4 |
--------------------------------------------------------------------------------
/CLientProjects/SPAClient/Program.cs:
--------------------------------------------------------------------------------
1 | using System;
2 | using System.Collections.Generic;
3 | using System.IO;
4 | using System.Linq;
5 | using System.Threading.Tasks;
6 | using Microsoft.AspNetCore;
7 | using Microsoft.AspNetCore.Hosting;
8 | using Microsoft.Extensions.Configuration;
9 | using Microsoft.Extensions.Logging;
10 |
11 | namespace SPAClient
12 | {
13 | public class Program
14 | {
15 | public static void Main(string[] args)
16 | {
17 | CreateWebHostBuilder(args).Build().Run();
18 | }
19 |
20 | public static IWebHostBuilder CreateWebHostBuilder(string[] args) =>
21 | WebHost.CreateDefaultBuilder(args)
22 | .UseStartup
5 |
7 |
8 | Logout
6 |
9 |
21 |
10 |
20 | Would you like to logout of IdentityServer?
11 | 19 |Authentication cookie
4 | 5 |Claims
6 |-
7 | @foreach (var claim in Model.AuthenticateResult.Principal.Claims)
8 | {
9 |
- @claim.Type 10 |
- @claim.Value 11 | } 12 |
Properties
15 |-
16 | @foreach (var prop in Model.AuthenticateResult.Properties.Items)
17 | {
18 |
- @prop.Key 19 |
- @prop.Value 20 | } 21 |
Clients
26 |-
27 | @foreach (var client in Model.Clients)
28 | {
29 |
- @client 30 | } 31 |
6 |
9 | @using Microsoft.AspNetCore.Authentication
10 |
11 | Welcome
7 |Learn about building Web apps with ASP.NET Core.
8 |Claims
12 | 13 |-
14 | @foreach (var claim in User.Claims)
15 | {
16 |
- @claim.Type 17 |
- @claim.Value 18 | } 19 |
Properties
22 | 23 |-
24 | @foreach (var prop in (await Context.AuthenticateAsync()).Properties.Items)
25 | {
26 |
- @prop.Key 27 |
- @prop.Value 28 | } 29 |
9 |
27 |
28 | @section scripts
29 | {
30 | @if (Model.AutomaticRedirectAfterSignOut)
31 | {
32 |
33 | }
34 | }
35 |
--------------------------------------------------------------------------------
/CLientProjects/WebClient/Views/Shared/Error.cshtml:
--------------------------------------------------------------------------------
1 | @model ErrorViewModel
2 | @{
3 | ViewData["Title"] = "Error";
4 | }
5 |
6 | 10 | Logout 11 | You are now logged out 12 |
13 | 14 | @if (Model.PostLogoutRedirectUri != null) 15 | { 16 |
17 | Click here to return to the
18 | @Model.ClientName application.
19 |
20 | }
21 |
22 | @if (Model.SignOutIframeUrl != null)
23 | {
24 |
25 | }
26 | Error.
7 |An error occurred while processing your request.
8 | 9 | @if (Model.ShowRequestId) 10 | { 11 |
12 | Request ID: @Model.RequestId
13 |
Development Mode
17 |18 | Swapping to Development environment will display more detailed information about the error that occurred. 19 |
20 |21 | The Development environment shouldn't be enabled for deployed applications. 22 | It can result in displaying sensitive information from exceptions to end users. 23 | For local debugging, enable the Development environment by setting the ASPNETCORE_ENVIRONMENT environment variable to Development 24 | and restarting the app. 25 |
26 | -------------------------------------------------------------------------------- /IdentityMicroservice/Quickstart/Account/LoginViewModel.cs: -------------------------------------------------------------------------------- 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved. 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information. 3 | 4 | 5 | using System; 6 | using System.Collections.Generic; 7 | using System.Linq; 8 | 9 | namespace IdentityServer4.Quickstart.UI 10 | { 11 | public class LoginViewModel : LoginInputModel 12 | { 13 | public bool AllowRememberLogin { get; set; } = true; 14 | public bool EnableLocalLogin { get; set; } = true; 15 | 16 | public IEnumerable
10 |
41 |
--------------------------------------------------------------------------------
/CLientProjects/WebClient/Views/Shared/_CookieConsentPartial.cshtml:
--------------------------------------------------------------------------------
1 | @using Microsoft.AspNetCore.Http.Features
2 |
3 | @{
4 | var consentFeature = Context.Features.Get
11 |
13 |
14 | Error
12 |
15 |
40 |
16 |
39 |
17 | Sorry, there was an error
18 |
19 | @if (error != null)
20 | {
21 |
22 |
23 | : @error
24 |
25 |
26 |
27 | if (errorDescription != null)
28 | {
29 |
33 |
34 | @if (request_id != null)
35 | {
36 | @errorDescription
30 | }
31 | }
32 | Request Id: @request_id
37 | }
38 |
6 |
40 |
--------------------------------------------------------------------------------
/IdentityMicroservice/tempkey.rsa:
--------------------------------------------------------------------------------
1 | {"KeyId":"YizMIbK0UXTkmD2p4Yj9Dg","Parameters":{"D":"Ftzkz2d4hxf+NIPLVV0nsahHSQKdJidxt/6IIgNAwf1aTTcyHTmDYACXgC3S9Coi1fhiZrMtG70HyBAY17CjuLSxqTz4u2MRuzM1fyxFgBEqFMcu/5+bG/MFut8Is+wlBhLAByxGtC6exFe2cReuwX4w9PEo3Kb5MSWtisLwd66pCoflBMpaCyguzgcz/8Ki8wgvl97whuAMGY8vmxaOUSLF8M4u+mczOvmSjRqWdkJFupgJuY1BF8X1+iszhBV3m/L9KrHLP6rtY/8jcuONo2bbuksDffbfd2iAoGpWzDeab9wp+31jSVLMgM+WZ/VCv/Ed879qeX0K/LWAAkLOeQ==","DP":"lkWY7tE9rWei0YptI3S31mgeIa2TFw3oHGNjnIp2nGEcTlm7wZSdoArP7NhZVycoRn1TTH+Oo6Umxik1x6Ljj2PFdH3dTasQxVuT2DQMGmAsF3pyTWa9spJMpoTWianl/0STQLanAxibxR6DA4gtCZMR4xtMn/gQWNLF/PO4jI0=","DQ":"nTf1EUb9VthtTawq2ONoCg9l8ou/406sb271u2KilC/GPhzobNi7PxbybX9JtysThvlE+NSKmZ+XEKr+NzEaE6EZrgr2gnJfTuzvNOAhC05a8Tnoc1ZHUvcwJhhrNwIcWCpljgLxqKIcDyAHzoFddbFdVG7MoCCRiXwfq+TcWMU=","Exponent":"AQAB","InverseQ":"pcHs7zX5daYQfO7isgIGIT7Hn/Ax5Pd5AQpy/+ImZn8sPPTYHwdzEC/cxcijauYjFh6h6A3up1eJa5LgqWI5q+Mf0Fo3dvqrmWrxrQ9Mw4O5GlfqBarcdSCTrwbKpJTQDcsNUyXANFCaH12UGwPtS0/mWE6P56fktTSXYAGROzI=","Modulus":"tXGjAi3BFkY5jVxwIf3M/7BrrDv1m5PeAZ6pxjJOaDnq4B29TO5ZNCQxYFPr+Ta3JxkfKGlFWEsBdbwzFPCq6kAuj20+chMhfRWJKCtMFchj4Yjzv7lndwuFq3R8VzLuhco/rA+O7OIFbIQF+h0isdjEg8Ev+4fmdaRSmSf3ZrbgebHUJBF9pR+G87bZJPYwr2loCMdnNEhxGQkEzOdRBhIMiRB2pC8PAifRw6BwhrF1x5wgGoAS1jKsLEemsl/j+z1gdTZAcMOkvq0kc/RZ7/9EBPmHAEBlltCX2fIi1U4bramPlORH40zn4Swl9OvpbS1FgfZbit6gNN+HiiROvQ==","P":"xyh4IMVeU8peNK/ilX/GE2com152aQ5GEPpQ0nbGhQExuhnf+3I6+quFvU04ZSOv2UOW0FsWzjUA9ZghIwfavN9L4pIaS+VcmNiReJda05f0xkpJvVjXkyjsxu073moK9eB5n514jzaMfZV1iaFOZfyEr6D9xSbsAt+zNs/fXa8=","Q":"6TrgT1eG/kiNDl4t2qYJR7NqsUJjFacDtZGg6QsaPkulotytqrs3jB4wE2M2hQFlD3/vmfmZbCd0XxeOEJ2IE4j7z6zz93mqOOHwCkmgo3RcHFpQn6Y4WvITbnB+vT2eFQQZ3r23xZxhf3M0bxSSNRifOgd+MQ24UcMF2lBowVM="}}
--------------------------------------------------------------------------------
/CLientProjects/WebClient/wwwroot/lib/jquery/LICENSE.txt:
--------------------------------------------------------------------------------
1 | Copyright JS Foundation and other contributors, https://js.foundation/
2 |
3 | This software consists of voluntary contributions made by many
4 | individuals. For exact contribution history, see the revision history
5 | available at https://github.com/jquery/jquery
6 |
7 | The following license applies to all parts of this software except as
8 | documented below:
9 |
10 | ====
11 |
12 | Permission is hereby granted, free of charge, to any person obtaining
13 | a copy of this software and associated documentation files (the
14 | "Software"), to deal in the Software without restriction, including
15 | without limitation the rights to use, copy, modify, merge, publish,
16 | distribute, sublicense, and/or sell copies of the Software, and to
17 | permit persons to whom the Software is furnished to do so, subject to
18 | the following conditions:
19 |
20 | The above copyright notice and this permission notice shall be
21 | included in all copies or substantial portions of the Software.
22 |
23 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
24 | EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
25 | MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
26 | NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
27 | LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
28 | OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
29 | WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
30 |
31 | ====
32 |
33 | All files located in the node_modules and external directories are
34 | externally maintained libraries used by this software which have their
35 | own licenses; we recommend you read them, as their terms may differ from
36 | the terms above.
37 |
--------------------------------------------------------------------------------
/IdentityMicroservice/wwwroot/css/site.css:
--------------------------------------------------------------------------------
1 | body {
2 | margin-top: 65px;
3 | }
4 | .navbar-header {
5 | position: relative;
6 | top: -4px;
7 | }
8 | .navbar-brand > .icon-banner {
9 | position: relative;
10 | top: -2px;
11 | display: inline;
12 | }
13 | .icon {
14 | position: relative;
15 | top: -10px;
16 | }
17 | .logged-out iframe {
18 | display: none;
19 | width: 0;
20 | height: 0;
21 | }
22 | .page-consent .client-logo {
23 | float: left;
24 | }
25 | .page-consent .client-logo img {
26 | width: 80px;
27 | height: 80px;
28 | }
29 | .page-consent .consent-buttons {
30 | margin-top: 25px;
31 | }
32 | .page-consent .consent-form .consent-scopecheck {
33 | display: inline-block;
34 | margin-right: 5px;
35 | }
36 | .page-consent .consent-form .consent-description {
37 | margin-left: 25px;
38 | }
39 | .page-consent .consent-form .consent-description label {
40 | font-weight: normal;
41 | }
42 | .page-consent .consent-form .consent-remember {
43 | padding-left: 16px;
44 | }
45 | .grants .page-header {
46 | margin-bottom: 10px;
47 | }
48 | .grants .grant {
49 | margin-top: 20px;
50 | padding-bottom: 20px;
51 | border-bottom: 1px solid lightgray;
52 | }
53 | .grants .grant img {
54 | width: 100px;
55 | height: 100px;
56 | }
57 | .grants .grant .clientname {
58 | font-size: 140%;
59 | font-weight: bold;
60 | }
61 | .grants .grant .granttype {
62 | font-size: 120%;
63 | font-weight: bold;
64 | }
65 | .grants .grant .created {
66 | font-size: 120%;
67 | font-weight: bold;
68 | }
69 | .grants .grant .expires {
70 | font-size: 120%;
71 | font-weight: bold;
72 | }
73 | .grants .grant li {
74 | list-style-type: none;
75 | display: inline;
76 | }
77 | .grants .grant li:after {
78 | content: ', ';
79 | }
80 | .grants .grant li:last-child:after {
81 | content: '';
82 | }
--------------------------------------------------------------------------------
/CLientProjects/SPAClient/wwwroot/app.js:
--------------------------------------------------------------------------------
1 |
2 | $(document).ready(function () {
3 | function log() {
4 | document.getElementById('results').innerText = '';
5 |
6 | Array.prototype.forEach.call(arguments, function (msg) {
7 | if (msg instanceof Error) {
8 | msg = "Error: " + msg.message;
9 | }
10 | else if (typeof msg !== 'string') {
11 | msg = JSON.stringify(msg, null, 2);
12 | }
13 | document.getElementById('results').innerHTML += msg + '\r\n';
14 | });
15 | }
16 |
17 | var config = {
18 | authority: "https://localhost:5000",
19 | client_id: "spaclient",
20 | redirect_uri: "https://localhost:5003/callback.html",
21 | response_type: "code",
22 | scope: "openid profile identity.api test.api",
23 | post_logout_redirect_uri: "https://localhost:5003/index.html",
24 | };
25 |
26 | var mgr = new Oidc.UserManager(config);
27 |
28 | mgr.getUser().then(function (user) {
29 | if (user) {
30 | log("User logged in", user.profile);
31 | }
32 | else {
33 | log("User not logged in");
34 | }
35 | });
36 |
37 | $('#login').click(function () {
38 | mgr.signinRedirect();
39 | });
40 | $('#api').click(function () {
41 | mgr.getUser().then(function (user) {
42 | var url = "https://localhost:5001/api/test";
43 |
44 | var xhr = new XMLHttpRequest();
45 | xhr.open("GET", url);
46 | xhr.onload = function () {
47 | log(xhr.status, JSON.parse(xhr.responseText));
48 | };
49 | xhr.setRequestHeader("Authorization", "Bearer " + user.access_token);
50 | xhr.send();
51 | });
52 | });
53 |
54 | $('#logout').click(function () {
55 | mgr.signoutRedirect();
56 | });
57 | });
58 |
--------------------------------------------------------------------------------
/IdentityMicroservice/Program.cs:
--------------------------------------------------------------------------------
1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
3 |
4 |
5 | using Microsoft.AspNetCore;
6 | using Microsoft.AspNetCore.Hosting;
7 | using Microsoft.Extensions.Configuration;
8 | using Microsoft.Extensions.DependencyInjection;
9 | using Serilog;
10 | using Serilog.Events;
11 | using Serilog.Sinks.SystemConsole.Themes;
12 | using System.Linq;
13 |
14 | namespace IdentityMicroservice
15 | {
16 | public class Program
17 | {
18 | public static void Main(string[] args)
19 | {
20 | var seed = args.Any(x => x == "/seed");
21 | if (seed) args = args.Except(new[] { "/seed" }).ToArray();
22 |
23 | var host = CreateWebHostBuilder(args).Build();
24 |
25 | if (seed)
26 | {
27 | var config = host.Services.GetRequiredService
7 |
15 |
16 |
8 |
9 |
13 |
14 |
9 | 
10 | Welcome to IdentityServer4
11 | (version @version)
12 |
13 |
17 |
30 |
18 |
24 | 19 | IdentityServer publishes a 20 | discovery document 21 | where you can find metadata and links to all the endpoints, key material, etc. 22 |
23 |
25 |
29 | 26 | Click here to manage your stored grants. 27 |
28 |
31 |
39 |
32 |
38 | 33 | Here are links to the 34 | source code repository, 35 | and ready to use samples. 36 |
37 |
23 |
52 |
53 |
24 |
51 |
25 |
31 |
32 |
33 | 
34 | IdentityServer4
35 |
36 |
37 |
38 |
39 | @if (!string.IsNullOrWhiteSpace(name))
40 | {
41 |
49 | }
50 |
34 | IdentityServer4
35 |
36 |
37 |
54 | @RenderBody()
55 |
56 |
57 |
58 |
59 | @RenderSection("scripts", required: false)
60 |
61 |
62 |
--------------------------------------------------------------------------------
/IdentityMicroservice/Quickstart/SecurityHeadersAttribute.cs:
--------------------------------------------------------------------------------
1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
3 |
4 |
5 | using Microsoft.AspNetCore.Mvc;
6 | using Microsoft.AspNetCore.Mvc.Filters;
7 |
8 | namespace IdentityServer4.Quickstart.UI
9 | {
10 | public class SecurityHeadersAttribute : ActionFilterAttribute
11 | {
12 | public override void OnResultExecuting(ResultExecutingContext context)
13 | {
14 | var result = context.Result;
15 | if (result is ViewResult)
16 | {
17 | // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
18 | if (!context.HttpContext.Response.Headers.ContainsKey("X-Content-Type-Options"))
19 | {
20 | context.HttpContext.Response.Headers.Add("X-Content-Type-Options", "nosniff");
21 | }
22 |
23 | // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
24 | if (!context.HttpContext.Response.Headers.ContainsKey("X-Frame-Options"))
25 | {
26 | context.HttpContext.Response.Headers.Add("X-Frame-Options", "SAMEORIGIN");
27 | }
28 |
29 | // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
30 | var csp = "default-src 'self'; object-src 'none'; frame-ancestors 'none'; sandbox allow-forms allow-same-origin allow-scripts; base-uri 'self';";
31 | // also consider adding upgrade-insecure-requests once you have HTTPS in place for production
32 | //csp += "upgrade-insecure-requests;";
33 | // also an example if you need client images to be displayed from twitter
34 | // csp += "img-src 'self' https://pbs.twimg.com;";
35 |
36 | // once for standards compliant browsers
37 | if (!context.HttpContext.Response.Headers.ContainsKey("Content-Security-Policy"))
38 | {
39 | context.HttpContext.Response.Headers.Add("Content-Security-Policy", csp);
40 | }
41 | // and once again for IE
42 | if (!context.HttpContext.Response.Headers.ContainsKey("X-Content-Security-Policy"))
43 | {
44 | context.HttpContext.Response.Headers.Add("X-Content-Security-Policy", csp);
45 | }
46 |
47 | // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
48 | var referrer_policy = "no-referrer";
49 | if (!context.HttpContext.Response.Headers.ContainsKey("Referrer-Policy"))
50 | {
51 | context.HttpContext.Response.Headers.Add("Referrer-Policy", referrer_policy);
52 | }
53 | }
54 | }
55 | }
56 | }
57 |
--------------------------------------------------------------------------------
/IdentityMicroservice/Views/Grants/Index.cshtml:
--------------------------------------------------------------------------------
1 | @model GrantsViewModel
2 |
3 |
4 |
--------------------------------------------------------------------------------
/ApiResourceProjects/TestApiResource/Startup.cs:
--------------------------------------------------------------------------------
1 | using System;
2 | using System.Collections.Generic;
3 | using System.Linq;
4 | using System.Threading.Tasks;
5 | using Microsoft.AspNetCore.Builder;
6 | using Microsoft.AspNetCore.Hosting;
7 | using Microsoft.AspNetCore.HttpsPolicy;
8 | using Microsoft.AspNetCore.Mvc;
9 | using Microsoft.Extensions.Configuration;
10 | using Microsoft.Extensions.DependencyInjection;
11 | using Microsoft.Extensions.Logging;
12 | using Microsoft.Extensions.Options;
13 |
14 | namespace TestApiResource
15 | {
16 | public class Startup
17 | {
18 | public Startup(IConfiguration configuration)
19 | {
20 | Configuration = configuration;
21 | }
22 |
23 | public IConfiguration Configuration { get; }
24 |
25 | // This method gets called by the runtime. Use this method to add services to the container.
26 | public void ConfigureServices(IServiceCollection services)
27 | {
28 |
29 |
30 | //services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_2);
31 | services.AddControllers();
32 |
33 | services.AddAuthentication("Bearer")
34 | .AddJwtBearer("Bearer", options =>
35 | {
36 | options.Authority = "https://localhost:5000";
37 | options.RequireHttpsMetadata = true;
38 |
39 | options.Audience = "test.api";
40 | });
41 |
42 | services.AddCors(options =>
43 | {
44 | // this defines a CORS policy called "default"
45 | options.AddPolicy("default", policy =>
46 | {
47 | policy.WithOrigins("https://localhost:5003")
48 | .AllowAnyHeader()
49 | .AllowAnyMethod();
50 | });
51 | });
52 |
53 | }
54 |
55 | // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
56 | public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
57 | {
58 | app.UseCors("default");
59 |
60 | if (env.EnvironmentName == "Development")
61 | {
62 | app.UseDeveloperExceptionPage();
63 | }
64 | else
65 | {
66 | // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
67 | app.UseHsts();
68 | }
69 |
70 | app.UseAuthentication();
71 |
72 | app.UseHttpsRedirection();
73 |
74 |
75 | // Added after upgrading to .NET Core 3.1
76 | app.UseRouting();
77 | app.UseAuthorization();
78 | app.UseEndpoints(endpoints =>
79 | {
80 | endpoints.MapControllerRoute(
81 | name: "default",
82 | pattern: "{controller=Home}/{action=Index}/{id?}");
83 | });
84 |
85 | // Removed after upgrading to .NET Core 3.1
86 | //app.UseMvc();
87 | }
88 | }
89 | }
90 |
--------------------------------------------------------------------------------
/IdentityMicroservice/Config.cs:
--------------------------------------------------------------------------------
1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
3 |
4 |
5 | using IdentityServer4.Models;
6 | using System.Collections.Generic;
7 |
8 | namespace IdentityMicroservice
9 | {
10 | public static class Config
11 | {
12 | public static IEnumerable
5 |
12 |
13 | @if (Model.Grants.Any() == false)
14 | {
15 |
6 |
11 | 7 | Client Application Access 8 |
9 |Below is the list of applications you have given access to and the names of the resources they have access to.
10 |
16 |
22 | }
23 | else
24 | {
25 | foreach (var grant in Model.Grants)
26 | {
27 |
17 |
21 |
18 | You have not given access to any applications
19 |
20 |
28 |
77 | }
78 | }
79 |
29 | @if (grant.ClientLogoUrl != null)
30 | {
31 | 
32 | }
33 |
34 |
35 |
70 | @grant.ClientName
36 |
37 | Created: @grant.Created.ToString("yyyy-MM-dd")
38 |
39 | @if (grant.Expires.HasValue)
40 | {
41 |
42 | Expires: @grant.Expires.Value.ToString("yyyy-MM-dd")
43 |
44 | }
45 | @if (grant.IdentityGrantNames.Any())
46 | {
47 |
48 |
56 | }
57 | @if (grant.ApiGrantNames.Any())
58 | {
59 | Identity Grants
49 | -
50 | @foreach (var name in grant.IdentityGrantNames)
51 | {
52 |
- @name 53 | } 54 |
60 |
68 | }
69 | API Grants
61 | -
62 | @foreach (var name in grant.ApiGrantNames)
63 | {
64 |
- @name 65 | } 66 |
71 |
75 |
76 |
4 |
--------------------------------------------------------------------------------
/IdentityMicroservice/Quickstart/Grants/GrantsController.cs:
--------------------------------------------------------------------------------
1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
3 |
4 |
5 | using IdentityServer4.Services;
6 | using IdentityServer4.Stores;
7 | using Microsoft.AspNetCore.Mvc;
8 | using System.Collections.Generic;
9 | using System.Linq;
10 | using System.Threading.Tasks;
11 | using Microsoft.AspNetCore.Authorization;
12 | using IdentityServer4.Events;
13 | using IdentityServer4.Extensions;
14 |
15 | namespace IdentityServer4.Quickstart.UI
16 | {
17 | ///
5 |
16 |
17 |
6 | @if (Model.ClientLogoUrl != null)
7 | {
8 | 
9 | }
10 |
15 | 11 | @Model.ClientName 12 | is requesting your permission 13 |
14 |
18 |
82 |
19 |
81 |
4 |
--------------------------------------------------------------------------------
/CLientProjects/WebClient/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.min.css:
--------------------------------------------------------------------------------
1 | /*!
2 | * Bootstrap Reboot v4.3.1 (https://getbootstrap.com/)
3 | * Copyright 2011-2019 The Bootstrap Authors
4 | * Copyright 2011-2019 Twitter, Inc.
5 | * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
6 | * Forked from Normalize.css, licensed MIT (https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
7 | */*,::after,::before{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}article,aside,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}[tabindex="-1"]:focus{outline:0!important}hr{box-sizing:content-box;height:0;overflow:visible}h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem}p{margin-top:0;margin-bottom:1rem}abbr[data-original-title],abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#007bff;text-decoration:none;background-color:transparent}a:hover{color:#0056b3;text-decoration:underline}a:not([href]):not([tabindex]){color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus,a:not([href]):not([tabindex]):hover{color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus{outline:0}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;font-size:1em}pre{margin-top:0;margin-bottom:1rem;overflow:auto}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}svg{overflow:hidden;vertical-align:middle}table{border-collapse:collapse}caption{padding-top:.75rem;padding-bottom:.75rem;color:#6c757d;text-align:left;caption-side:bottom}th{text-align:inherit}label{display:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=reset]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor:pointer}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{padding:0;border-style:none}input[type=checkbox],input[type=radio]{box-sizing:border-box;padding:0}input[type=date],input[type=datetime-local],input[type=month],input[type=time]{-webkit-appearance:listbox}textarea{overflow:auto;resize:vertical}fieldset{min-width:0;padding:0;margin:0;border:0}legend{display:block;width:100%;max-width:100%;padding:0;margin-bottom:.5rem;font-size:1.5rem;line-height:inherit;color:inherit;white-space:normal}progress{vertical-align:baseline}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{outline-offset:-2px;-webkit-appearance:none}[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}output{display:inline-block}summary{display:list-item;cursor:pointer}template{display:none}[hidden]{display:none!important}
8 | /*# sourceMappingURL=bootstrap-reboot.min.css.map */
--------------------------------------------------------------------------------
/IdentityMicroservice/Views/Account/Login.cshtml:
--------------------------------------------------------------------------------
1 | @model LoginViewModel
2 |
3 |
5 |
16 |
17 | @if (Model.ConfirmUserCode)
18 | {
19 |
6 | @if (Model.ClientLogoUrl != null)
7 | {
8 |
9 | }
10 |
15 | 11 | @Model.ClientName 12 | is requesting your permission 13 |
14 |
20 |
26 | }
27 |
28 |
21 |
25 | 22 | Please confirm that the authorization request quotes the code: "@Model.UserCode". 23 |
24 |
29 |
93 |
30 |
92 |
4 |
--------------------------------------------------------------------------------
/CLientProjects/WebClient/Startup.cs:
--------------------------------------------------------------------------------
1 | using System;
2 | using System.Collections.Generic;
3 | using System.IdentityModel.Tokens.Jwt;
4 | using System.Linq;
5 | using System.Threading.Tasks;
6 | using Microsoft.AspNetCore.Builder;
7 | using Microsoft.AspNetCore.Hosting;
8 | using Microsoft.AspNetCore.Http;
9 | using Microsoft.AspNetCore.HttpsPolicy;
10 | using Microsoft.AspNetCore.Mvc;
11 | using Microsoft.Extensions.Configuration;
12 | using Microsoft.Extensions.DependencyInjection;
13 |
14 | namespace WebClient
15 | {
16 | public class Startup
17 | {
18 | public Startup(IConfiguration configuration)
19 | {
20 | Configuration = configuration;
21 | }
22 |
23 | public IConfiguration Configuration { get; }
24 |
25 | // This method gets called by the runtime. Use this method to add services to the container.
26 | public void ConfigureServices(IServiceCollection services)
27 | {
28 | services.Configure
5 |
7 |
8 | Login
6 |
11 |
12 | @if (Model.EnableLocalLogin)
13 | {
14 |
93 |
15 |
56 | }
57 |
58 | @if (Model.VisibleExternalProviders.Any())
59 | {
60 |
16 |
55 |
17 |
19 | Local Login
18 |
20 |
21 |
53 |
54 |
61 |
83 | }
84 |
85 | @if (!Model.EnableLocalLogin && !Model.VisibleExternalProviders.Any())
86 | {
87 |
62 |
82 |
63 |
65 | External Login
64 |
66 |
81 | -
67 | @foreach (var provider in Model.VisibleExternalProviders)
68 | {
69 |
- 70 | 75 | @provider.DisplayName 76 | 77 | 78 | } 79 |
88 | Invalid login request
89 | There are no login schemes configured for this client.
90 |
91 | }
92 |
51 |
53 | @RenderBody()
54 |
55 |
56 |
57 |
62 |
63 |