</section>
130 | 
131 | </div>


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Views/Shared/Error.cshtml:
--------------------------------------------------------------------------------
 1 | @using Microsoft.AspNetCore.Hosting
 2 | @using Microsoft.Extensions.Hosting
 3 | @model Rsk.Samples.IdentityServer.AdminUiIntegration.Models.ErrorViewModel
 4 | @inject IWebHostEnvironment host
 5 | 
 6 | @{
 7 | 	var error = Model?.Error?.Error;
 8 | 	var errorDescription = host.IsDevelopment() ? Model?.Error?.ErrorDescription : null;
 9 | 	var cachedEventError = host.IsDevelopment() ? Model?.EventStoreMessage : null;
10 | 	var requestId = Model?.Error?.RequestId;
11 | }
12 | 
13 | @section banner
14 | {
15 | 	<div class="bg-navy text-white px-6 py-8 md:py-12 lg:py-16 relative z-10">
16 | 		<div class="container w-full text-left mx-auto self-center">
17 | 			<div class="max-w-lg">
18 | 				<div class="flex flex-wrap items-center">
19 | 					<h1 class="font-bold w-full text-3xl lg:text-4xl leading-tight">Error</h1>
20 | 				</div>
21 | 			</div>
22 | 		</div>
23 | 	</div>
24 | }
25 | 
26 | <div class="message message-error" role="alert">
27 | 	<div>
28 | 		<h2 class="text-base">Sorry, there was an error</h2>
29 | 		@if (error != null || requestId != null)
30 | 		{
31 | 			<ul class="mt-1">
32 | 				@if (error != null)
33 | 				{
34 | 					<li>@error</li>
35 | 					if (errorDescription != null)
36 | 					{
37 | 						<li>@errorDescription</li>
38 | 					}
39 | 					if (cachedEventError != null)
40 | 					{
41 | 						<li>@cachedEventError</li>
42 | 					}
43 | 				}
44 | 				@if (requestId != null)
45 | 				{
46 | 					<li class="request-id">Request ID: @requestId</li>
47 | 				}
48 | 			</ul>
49 | 		}
50 | 	</div>
51 | </div>


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Views/Shared/_Layout.cshtml:
--------------------------------------------------------------------------------
  1 | @using Duende.IdentityServer.Extensions
  2 | @{
  3 | 	string name = null;
  4 | 	if (!true.Equals(ViewData["signed-out"]))
  5 | 	{
  6 | 		name = Context.User?.GetDisplayName();
  7 | 	}
  8 | 	bool signedIn = !string.IsNullOrWhiteSpace(name);
  9 | }
 10 | <!DOCTYPE html>
 11 | <html class="no-js bg-navy-darker" lang="en-gb">
 12 | <head>
 13 | 	<meta charset="utf-8" />
 14 | 	<title>IdentityServer</title>
 15 | 	<meta name="robots" content="noindex" />
 16 | 	<meta http-equiv="X-UA-Compatible" content="IE=edge" />
 17 | 	<meta name="viewport" content="width=device-width,shrink-to-fit=no,initial-scale=1,minimum-scale=1" />
 18 | 	<link href="~/fonts/fontawesome/css/all.min.css" rel="stylesheet" asp-append-version="true" />
 19 | 	<link href="~/css/site.min.css" rel="stylesheet" media="screen" asp-append-version="true" />
 20 | 	<link href="~/css/print.min.css" rel="stylesheet" media="print" asp-append-version="true" />
 21 | 	<link href="~/favicon.ico" rel="shortcut icon" type="image/x-icon" asp-append-version="true" />
 22 | 	<meta name="theme-color" content="#000913" />
 23 | 	<meta name="format-detection" content="telephone=no" />
 24 | </head>
 25 | <body id="top" class="preload bg-navy-darker text-white text-center text-base font-sans leading-normal">
 26 | 
 27 | 	<a class="skip-link sr-only sr-only-focusable bg-white font-semibold text-copy px-4 py-2 no-print" href="#main">Skip to content</a>
 28 | 
 29 | 	<div class="bg-black-darker px-6 py-3 no-print">
 30 | 		<nav class="flex items-center justify-end container text-xs leading-none text-grey-lighter text-right mx-auto" aria-label="Account">
 31 | 			<span class="hidden sm:block fas fa-user-alt opacity-75 mr-2" aria-hidden="true"></span>
 32 | 			<ul class="flex items-center list-reset">
 33 | 				@if (signedIn)
 34 | 				{
 35 | 					<li class="flex items-center mr-2 sm:mr-3" aria-hidden="true">
 36 | 						<span class="block text-right w-48 sm:w-auto sm:max-w-xs truncate">@name</span>
 37 | 						<span class="block bg-grey w-1 h-1 ml-2 rounded-full sm:ml-3"></span>
 38 | 					</li>
 39 | 				}
 40 | 				<li>
 41 | 					@if (signedIn)
 42 | 					{
 43 | 						<a class="text-grey-lighter hover:text-white trans" asp-action="Logout" asp-controller="Account">Logout</a>
 44 | 					}
 45 | 					else
 46 | 					{
 47 | 						<a class="text-grey-lighter hover:text-white trans" asp-action="Login" asp-controller="Account">Login</a>
 48 | 					}
 49 | 				</li>
 50 | 			</ul>
 51 | 		</nav>
 52 | 	</div>
 53 | 
 54 | 	<header id="header" class="bg-navy border-b border-white-25 text-white px-6" role="banner">
 55 | 		<div class="flex items-center justify-between container mx-auto h-header">
 56 | 			<a class="font-semibold flex items-center bg-red text-white px-5 py-1 rounded-full hover:bg-red-dark focus:shadow-outline focus:outline-none trans-bg" href="https://www.identityserver.com" target="_blank">
 57 | 				<span>IdentityServer</span>
 58 | 				<span class="text-white-75 font-normal no-print">.com</span>
 59 | 			</a>
 60 | 			<nav id="nav" class="no-print">
 61 | 				<ul class="flex flex-wrap items-center list-reset">
 62 | 					<li class="sm:mr-5">
 63 | 						<a class="block p-1 text-navy-lighter hover:text-white trans-color" asp-action="Index" asp-controller="Home">
 64 | 							Home
 65 | 						</a>
 66 | 					</li>
 67 | 					<li class="hidden sm:block sm:mr-5">
 68 | 						<a class="block p-1 text-navy-lighter hover:text-white trans-color" asp-action="Index" asp-controller="Grants">
 69 | 							Grants
 70 | 						</a>
 71 | 					</li>
 72 | 					<li class="hidden sm:block">
 73 | 						<a class="flex items-center bg-navy-light font-semibold text-white px-5 py-1 hover:bg-navy-lightest hover:text-navy rounded-full trans" href="https://www.identityserver.com/products" target="_blank">
 74 | 							<span class="capitalize md:normal-case">
 75 | 								<span class="hidden md:inline">Our</span> products
 76 | 							</span>
 77 | 							<span class="fas fa-long-arrow-alt-right ml-2" aria-hidden="true"></span>
 78 | 						</a>
 79 | 					</li>
 80 | 				</ul>
 81 | 			</nav>
 82 | 		</div>
 83 | 	</header>
 84 | 
 85 | 	<main id="main" class="bg-navy-lightest text-copy focus:outline-none" role="main" tabindex="-1">
 86 | 
 87 | 		@RenderSection("banner", false)
 88 | 
 89 | 		<div id="content">
 90 | 
 91 | 			<div class="row-block">
 92 | 				<div class="container text-left mx-auto">
 93 | 					<div class="flex flex-wrap -mt-6 -ml-6 lg:-mt-12 lg:-ml-12 xl:-mt-16 xl:-ml-16">
 94 | 
 95 | 						<div id="body" class="text-left mx-auto pt-6 pl-6 w-full md:w-1/2 lg:w-2/3 lg:pt-12 lg:pl-12 xl:pt-16 xl:pl-16">
 96 | 							@RenderBody()
 97 | 						</div>
 98 | 
 99 | 						<aside class="text-left mx-auto pt-6 pl-6 w-full md:w-1/2 lg:w-1/3 lg:pt-12 lg:pl-12 xl:pt-16 xl:pl-16 print-grid">
100 | 
101 | 							<section class="bg-red-lightest border-b-3 border-red overflow-hidden rounded shadow-md print-grid__col-1/2">
102 | 								<h2 class="bg-red text-base text-white p-4">
103 | 									<span class="fas fa-wrench fa-fw mr-1" aria-hidden="true"></span>
104 | 									Your own customised <abbr title="Single sign-on">SSO</abbr> solution
105 | 								</h2>
106 | 								<div class="p-4 pb-6">
107 | 									<p class="text-sm">We can develop a customised IdentityServer solution to fit your needs:</p>
108 | 									<ul class="list-reset text-sm mt-3">
109 | 										<li class="flex items-start">
110 | 											<span class="fas fa-check-circle flex-no-shrink text-red leading-normal mr-2" aria-hidden="true"></span>
111 | 											<span>Built to your exact requirements</span>
112 | 										</li>
113 | 										<li class="flex items-start mt-1">
114 | 											<span class="fas fa-check-circle flex-no-shrink text-red leading-normal mr-2" aria-hidden="true"></span>
115 | 											<span>Seamless integration with your IT infrastructure</span>
116 | 										</li>
117 | 										<li class="flex items-start mt-1">
118 | 											<span class="fas fa-check-circle flex-no-shrink text-red leading-normal mr-2" aria-hidden="true"></span>
119 | 											<span>Full source code</span>
120 | 										</li>
121 | 									</ul>
122 | 									<p class="mt-6 text-center">
123 | 										<span class="hidden" aria-hidden="true">Email: sales@identityserver.com</span>
124 | 										<a class="btn btn-small no-print" href="mailto:sales@identityserver.com?subject=Custom+SSO+solutions" target="_blank">Enquire Now</a>
125 | 									</p>
126 | 								</div>
127 | 							</section>
128 | 
129 | 							<section class="bg-navy-lightest border-b-3 border-navy overflow-hidden rounded shadow-md mt-6 lg:mt-8 print-grid__col-1/2">
130 | 								<h2 class="bg-navy text-base text-white p-4">
131 | 									<span class="far fa-question-circle fa-fw mr-1" aria-hidden="true"></span>
132 | 									Looking for IdentityServer support?
133 | 								</h2>
134 | 								<div class="p-4 pb-6">
135 | 									<p class="text-sm">We can help with your IdentityServer solution providing expert guidance, support and consultancy:</p>
136 | 									<ul class="list-reset text-sm mt-3">
137 | 										<li class="flex items-start">
138 | 											<span class="fas fa-check-circle flex-no-shrink text-navy leading-normal mr-2" aria-hidden="true"></span>
139 | 											<span>Remote development support</span>
140 | 										</li>
141 | 										<li class="flex items-start mt-1">
142 | 											<span class="fas fa-check-circle flex-no-shrink text-navy leading-normal mr-2" aria-hidden="true"></span>
143 | 											<span>IdentityServer production support</span>
144 | 										</li>
145 | 										<li class="flex items-start mt-1">
146 | 											<span class="fas fa-check-circle flex-no-shrink text-navy leading-normal mr-2" aria-hidden="true"></span>
147 | 											<span>Formal health checks</span>
148 | 										</li>
149 | 									</ul>
150 | 									<p class="mt-6 text-center">
151 | 										<span class="hidden" aria-hidden="true">Email: sales@identityserver.com</span>
152 | 										<a class="btn btn-small btn-secondary no-print" href="mailto:sales@identityserver.com?subject=IdentityServer+support" target="_blank">Enquire Now</a>
153 | 									</p>
154 | 								</div>
155 | 							</section>
156 | 
157 | 						</aside>
158 | 
159 | 					</div>
160 | 				</div>
161 | 			</div>
162 | 
163 | 			<aside id="site-info" class="row-block">
164 | 				<div class="max-w-md text-navy-light text-sm text-center mx-auto">
165 | 					<p>This implementation of IdentityServer is completely open source. Please go ahead and change the branding to meet your requirements; however you will need a license from <a class="text-red-dark font-bold hover:text-navy trans" href="https://duendesoftware.com/" target="_blank">Duende Software</a> to deploy it. If you need any support or are interested in our commercial options for IdentityServer, please feel free to contact us at <a class="text-red-dark font-bold hover:text-navy trans" href="mailto:sales@identityserver.com?subject=Commercial" target="_blank">sales@identityserver.com</a></p>
166 | 				</div>
167 | 			</aside>
168 | 
169 | 		</div>
170 | 	</main>
171 | 
172 | 	<div class="relative z-30 no-print">
173 | 		<p class="absolute pin-b pin-l pin-r -mb-5 -ml-4 z-20">
174 | 			<a class="bg-navy-darker text-navy-lighter h-10 w-10 rounded-full flex items-center justify-center mx-auto hover:bg-red hover:text-white trans" href="#top">
175 | 				<span class="fas fa-arrow-up" aria-hidden="true"></span>
176 | 				<span class="sr-only">Back To Top</span>
177 | 			</a>
178 | 		</p>
179 | 	</div>
180 | 
181 | 	<footer id="footer" class="bg-navy-darker text-navy-lighter px-6 py-10 text-xs relative z-20" role="contentinfo">
182 | 		<div class="flex flex-wrap sm:flex-no-wrap items-center sm:justify-between container text-left mx-auto">
183 | 			<p class="mb-4 sm:mb-0 w-full sm:w-auto">&copy; @DateTime.Now.Year <a class="hover:text-white trans" href="https://www.rocksolidknowledge.com" target="_blank">Rock Solid Knowledge</a></p>
184 | 			<p class="list-reset w-full sm:w-auto no-print">
185 | 				<a class="hover:text-white trans" href="https://www.identityserver.com/" target="_blank">
186 | 					IdentityServer.com
187 | 				</a>
188 | 			</p>
189 | 		</div>
190 | 	</footer>
191 | 
192 | 	<script src="~/js/site.min.js" asp-append-version="true"></script>
193 | 	@RenderSection("scripts", false)
194 | 
195 | </body>
196 | </html>
197 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Views/Shared/_ValidationSummary.cshtml:
--------------------------------------------------------------------------------
1 | @if (ViewContext.ModelState.IsValid == false)
2 | {
3 | 	<div class="message message-error" role="alert">
4 | 		<div>
5 | 			<h2 class="text-base">Error</h2>
6 | 			<div asp-validation-summary="All"></div>
7 | 		</div>
8 | 	</div>
9 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Views/_ViewImports.cshtml:
--------------------------------------------------------------------------------
1 | @addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
2 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/Views/_ViewStart.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     Layout = "_Layout";
3 | }
4 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/appsettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "DbProvider": "MySql",
 3 |   "IdentityConnectionString": "Server=localhost,3306;Uid=docker;Pwd=Welkom1234!;Database=IdentityExpressDb;",
 4 |   "IdentityServerConnectionString": "Server=localhost,3306;Uid=docker;Pwd=Welkom1234!;Database=IdentityExpressDb;",
 5 |   "Google_ClientId": "",
 6 |   "Google_ClientSecret": "",
 7 |   "OperationalStoreSchemaName": "",
 8 |   "ConfigurationStoreSchemaName": "",
 9 |   "DynamicAuth": {
10 |     "Mode": "Duende",
11 |     "RskComponentLicensee": "DEMO",
12 |     "RskComponentLicenseKey": "***YOUR LICENSE KEY***",
13 |     "SamlLicensee": "DEMO",
14 |     "SamlLicenseKey": "***YOUR LICENSE KEY***"
15 |   }
16 | }
17 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/appsettings.testing.json:
--------------------------------------------------------------------------------
1 | {
2 |   "DbProvider": "Sqlite",
3 |   "IdentityConnectionString": "Filename=./AdminUI.Integration.Tests.db",
4 |   "IdentityServerConnectionString": "Filename=./AdminUI.Integration.Tests.db"
5 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/gulpfile.js:
--------------------------------------------------------------------------------
  1 | /// <binding ProjectOpened='build' />
  2 | /*
  3 | 	Gulp tasks for: IdentityServer
  4 | 	Author: @karltynan for Rock Solid Knowledge Ltd (https://www.rocksolidknowledge.com/)
  5 | */
  6 | 
  7 | var gulp = require('gulp');
  8 | var cssimport = require("gulp-cssimport");
  9 | var gulpIf = require('gulp-if');
 10 | var postcss = require('gulp-postcss');
 11 | var purgecss = require('gulp-purgecss');
 12 | var rename = require('gulp-rename');
 13 | var tailwindcss = require('tailwindcss');
 14 | var uglify = require('gulp-uglify');
 15 | var uglifycss = require('gulp-uglifycss');
 16 | 
 17 | var usePurgecss = true;
 18 | 
 19 | // purgecss path
 20 | var purgecssPath = [
 21 | 	'./views/**/*.cshtml'
 22 | ];
 23 | 
 24 | // asset paths
 25 | var cssSourcePath = './src/css/site.css';
 26 | var printSourcePath = './src/css/print.css';
 27 | var jsSourcePath = './src/js/*.js';
 28 | 
 29 | // export paths
 30 | var cssExportPath = './wwwroot/css/';
 31 | var printExportPath = './wwwroot/css/';
 32 | var jsExportPath = './wwwroot/js/';
 33 | 
 34 | // custom purgecss extractor(s) https://github.com/FullHuman/purgecss
 35 | class TailwindExtractor {
 36 | 	static extract(content) {
 37 | 		return content.match(/[A-z0-9-:\/]+/g);
 38 | 	}
 39 | }
 40 | 
 41 | // site css
 42 | function css() {
 43 | 	return gulp.src(cssSourcePath)
 44 | 		.pipe(cssimport())
 45 | 		.pipe(postcss([
 46 | 			tailwindcss('./tailwind.js'),
 47 | 			require('postcss-nested'),
 48 | 			require('autoprefixer')
 49 | 		]))
 50 | 		.pipe(gulp.dest(cssExportPath))
 51 | 		.pipe(
 52 | 			gulpIf(usePurgecss, purgecss({
 53 | 				content: purgecssPath,
 54 | 				extractors: [
 55 | 					{
 56 | 						extractor: TailwindExtractor,
 57 | 						extensions: ['html', 'cshtml']
 58 | 					}
 59 | 				]
 60 | 			}))
 61 | 		)
 62 | 		.pipe(uglifycss({
 63 | 			"maxLineLen": 312,
 64 | 			"uglyComments": true
 65 | 		}))
 66 | 		.pipe(rename({ suffix: '.min' }))
 67 | 		.pipe(gulp.dest(cssExportPath));
 68 | }
 69 | 
 70 | // print css
 71 | function print() {
 72 | 	return gulp.src(printSourcePath)
 73 | 		.pipe(gulp.dest(cssExportPath))
 74 | 		.pipe(uglifycss({
 75 | 			"maxLineLen": 312,
 76 | 			"uglyComments": true
 77 | 		}))
 78 | 		.pipe(rename({ suffix: '.min' }))
 79 | 		.pipe(gulp.dest(printExportPath));
 80 | }
 81 | 
 82 | function js() {
 83 | 	return gulp.src(jsSourcePath)
 84 | 		.pipe(gulp.dest(jsExportPath))
 85 | 		.pipe(uglify())
 86 | 		.pipe(rename({ suffix: '.min' }))
 87 | 		.pipe(gulp.dest(jsExportPath));
 88 | }
 89 | 
 90 | // watch
 91 | function watchFiles() {
 92 | 	gulp.watch(['./Views/**/*.cshtml'], buildCss);
 93 | 	gulp.watch(['./src/css/**/*.css'], buildCss);
 94 | 	gulp.watch(['./src/js/**/*.js'], js);
 95 | }
 96 | 
 97 | const buildCss = gulp.parallel(css, print);
 98 | const build = gulp.parallel(buildCss, js);
 99 | const watcher = gulp.series(build, watchFiles);
100 | 
101 | // exports
102 | exports.build = build;
103 | exports.css = buildCss;
104 | exports.js = js;
105 | exports.watch = watcher;


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/package.json:
--------------------------------------------------------------------------------
 1 | {
 2 | 	"name": "identityserver",
 3 | 	"version": "1.0.0",
 4 | 	"description": "IdentityServer",
 5 | 	"author": "@karltynan for Rock Solid Knowledge Ltd (https://www.rocksolidknowledge.com/)",
 6 | 	"private": true,
 7 | 	"license": "UNLICENSED",
 8 | 	"devDependencies": {
 9 | 		"autoprefixer": "^10.4.16",
10 | 		"gulp": "^4.0.2",
11 | 		"gulp-cssimport": "^7.0.0",
12 | 		"gulp-if": "^2.0.2",
13 | 		"gulp-postcss": "^9.0.1",
14 | 		"gulp-purgecss": "^5.0.0",
15 | 		"gulp-rename": "^1.4.0",
16 | 		"gulp-uglify": "^3.0.2",
17 | 		"gulp-uglifycss": "^1.1.0",
18 | 		"postcss-nested": "^6.0.1",
19 | 		"tailwindcss": "^3.3.3"
20 | 	}
21 | }
22 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/components/buttons.css:
--------------------------------------------------------------------------------
  1 | /* primary (red) */
  2 | 
  3 | .btn {
  4 | 	@apply inline-block inline-flex items-center justify-center bg-red border-2 border-red text-white font-semibold px-6 py-2 text-center rounded-full truncate trans;
  5 | }
  6 | 
  7 | .btn:focus {
  8 | 	@apply outline-none shadow-outline;
  9 | }
 10 | 
 11 | .btn:hover {
 12 | 	@apply bg-navy border-navy text-white;
 13 | }
 14 | 
 15 | /* secondary (navy) */
 16 | 
 17 | .btn-secondary {
 18 | 	@apply bg-navy border-navy text-white;
 19 | }
 20 | 
 21 | .btn-secondary:hover {
 22 | 	@apply bg-navy-darkest border-navy-darkest text-white;
 23 | }
 24 | 
 25 | /* subtle (navy-light) */
 26 | 
 27 | .btn-subtle {
 28 | 	@apply bg-navy-light border-navy-light text-white;
 29 | }
 30 | 
 31 | .btn-subtle:hover {
 32 | 	@apply bg-navy border-navy text-white;
 33 | }
 34 | 
 35 | /* white */
 36 | 
 37 | .btn-white {
 38 | 	@apply bg-white border-white text-navy;
 39 | }
 40 | 
 41 | .btn-white:hover {
 42 | 	@apply bg-transparent border-white text-white;
 43 | }
 44 | 
 45 | /* text */
 46 | 
 47 | .btn-text {
 48 | 	@apply bg-transparent border-none text-red p-0 rounded-none;
 49 | }
 50 | 
 51 | .btn-text:hover {
 52 | 	@apply bg-transparent text-navy;
 53 | }
 54 | 
 55 | /* line */
 56 | 
 57 | .btn-line {
 58 | 	@apply bg-transparent border-red text-red;
 59 | }
 60 | 
 61 | .btn-line:hover {
 62 | 	@apply bg-transparent border-navy text-navy;
 63 | }
 64 | 
 65 | /* line - secondary */
 66 | 
 67 | .btn-line-secondary {
 68 | 	@apply bg-transparent border-navy text-navy;
 69 | }
 70 | 
 71 | .btn-line-secondary:hover {
 72 | 	@apply bg-transparent border-navy-darkest text-navy-darkest;
 73 | }
 74 | 
 75 | /* line - subtle */
 76 | 
 77 | .btn-line-subtle {
 78 | 	@apply bg-transparent border-navy-light text-navy-light;
 79 | }
 80 | 
 81 | .btn-line-subtle:hover {
 82 | 	@apply bg-transparent border-navy-dark text-navy-dark;
 83 | }
 84 | 
 85 | /* line - white */
 86 | 
 87 | .btn-line-white {
 88 | 	@apply bg-transparent border-white text-white;
 89 | }
 90 | 
 91 | .btn-line-white:hover {
 92 | 	@apply bg-white border-white text-navy;
 93 | }
 94 | 
 95 | /* clear */
 96 | 
 97 | .btn-clear {
 98 | 	@apply bg-transparent border-navy-lighter text-navy-lighter;
 99 | }
100 | 
101 | .btn-clear:hover {
102 | 	@apply bg-transparent border-white text-white;
103 | }
104 | 
105 | /* small */
106 | 
107 | .btn-small {
108 | 	@apply text-sm;
109 | }
110 | 
111 | .btn-small:not(.btn-text) {
112 | 	@apply px-3 py-1;
113 | }
114 | 
115 | /* disabled */
116 | .btn.disabled,
117 | .btn[disabled] {
118 | 	@apply bg-grey-lighter border-grey-lighter text-black opacity-25 cursor-not-allowed;
119 | }
120 | 
121 | .btn-line.disabled,
122 | .btn-line[disabled],
123 | .btn-line-secondary.disabled,
124 | .btn-line-secondary[disabled],
125 | .btn-line-subtle.disabled,
126 | .btn-line-subtle[disabled] {
127 | 	@apply bg-transparent border-grey-lighter text-grey-darker;
128 | }
129 | 
130 | .btn-text.disabled,
131 | .btn-text[disabled] {
132 | 	@apply bg-transparent border-transparent;
133 | }
134 | 
135 | .btn-clear.disabled,
136 | .btn-clear[disabled] {
137 | 	@apply bg-transparent border-navy-light text-navy-light;
138 | }
139 | 
140 | /* large */
141 | 
142 | @responsive {
143 | 
144 | 	.btn-large {
145 | 		@apply px-8 py-3 text-lg;
146 | 	}
147 | 
148 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/components/cms.css:
--------------------------------------------------------------------------------
  1 | /* spacing */
  2 | 
  3 | .cms p, .cms ul, .cms ol {
  4 | 	@apply mb-4;
  5 | }
  6 | 
  7 | /* headers */
  8 | 
  9 | .cms h1, .cms h2, .cms h3, .cms h4, .cms h5, .cms h6 {
 10 | 	@apply font-semibold  leading-tight text-navy mb-3;
 11 | }
 12 | 
 13 | .cms h2:not(:first-child), .cms h3:not(:first-child), .cms h4:not(:first-child), .cms h5:not(:first-child), .cms h6:not(:first-child) {
 14 | 	@apply mt-6;
 15 | }
 16 | 
 17 | .cms h1 {
 18 | 	@apply bg-orange-lightest border-dotted border-2 border-orange font-bold text-2xl text-orange px-3 py-2;
 19 | }
 20 | 
 21 | .cms h1:before {
 22 | 	@apply block font-semibold text-xs;
 23 | 	content: "WARNING!";
 24 | }
 25 | 
 26 | .cms h2 {
 27 | 	@apply text-4xl;
 28 | }
 29 | 
 30 | .cms h3 {
 31 | 	@apply text-3xl;
 32 | }
 33 | 
 34 | .cms h4 {
 35 | 	@apply text-2xl;
 36 | }
 37 | 
 38 | .cms h5, .cms h6 {
 39 | 	@apply mb-2;
 40 | }
 41 | 
 42 | .cms h5 {
 43 | 	@apply text-xl;
 44 | }
 45 | 
 46 | .cms h6 {
 47 | 	@apply font-bold text-lg;
 48 | }
 49 | 
 50 | /* links */
 51 | 
 52 | .cms a {
 53 | 	@apply font-bold text-red trans;
 54 | }
 55 | 
 56 | .cms a:hover {
 57 | 	@apply text-navy;
 58 | }
 59 | 
 60 | /* buttons */
 61 | 
 62 | .cms .cms-button:not(a) {
 63 | 	@apply block;
 64 | }
 65 | 
 66 | .cms a.cms-button,
 67 | .cms-button a,
 68 | a .cms-button {
 69 | 	@apply inline-block bg-red border-2 border-red text-white font-semibold px-5 py-2 rounded-full trans;
 70 | }
 71 | 
 72 | .cms a.cms-button:hover,
 73 | .cms-button a:hover,
 74 | a .cms-button:hover {
 75 | 	@apply bg-black border-black text-white;
 76 | }
 77 | 
 78 | /* lists */
 79 | 
 80 | .cms ul, .cms ol {
 81 | 	@apply list-reset mb-4 pl-10;
 82 | }
 83 | 
 84 | .cms ul li, .cms ol li {
 85 | 	@apply mb-2 relative;
 86 | }
 87 | 
 88 | .cms ul ul, .cms ul ol, .cms ol ul, .cms ol ol {
 89 | 	@apply my-2;
 90 | }
 91 | 
 92 | .cms ul:not(.cms-checks-list) > li:before {
 93 | 	@apply bg-red block w-bullet h-bullet absolute pin-l pin-t -ml-4 mt-2 rounded-full;
 94 | 	content: "";
 95 | }
 96 | 
 97 | .cms ul.cms-checks-list > li:before {
 98 | 	@apply text-red text-right font-icons font-bold w-8 absolute pin-l pin-t -ml-10;
 99 | 	content: "\f058";
100 | }
101 | 
102 | .cms ol {
103 | 	counter-reset: cms-ol;
104 | }
105 | 
106 | .cms ol > li:before {
107 | 	@apply text-red font-bold absolute pin-l -ml-8 text-right w-6;
108 | 	counter-increment: cms-ol;
109 | 	content: counter(cms-ol)".";
110 | }
111 | 
112 | .cms ol ol > li:before {
113 | 	content: counter(cms-ol, lower-alpha)".";
114 | }
115 | 
116 | /* tables */
117 | 
118 | .cms table {
119 | 	@apply border-0 border-collapse w-full mb-6;
120 | }
121 | 
122 | .cms table:not(:first-child) {
123 | 	@apply mt-6;
124 | }
125 | 
126 | .cms table th, .cms table td {
127 | 	@apply font-normal py-3 px-4 border-b-2 border-navy-lightest text-sm text-left break-words align-top;
128 | }
129 | 
130 | .cms table thead th, .cms table thead td {
131 | 	@apply bg-navy-lightest font-semibold text-navy text-xs uppercase border-0 tracking-wide;
132 | }
133 | 
134 | /* rules */
135 | 
136 | .cms hr {
137 | 	@apply border-0 h-px text-navy-lighter bg-grey-lighter m-0 mx-auto my-6 p-0 text-center;
138 | }
139 | 
140 | /* quotes */
141 | 
142 | .cms blockquote {
143 | 	@apply font-semibold text-lg text-navy mx-auto max-w-md mb-6 pl-12 relative;
144 | }
145 | 
146 | .cms blockquote:not(:first-child) {
147 | 	@apply mt-6;
148 | }
149 | 
150 | .cms blockquote:before {
151 | 	@apply text-navy-lighter font-icons font-bold text-3xl leading-none absolute pin-l pin-t;
152 | 	content: "\f10d";
153 | }
154 | 
155 | .cms blockquote .cms-quote-author {
156 | 	@apply block font-normal text-sm roman text-grey-light mt-2;
157 | }
158 | 
159 | .cms blockquote .cms-quote-author:before {
160 | 	content: "- ";
161 | }
162 | 
163 | /* images */
164 | 
165 | .cms img {
166 | 	@apply flex justify-center mx-auto mb-4 rounded;
167 | }
168 | 
169 | .cms .cms-image {
170 | 	@apply block;
171 | }
172 | 
173 | /* figure */
174 | 
175 | .cms figure {
176 | 	@apply block mb-4;
177 | }
178 | 
179 | .cms figure .cms-figure-image {
180 | 	@apply block;
181 | }
182 | 
183 | .cms figure .cms-figure-image img {
184 | 	@apply mb-0;
185 | }
186 | 
187 | .cms figure figcaption {
188 | 	@apply block mt-2 text-sm text-navy-lighter text-center;
189 | }
190 | 
191 | /* code */
192 | 
193 | .cms > :not(pre) code, .cms > :not(pre) .cms-code {
194 | 	@apply border font-mono text-sm whitespace-no-wrap wordbreak-break rounded;
195 | 	background: #f7f7f9;
196 | 	border-color: #e1e1e8;
197 | 	color: #d14;
198 | 	padding: 2px 5px;
199 | }
200 | 
201 | .cms > pre, .cms > pre code[class*="language"] {
202 | 	@apply block bg-navy-darkest font-mono text-grey-lighter text-left text-sm hyphens-none whitespace-pre break-normal wordbreak-normal wordspacing-normal;
203 | 	tab-size: 4;
204 | }
205 | 
206 | .cms > pre
207 | {
208 | 	@apply max-h-700 mt-2 mb-6 px-6 py-4 overflow-auto scrolling-touch;
209 | 	resize: vertical;
210 | }
211 | 
212 | .cms > pre:not(:first-child)
213 | {
214 | 	@apply mt-6;
215 | }ccc
216 | 
217 | /* embed */
218 | 
219 | .cms .cms-embed {
220 | 	@apply mb-4 pt-169-ratio relative z-10;
221 | }
222 | 
223 | .cms .cms-embed iframe {
224 | 	@apply pin-l pin-t w-full h-full absolute z-10;
225 | }
226 | 
227 | /* small */
228 | 
229 | .cms small {
230 | 	@apply block text-grey-lighter text-xs;
231 | }
232 | 
233 | /* attrs */
234 | 
235 | .cms abbr[title] {
236 | 	@apply text-black no-underline border-b border-dotted border-grey;
237 | 	cursor: help;
238 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/components/containers.css:
--------------------------------------------------------------------------------
1 | .container {
2 | 	max-width: config('screens.xl');
3 | }
4 | 
5 | .content {
6 | 	max-width: config('maxWidth.content');
7 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/components/forms.css:
--------------------------------------------------------------------------------
 1 | .form-group {
 2 | 	@apply mb-5;
 3 | }
 4 | 
 5 | .form-label {
 6 | 	@apply block text-navy font-semibold cursor-pointer mb-2;
 7 | }
 8 | 
 9 | .form-control {
10 | 	@apply block bg-white text-navy border-2 border-grey-lighter shadow-inner h-12 p-3 w-full max-w-md rounded trans;
11 | }
12 | 
13 | .form-control:focus {
14 | 	@apply outline-none border-grey-light shadow-md;
15 | }
16 | 
17 | select.form-control {
18 | 	@apply pr-6;
19 | }
20 | 
21 | .form-checks {
22 | 	@apply flex flex-wrap items-start list-reset -mt-2 -ml-6;
23 | }
24 | 
25 | .form-checks__item {
26 | 	@apply pt-2 pl-6;
27 | }
28 | 
29 | .form-checks__label {
30 | 	@apply block flex items-start w-full cursor-pointer;
31 | }
32 | 
33 | .form-checks__input {
34 | 	@apply flex-no-shrink mt-1 mr-2 cursor-pointer;
35 | }
36 | 
37 | .form-checks__input:focus {
38 | 	@apply outline-none shadow-outline;
39 | }
40 | 
41 | .form-checks__text {
42 | 	@apply block text-navy font-semibold leading-tight w-full;
43 | }
44 | 
45 | .form-actions {
46 | 	@apply flex flex-wrap items-center mt-8;
47 | }
48 | 
49 | .form-text {
50 | 	@apply block text-grey text-sm mt-2;
51 | }
52 | 
53 | .form-error {
54 | 	@apply block text-red-dark text-sm mt-2;
55 | }
56 | 
57 | .form-error:before {
58 | 	@apply font-icons font-bold;
59 | 	content: "\f06a";
60 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/components/js.css:
--------------------------------------------------------------------------------
1 | @responsive {
2 | 	.js .hide-on-js,
3 | 	.no-js .show-on-js {
4 | 		display: none;
5 | 	}
6 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/components/messages.css:
--------------------------------------------------------------------------------
 1 | /* default */
 2 | 
 3 | .message {
 4 | 	@apply flex bg-navy-lightest shadow font-semibold text-navy mb-6 px-4 py-3 rounded overflow-hidden;
 5 | }
 6 | 
 7 | .message:before {
 8 | 	@apply bg-navy-light text-white font-icons font-bold flex-no-shrink px-4 py-3 -my-3 -ml-4 mr-4;
 9 | 	content: "\f06a";
10 | }
11 | 
12 | /* success */
13 | 
14 | .message-success {
15 | 	@apply bg-green-lightest text-green-darker;
16 | }
17 | 
18 | .message-success:before {
19 | 	@apply bg-green-light;
20 | 	content: "\f058";
21 | }
22 | 
23 | /* warning */
24 | 
25 | .message-warning {
26 | 	@apply bg-orange-lightest text-orange-dark;
27 | }
28 | 
29 | .message-warning:before {
30 | 	@apply bg-orange-light;
31 | 	content: "\f071";
32 | }
33 | 
34 | /* error */
35 | 
36 | .message-error {
37 | 	@apply bg-red-lightest text-red-dark;
38 | }
39 | 
40 | .message-error:before {
41 | 	@apply bg-red-light;
42 | 	content: "\f057";
43 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/components/row-block.css:
--------------------------------------------------------------------------------
 1 | .row-block {
 2 | 	@apply bg-white px-4 pt-6 pb-8;
 3 | }
 4 | 
 5 | .row-block:not(.no-stripe):nth-child(even),
 6 | .row-block.no-bg {
 7 | 	@apply bg-white-65;
 8 | }
 9 | 
10 | .row-block.no-padding {
11 | 	@apply p-0;
12 | }
13 | 
14 | .row-block__actions {
15 | 	@apply pt-6;
16 | }
17 | 
18 | @screen md {
19 | 	.row-block {
20 | 		@apply py-8;
21 | 	}
22 | 	.row-block__actions {
23 | 		@apply pt-8;
24 | 	}
25 | }
26 | 
27 | @screen lg {
28 | 	.row-block {
29 | 		@apply py-16;
30 | 	}
31 | 	.row-block__actions {
32 | 		@apply pt-12;
33 | 	}
34 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/components/skip-link.css:
--------------------------------------------------------------------------------
1 | .skip-link:focus {
2 | 	@apply fixed pin-l pin-t z-50;
3 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-brands-400.eot:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-brands-400.eot


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-brands-400.ttf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-brands-400.ttf


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-brands-400.woff:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-brands-400.woff


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-brands-400.woff2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-brands-400.woff2


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-light-300.eot:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-light-300.eot


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-light-300.ttf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-light-300.ttf


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-light-300.woff:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-light-300.woff


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-light-300.woff2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-light-300.woff2


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-regular-400.eot:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-regular-400.eot


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-regular-400.ttf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-regular-400.ttf


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-regular-400.woff:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-regular-400.woff


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-regular-400.woff2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-regular-400.woff2


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-solid-900.eot:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-solid-900.eot


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-solid-900.ttf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-solid-900.ttf


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-solid-900.woff:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-solid-900.woff


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-solid-900.woff2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/copy/webfonts/fa-solid-900.woff2


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/plugins/first-child.js:
--------------------------------------------------------------------------------
1 | module.exports = function({ addVariant }) {
2 | 	addVariant('first-child', ({ modifySelectors, separator }) => {
3 | 		modifySelectors(({ className }) => {
4 | 			return `.first-child${separator}${className}:first-child`
5 | 		})
6 | 	})
7 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/plugins/last-child.js:
--------------------------------------------------------------------------------
1 | module.exports = function({ addVariant }) {
2 | 	addVariant('last-child', ({ modifySelectors, separator }) => {
3 | 		modifySelectors(({ className }) => {
4 | 			return `.last-child${separator}${className}:last-child`
5 | 		})
6 | 	})
7 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/preflight/reset.css:
--------------------------------------------------------------------------------
 1 | html, body {
 2 | 	min-height: 100%;
 3 | }
 4 | 
 5 | ::-moz-selection {
 6 | 	@apply text-white bg-red;
 7 | }
 8 | 
 9 | ::selection {
10 | 	@apply text-white bg-red;
11 | }
12 | 
13 | a {
14 | 	@apply no-underline;
15 | 	color: inherit;
16 | }
17 | 
18 | abbr[title] {
19 | 	@apply no-underline;
20 | 	cursor: help;
21 | }
22 | 
23 | abbr[title]:hover {
24 | 	@apply underline;
25 | 	text-decoration: underline dotted;
26 | }
27 | 
28 | /* forms */
29 | 
30 | select {
31 | 	@apply appearance-none;
32 | 	background: url(/img/forms/select.png) no-repeat 98% 50%;
33 | }
34 | 
35 | ::-webkit-input-placeholder {
36 | 	@apply text-navy-lighter;
37 | }
38 | 
39 | ::-moz-placeholder {
40 | 	@apply text-navy-lighter;
41 | }
42 | 
43 | :-ms-input-placeholder {
44 | 	@apply text-navy-lighter;
45 | }
46 | 
47 | :-moz-placeholder {
48 | 	@apply text-navy-lighter;
49 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/print.css:
--------------------------------------------------------------------------------
  1 | .no-print, form, .fas, .far, .fab {
  2 | 	display: none !important;
  3 | }
  4 | 
  5 | html, body {
  6 | 	color: #333;
  7 | 	font-family: "Roboto", Helvetica, Arial, 'sans-serif';
  8 | 	font-size: 1rem;
  9 | 	line-height: 1.5;
 10 | 	margin: 0;
 11 | 	padding: 0;
 12 | }
 13 | 
 14 | a {
 15 | 	color: #333;
 16 | 	text-decoration: none;
 17 | }
 18 | 
 19 | h1, h2, h3, h4, h5, h6, p {
 20 | 	margin: 0 0 1rem 0;
 21 | 	padding: 0;
 22 | }
 23 | 
 24 | h1 {
 25 | 	font-size: 2rem;
 26 | }
 27 | 
 28 | h2 {
 29 | 	font-size: 1.5rem;
 30 | }
 31 | 
 32 | h3 {
 33 | 	font-size: 1.25rem;
 34 | }
 35 | 
 36 | h4, h5, h6 {
 37 | 	font-size: 1rem;
 38 | }
 39 | 
 40 | ul, ol {
 41 | 	list-style: none;
 42 | 	margin: 0 0 1rem 0;
 43 | 	padding: 0;
 44 | }
 45 | 
 46 | li {
 47 | 	margin: 0;
 48 | 	padding: 0;
 49 | }
 50 | 
 51 | abbr[title] {
 52 | 	border: none;
 53 | 	text-decoration: none;
 54 | }
 55 | 
 56 | abbr[title]:after {
 57 | 	content: " (" attr(title) ")";
 58 | }
 59 | 
 60 | #header {
 61 | 	border-bottom: 1px solid #ddd;
 62 | 	font-size: 2rem;
 63 | 	font-weight: bold;
 64 | 	margin-bottom: 1rem;
 65 | 	padding-bottom: 1rem;
 66 | 	text-align: center;
 67 | }
 68 | 
 69 | #body {
 70 | 	border-bottom: 1px solid #ddd;
 71 | 	margin-bottom: 1rem;
 72 | 	padding-bottom: 1rem;
 73 | }
 74 | 
 75 | #site-info, #footer {
 76 | 	border-top: 1px solid #ddd;
 77 | 	font-size: .75rem;
 78 | 	margin-top: 2rem;
 79 | 	padding-top: 2rem;
 80 | 	text-align: center;
 81 | }
 82 | 
 83 | .cms ul {
 84 | 	list-style: disc;
 85 | 	padding-left: 2rem;
 86 | }
 87 | 
 88 | .cms ol {
 89 | 	list-style: decimal;
 90 | 	padding-left: 2rem;
 91 | }
 92 | 
 93 | .cms ol li ol {
 94 | 	list-style: lower-alpha;
 95 | }
 96 | 
 97 | .print-block {
 98 | 	border: 1px solid #ddd;
 99 | 	margin: 0 0 1rem 0;
100 | 	padding: 1rem 1rem .5rem 1rem;
101 | }
102 | 
103 | .print-grid {
104 | 	font-size: 0;
105 | 	margin: -15px 0 0 -15px;
106 | 	padding: 0;
107 | 	text-align: left;
108 | }
109 | 
110 | .print-grid--center {
111 | 	text-align: center;
112 | }
113 | 
114 | [class*="print-grid__col"] {
115 | 	box-sizing: border-box;
116 | 	display: inline-block;
117 | 	font-size: 1rem;
118 | 	margin: 0;
119 | 	padding: 15px 0 0 15px;
120 | 	text-align: left;
121 | 	vertical-align: top;
122 | 	width: 100%;
123 | }
124 | 
125 | .print-grid__col-1\/4 {
126 | 	width: 25%;
127 |  }
128 | 
129 | .print-grid__col-1\/3 {
130 | 	width: 33.3333%;
131 | }
132 | 
133 | .print-grid__col-1\/2 {
134 | 	width: 50%;
135 | }
136 | 
137 | .print-grid__col-2\/3 {
138 | 	width: 66.6666%;
139 | }
140 | 
141 | .print-grid__col-3\/4 {
142 | 	width: 75%;
143 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/site.css:
--------------------------------------------------------------------------------
 1 | /* roboto-400 */
 2 | @font-face {
 3 | 	font-family: 'Roboto';
 4 | 	font-display: swap;
 5 | 	font-style: normal;
 6 | 	font-weight: 400;
 7 | 	src: local('Roboto'), local('Roboto-Regular'), url('/fonts/google/webfonts/roboto-400.woff2') format('woff2'), url('/fonts/google/webfonts/roboto-400.woff') format('woff');
 8 | }
 9 | 
10 | /* roboto-500 */
11 | @font-face {
12 | 	font-family: 'Roboto';
13 | 	font-display: swap;
14 | 	font-style: normal;
15 | 	font-weight: 500;
16 | 	src: local('Roboto Medium'), local('Roboto-Medium'), url('/fonts/google/webfonts/roboto-500.woff2') format('woff2'), url('/fonts/google/webfonts/roboto-500.woff') format('woff');
17 | }
18 | 
19 | /* roboto-700 */
20 | @font-face {
21 | 	font-family: 'Roboto';
22 | 	font-display: swap;
23 | 	font-style: normal;
24 | 	font-weight: 700;
25 | 	src: local('Roboto Bold'), local('Roboto-Bold'), url('/fonts/google/webfonts/roboto-700.woff2') format('woff2'), url('/fonts/google/webfonts/roboto-700.woff') format('woff');
26 | }
27 | 
28 | /**
29 |  * This injects Tailwind's base styles, which is a combination of
30 |  * Normalize.css and some additional base styles.
31 |  *
32 |  * You can see the styles here:
33 |  * https://github.com/tailwindcss/tailwindcss/blob/master/css/preflight.css
34 |  *
35 |  * If using `postcss-import`, use this import instead:
36 |  *
37 |  * @import "tailwindcss/preflight";
38 |  */
39 | 
40 | @tailwind preflight;
41 | 
42 | @import "preflight/reset.css";
43 | 
44 | /**
45 |  * This injects any component classes registered by plugins.
46 |  *
47 |  * If using `postcss-import`, use this import instead:
48 |  *
49 |  * @import "tailwindcss/components";
50 |  */
51 | 
52 | @import "components/js.css";
53 | @import "components/buttons.css";
54 | @import "components/containers.css";
55 | @import "components/cms.css";
56 | @import "components/forms.css";
57 | @import "components/messages.css";
58 | @import "components/row-block.css";
59 | @import "components/skip-link.css";
60 | 
61 | /**
62 |  * This injects all of Tailwind's utility classes, generated based on your
63 |  * config file.
64 |  *
65 |  * If using `postcss-import`, use this import instead:
66 |  *
67 |  * @import "tailwindcss/utilities";
68 |  */
69 | 
70 | @tailwind utilities;
71 | 
72 | @import "utilities/clear.css";
73 | @import "utilities/columns.css";
74 | @import "utilities/hyphens.css";
75 | @import "utilities/position.css";
76 | @import "utilities/transitions.css";
77 | @import "utilities/translate.css";
78 | @import "utilities/wordbreak.css";
79 | @import "utilities/wordspacing.css";


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/utilities/clear.css:
--------------------------------------------------------------------------------
 1 | @responsive {
 2 | 
 3 | 	.clear {
 4 | 		clear: both
 5 | 	}
 6 | 
 7 | 	.clear-left {
 8 | 		clear: left;
 9 | 	}
10 | 
11 | 	.clear-right {
12 | 		clear: right;
13 | 	}
14 | 
15 | 	.clear-none {
16 | 		clear: none;
17 | 	}
18 | 
19 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/utilities/columns.css:
--------------------------------------------------------------------------------
 1 | @responsive {
 2 | 
 3 | 	/* column count */
 4 | 
 5 | 	.column-1\/2 {
 6 | 		column-count: 2;
 7 | 	}
 8 | 
 9 | 	.column-1\/3 {
10 | 		column-count: 3;
11 | 	}
12 | 
13 | 	/* column gap */
14 | 
15 | 	.columngap-none {
16 | 		column-gap: 0;
17 | 	}
18 | 
19 | 	.columngap-sm {
20 | 		column-gap: 1rem;
21 | 	}
22 | 
23 | 	.columngap-md {
24 | 		column-gap: 2rem;
25 | 	}
26 | 
27 | 	.columngap-lg {
28 | 		column-gap: 3rem;
29 | 	}
30 | 
31 | 	.columngap-xl {
32 | 		column-gap: 4rem;
33 | 	}
34 | 
35 | 	.columngap-2xl {
36 | 		column-gap: 5rem;
37 | 	}
38 | 
39 | 	/* column rule */
40 | 
41 | 	.column-rule {
42 | 		column-rule: 2px solid config('colors.navy-lightest');
43 | 	}
44 | 
45 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/utilities/hyphens.css:
--------------------------------------------------------------------------------
 1 | @responsive {
 2 | 
 3 | 	.hyphens-none {
 4 | 		hyphens: none;
 5 | 	}
 6 | 
 7 | 	.hyphens-manual {
 8 | 		hyphens: manual;
 9 | 	}
10 | 
11 | 	.hyphens-auto {
12 | 		hyphens: auto;
13 | 	}
14 | 
15 | 	.hyphens-initial {
16 | 		hyphens: initial;
17 | 	}
18 | 
19 | 	.hyphens-inherit {
20 | 		hyphens: inherit;
21 | 	}
22 | 
23 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/utilities/position.css:
--------------------------------------------------------------------------------
 1 | @responsive {
 2 | 
 3 | 	.pin-l-center {
 4 | 		left: 50%;
 5 | 	}
 6 | 
 7 | 	.pin-t-center {
 8 | 		top: 50%;
 9 | 	}
10 | 
11 | 	.pin-center {
12 | 		left: 50%;
13 | 		top: 50%;
14 | 	}
15 | 
16 | 	.pin-t-full {
17 | 		top: 100%;
18 | 	}
19 | 
20 | 	.pin-b-full {
21 | 		bottom: 100%;
22 | 	}
23 | 
24 | 	.pin-l-full {
25 | 		left: 100%;
26 | 	}
27 | 
28 | 	.pin-r-full {
29 | 		right: 100%;
30 | 	}
31 | 
32 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/utilities/transitions.css:
--------------------------------------------------------------------------------
 1 | .preload * {
 2 | 	transition: none !important;
 3 | }
 4 | 
 5 | @responsive {
 6 | 
 7 | 	.trans {
 8 | 		transition: all .15s ease-in-out;
 9 | 	}
10 | 
11 | 	.trans-bg {
12 | 		transition: background-color .15s ease-in-out;
13 | 	}
14 | 
15 | 	.trans-border {
16 | 		transition: border-color .15s ease-in-out;
17 | 	}
18 | 
19 | 	.trans-color {
20 | 		transition: color .15s ease-in-out;
21 | 	}
22 | 
23 | 	.trans-opacity {
24 | 		transition: opacity .15s ease-in-out;
25 | 	}
26 | 
27 | 	.trans-transform {
28 | 		transition: transform .15s ease-in-out;
29 | 	}
30 | 
31 | 	.trans-slow {
32 | 		transition-duration: .25s;
33 | 	}
34 | 
35 | 	.trans-slower {
36 | 		transition-duration: .35s;
37 | 	}
38 | 
39 | 	.trans-slowest {
40 | 		transition-duration: .45s;
41 | 	}
42 | 
43 | 	.trans-none {
44 | 		transition: none;
45 | 	}
46 | 
47 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/utilities/translate.css:
--------------------------------------------------------------------------------
 1 | @responsive {
 2 | 
 3 | 	.translate-x-center {
 4 | 		transform: translateX(-50%);
 5 | 	}
 6 | 
 7 | 	.translate-y-center {
 8 | 		transform: translateY(-50%);
 9 | 	}
10 | 
11 | 	.translate-center {
12 | 		transform: translateX(-50%) translateY(-50%);
13 | 	}
14 | 
15 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/utilities/wordbreak.css:
--------------------------------------------------------------------------------
 1 | @responsive {
 2 | 
 3 | 	.wordbreak-normal {
 4 | 		word-break: normal;
 5 | 	}
 6 | 
 7 | 	.wordbreak-break {
 8 | 		word-break: break-all;
 9 | 	}
10 | 
11 | 	.wordbreak-keep {
12 | 		word-break: keep-all;
13 | 	}
14 | 
15 | 	.wordbreak-word {
16 | 		word-break: break-word;
17 | 	}
18 | 
19 | 	.wordbreak-initial {
20 | 		word-break: initial;
21 | 	}
22 | 
23 | 	.wordbreak-inherit {
24 | 		word-break: inherit;
25 | 	}
26 | 
27 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/css/utilities/wordspacing.css:
--------------------------------------------------------------------------------
 1 | @responsive {
 2 | 
 3 | 	.wordspacing-normal {
 4 | 		word-spacing: normal;
 5 | 	}
 6 | 
 7 | 	.wordspacing-initial {
 8 | 		word-spacing: initial;
 9 | 	}
10 | 
11 | 	.wordspacing-inherit {
12 | 		word-spacing: inherit;
13 | 	}
14 | 
15 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/js/signout-redirect.js:
--------------------------------------------------------------------------------
1 | window.addEventListener("load", function () {
2 |     var a = document.querySelector("a.PostLogoutRedirectUri");
3 |     if (a) {
4 |         window.location = a.href;
5 |     }
6 | });
7 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/src/js/site.js:
--------------------------------------------------------------------------------
 1 | var ids4Site = {
 2 | 
 3 | 	init: function() {
 4 | 		// remove preload class from body
 5 | 		document.body.classList.remove('preload');
 6 | 		// tell css we have js
 7 | 		var html = document.getElementsByTagName('html')[0];
 8 | 		html.classList.remove('no-js');
 9 | 		html.classList.add('js');
10 | 		// setup smooth scrolling links
11 | 		ids4Site.smoothScroll();
12 | 	},
13 | 
14 | 	smoothScroll: function() {
15 | 		var links = document.querySelectorAll('a[href*="#"]:not(.js-no-smooth-scroll)'), click = function (e) {
16 | 			var link = this.href.split('#');
17 | 			if (link.length > 1 && link[1] != '') {
18 | 				var dest = document.getElementById(link[1]);
19 | 				if (dest != null) {
20 | 					dest.scrollIntoView({
21 | 						block: 'start',
22 | 						behavior: 'smooth'
23 | 					});
24 | 					e.preventDefault();
25 | 				}
26 | 			}
27 | 		}, i;
28 | 		for (i = 0; i < links.length; i++) {
29 | 			links[i].onclick = click;
30 | 		}
31 | 	}
32 | 
33 | };
34 | 
35 | window.addEventListener('load', function (e) {
36 | 	ids4Site.init();
37 | });


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/tempkey.jwk:
--------------------------------------------------------------------------------
1 | {"AdditionalData":{},"Alg":"RS256","Crv":null,"D":"AxlShcIn89g8wolFsINv9fLv9CuJIl5mrqF_EXQrFE6hCl3bqRPZNRt-oelxB1bHyK00yYpWa67enrPmix-Mq0H2VkGDCDUZJRGMmleoAP-USa2yzsDFYaA2M1z3S7CAsivKe5c_j0AhxwFhGmCJmHtDG2fn-Om_XZTDDgtaXeCMGam2YT3t4EjEjDknM-D7rVGULLyKovwEjt86BLYpNUJEBzz5ZFWtiB1x4P2jThdAay0jTyv_uFYkGVlEWnIzS-jdQXyZTi1Fg8h7QuHvttzwFB-xezhcKi5IRG_c-T2mEv9Qp_VRHMYl-k542l9vxzvynL4ERLct-6hO4q-QEQ","DP":"ilpFZ871FCzDSvbDSwPDo_QWmOWi6XGLSvXcqcxvfGr56Ap7qua_dh4zqvJrYiWYRXFJVIyb7wQsnPhKsROVjjseJuiUCtaw2hwckctpbXeuAwW9IOyPYanWgPHIqVt4NH_AiSFpOmjVYMGPWynonxJQKAcoN8cr6bzdm47d75E","DQ":"kd0_Ok4jTsLrkLdlXveb93qTmnRK7jqOJeT4f6am27bqW7Ccg9AyT29O287Dx2AsC_n1R5xAAyUqxS7f-MjWxzgyk_r2zivlsnsR7srE1AfsqM7irbf3UwwIuwcCf33YNfLXvacUhjqreTxuiAqkeRQ9LvXV26VghktT-eqg_GE","E":"AQAB","K":null,"KeyId":"93A15444864280A92284131DE259FAF0","KeyOps":[],"Kid":"93A15444864280A92284131DE259FAF0","Kty":"RSA","N":"smjO0QHIQrzAKXNN-JM--Xixheafzs5kXtA1WdSnGbdHj5EKigBabRlOLMTTYAgG8hpiQAYo1mGScuev-m5Oy4jpi2EBp9eRVGAtVpdMHD3oabFueNyL510k1XQsSgnSLbJu26cTVwJui8kWi9R-nWNKcVhifcbH9wiDEI56IemuJBkzgI3HzSE41SmQAOGmTZ8Y40srFgSH2TTthD8f0BjS8hHE-2ChGOE82y4Mh80PlDvEgddCbpAD7LAYlNQyz5BPVtgw9SjVqBFk3oaL4-wZggN6X76FNA-h9JZz0QZblfP_wey2Ov3lDpPfKO79SARB8p783NMXrOY0EshShQ","Oth":null,"P":"83RTtQZ-qRpdCf6dAUknO4X_X9jRuH2ETmv-ybTIxQqg-QTkWaXx2KrAlBJMvZubck4FQ5gvQp6cx9zcIRdjZ5NtaftmtwVxFv3tyMqLrWof6Xr7uqu7XKMK7zPyqMnt6JMTD0XTC6Tv7T3V6T5M_a7i5km911vwY7MtHwRTrp0","Q":"u5pmujG0dur4ru2u4p_6IKDSY0XHiyaLqvhqc04lG9JK49IP5dvmCM9hOAkANjKy34kKE2uSHQEN-nY6rY0XFyAFhviO942iYsEke7FnTmrfba4wAwcUNh1b2mEhaWducf-gbVCnvvdOnTqT96-uByhdGYRGQyLYz8T4VGUtOwk","QI":"xEYBQjjCVx6H4k3mbgU4Hnl1w-4aJPcvrYjNz9GdaeMMEE7YuJaBxer_u1KslSuj2i74Q5Qr8KSO_O5kwWiF7lBsrMRa6rT_XNSJQZVmPjuLseW1rNZXPMC0mCAZ3vvfD5oN4isSskfuHPe_L3PZAmvJjLSucd5GefVOfx6bLbE","Use":null,"X":null,"X5c":[],"X5t":null,"X5tS256":null,"X5u":null,"Y":null,"KeySize":2048,"HasPrivateKey":true,"CryptoProviderFactory":{"CryptoProviderCache":{},"CustomCryptoProvider":null,"CacheSignatureProviders":true,"SignatureProviderObjectPoolCacheSize":40}}


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/css/print.css:
--------------------------------------------------------------------------------
  1 | .no-print, form, .fas, .far, .fab {
  2 | 	display: none !important;
  3 | }
  4 | 
  5 | html, body {
  6 | 	color: #333;
  7 | 	font-family: "Roboto", Helvetica, Arial, 'sans-serif';
  8 | 	font-size: 1rem;
  9 | 	line-height: 1.5;
 10 | 	margin: 0;
 11 | 	padding: 0;
 12 | }
 13 | 
 14 | a {
 15 | 	color: #333;
 16 | 	text-decoration: none;
 17 | }
 18 | 
 19 | h1, h2, h3, h4, h5, h6, p {
 20 | 	margin: 0 0 1rem 0;
 21 | 	padding: 0;
 22 | }
 23 | 
 24 | h1 {
 25 | 	font-size: 2rem;
 26 | }
 27 | 
 28 | h2 {
 29 | 	font-size: 1.5rem;
 30 | }
 31 | 
 32 | h3 {
 33 | 	font-size: 1.25rem;
 34 | }
 35 | 
 36 | h4, h5, h6 {
 37 | 	font-size: 1rem;
 38 | }
 39 | 
 40 | ul, ol {
 41 | 	list-style: none;
 42 | 	margin: 0 0 1rem 0;
 43 | 	padding: 0;
 44 | }
 45 | 
 46 | li {
 47 | 	margin: 0;
 48 | 	padding: 0;
 49 | }
 50 | 
 51 | abbr[title] {
 52 | 	border: none;
 53 | 	text-decoration: none;
 54 | }
 55 | 
 56 | abbr[title]:after {
 57 | 	content: " (" attr(title) ")";
 58 | }
 59 | 
 60 | #header {
 61 | 	border-bottom: 1px solid #ddd;
 62 | 	font-size: 2rem;
 63 | 	font-weight: bold;
 64 | 	margin-bottom: 1rem;
 65 | 	padding-bottom: 1rem;
 66 | 	text-align: center;
 67 | }
 68 | 
 69 | #body {
 70 | 	border-bottom: 1px solid #ddd;
 71 | 	margin-bottom: 1rem;
 72 | 	padding-bottom: 1rem;
 73 | }
 74 | 
 75 | #site-info, #footer {
 76 | 	border-top: 1px solid #ddd;
 77 | 	font-size: .75rem;
 78 | 	margin-top: 2rem;
 79 | 	padding-top: 2rem;
 80 | 	text-align: center;
 81 | }
 82 | 
 83 | .cms ul {
 84 | 	list-style: disc;
 85 | 	padding-left: 2rem;
 86 | }
 87 | 
 88 | .cms ol {
 89 | 	list-style: decimal;
 90 | 	padding-left: 2rem;
 91 | }
 92 | 
 93 | .cms ol li ol {
 94 | 	list-style: lower-alpha;
 95 | }
 96 | 
 97 | .print-block {
 98 | 	border: 1px solid #ddd;
 99 | 	margin: 0 0 1rem 0;
100 | 	padding: 1rem 1rem .5rem 1rem;
101 | }
102 | 
103 | .print-grid {
104 | 	font-size: 0;
105 | 	margin: -15px 0 0 -15px;
106 | 	padding: 0;
107 | 	text-align: left;
108 | }
109 | 
110 | .print-grid--center {
111 | 	text-align: center;
112 | }
113 | 
114 | [class*="print-grid__col"] {
115 | 	box-sizing: border-box;
116 | 	display: inline-block;
117 | 	font-size: 1rem;
118 | 	margin: 0;
119 | 	padding: 15px 0 0 15px;
120 | 	text-align: left;
121 | 	vertical-align: top;
122 | 	width: 100%;
123 | }
124 | 
125 | .print-grid__col-1\/4 {
126 | 	width: 25%;
127 |  }
128 | 
129 | .print-grid__col-1\/3 {
130 | 	width: 33.3333%;
131 | }
132 | 
133 | .print-grid__col-1\/2 {
134 | 	width: 50%;
135 | }
136 | 
137 | .print-grid__col-2\/3 {
138 | 	width: 66.6666%;
139 | }
140 | 
141 | .print-grid__col-3\/4 {
142 | 	width: 75%;
143 | }


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/css/print.min.css:
--------------------------------------------------------------------------------
1 | .no-print,form,.fas,.far,.fab{display:none !important}html,body{color:#333;font-family:"Roboto",Helvetica,Arial,'sans-serif';font-size:1rem;line-height:1.5;margin:0;padding:0}a{color:#333;text-decoration:none}h1,h2,h3,h4,h5,h6,p{margin:0 0 1rem 0;padding:0}h1{font-size:2rem}h2{font-size:1.5rem}
2 | h3{font-size:1.25rem}h4,h5,h6{font-size:1rem}ul,ol{list-style:none;margin:0 0 1rem 0;padding:0}li{margin:0;padding:0}abbr[title]{border:0;text-decoration:none}abbr[title]:after{content:" (" attr(title) ")"}#header{border-bottom:1px solid #ddd;font-size:2rem;font-weight:bold;margin-bottom:1rem;padding-bottom:1rem;text-align:center}
3 | #body{border-bottom:1px solid #ddd;margin-bottom:1rem;padding-bottom:1rem}#site-info,#footer{border-top:1px solid #ddd;font-size:.75rem;margin-top:2rem;padding-top:2rem;text-align:center}.cms ul{list-style:disc;padding-left:2rem}.cms ol{list-style:decimal;padding-left:2rem}.cms ol li ol{list-style:lower-alpha}.print-block{border:1px solid #ddd;margin:0 0 1rem 0;padding:1rem 1rem .5rem 1rem}
4 | .print-grid{font-size:0;margin:-15px 0 0 -15px;padding:0;text-align:left}.print-grid--center{text-align:center}[class*="print-grid__col"]{box-sizing:border-box;display:inline-block;font-size:1rem;margin:0;padding:15px 0 0 15px;text-align:left;vertical-align:top;width:100%}.print-grid__col-1\/4{width:25%}
5 | .print-grid__col-1\/3{width:33.3333%}.print-grid__col-1\/2{width:50%}.print-grid__col-2\/3{width:66.6666%}.print-grid__col-3\/4{width:75%}


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/favicon.ico


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-brands-400.eot:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-brands-400.eot


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-brands-400.ttf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-brands-400.ttf


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-brands-400.woff:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-brands-400.woff


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-brands-400.woff2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-brands-400.woff2


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-regular-400.eot:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-regular-400.eot


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-regular-400.ttf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-regular-400.ttf


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-regular-400.woff:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-regular-400.woff


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-regular-400.woff2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-regular-400.woff2


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-solid-900.eot:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-solid-900.eot


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-solid-900.ttf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-solid-900.ttf


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-solid-900.woff:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-solid-900.woff


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-solid-900.woff2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/fontawesome/webfonts/fa-solid-900.woff2


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/google/webfonts/roboto-400.woff:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/google/webfonts/roboto-400.woff


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/google/webfonts/roboto-400.woff2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/google/webfonts/roboto-400.woff2


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/google/webfonts/roboto-500.woff:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/google/webfonts/roboto-500.woff


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/google/webfonts/roboto-500.woff2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/google/webfonts/roboto-500.woff2


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/google/webfonts/roboto-700.woff:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/google/webfonts/roboto-700.woff


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/google/webfonts/roboto-700.woff2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/fonts/google/webfonts/roboto-700.woff2


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/img/forms/select.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/RockSolidKnowledge/Samples.IdentityServer.AdminUiIntegration/e97ce97d9fe8dd7c89065ce2667271121b53d7ec/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/img/forms/select.png


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/js/signout-redirect.js:
--------------------------------------------------------------------------------
1 | window.addEventListener("load", function () {
2 |     var a = document.querySelector("a.PostLogoutRedirectUri");
3 |     if (a) {
4 |         window.location = a.href;
5 |     }
6 | });
7 | 


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/js/signout-redirect.min.js:
--------------------------------------------------------------------------------
1 | window.addEventListener("load",function(){var o=document.querySelector("a.PostLogoutRedirectUri");o&&(window.location=o.href)});


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/js/site.js:
--------------------------------------------------------------------------------
 1 | var ids4Site = {
 2 | 
 3 | 	init: function() {
 4 | 		// remove preload class from body
 5 | 		document.body.classList.remove('preload');
 6 | 		// tell css we have js
 7 | 		var html = document.getElementsByTagName('html')[0];
 8 | 		html.classList.remove('no-js');
 9 | 		html.classList.add('js');
10 | 		// setup smooth scrolling links
11 | 		ids4Site.smoothScroll();
12 | 	},
13 | 
14 | 	smoothScroll: function() {
15 | 		var links = document.querySelectorAll('a[href*="#"]:not(.js-no-smooth-scroll)'), click = function (e) {
16 | 			var link = this.href.split('#');
17 | 			if (link.length > 1 && link[1] != '') {
18 | 				var dest = document.getElementById(link[1]);
19 | 				if (dest != null) {
20 | 					dest.scrollIntoView({
21 | 						block: 'start',
22 | 						behavior: 'smooth'
23 | 					});
24 | 					e.preventDefault();
25 | 				}
26 | 			}
27 | 		}, i;
28 | 		for (i = 0; i < links.length; i++) {
29 | 			links[i].onclick = click;
30 | 		}
31 | 	}
32 | 
33 | };
34 | 
35 | window.addEventListener('load', function (e) {
36 | 	ids4Site.init();
37 | });


--------------------------------------------------------------------------------
/Rsk.Samples.IdentityServer.AdminUiIntegration/wwwroot/js/site.min.js:
--------------------------------------------------------------------------------
1 | var ids4Site={init:function(){document.body.classList.remove("preload");var t=document.getElementsByTagName("html")[0];t.classList.remove("no-js"),t.classList.add("js"),ids4Site.smoothScroll()},smoothScroll:function(){function t(t){var o=this.href.split("#");if(1<o.length&&""!=o[1]){var e=document.getElementById(o[1]);null!=e&&(e.scrollIntoView({block:"start",behavior:"smooth"}),t.preventDefault())}}var o,e=document.querySelectorAll('a[href*="#"]:not(.js-no-smooth-scroll)');for(o=0;o<e.length;o++)e[o].onclick=t}};window.addEventListener("load",function(t){ids4Site.init()});


--------------------------------------------------------------------------------