├── .gitignore
├── Authorization
    ├── AspNetCoreSecurity
    │   ├── AspNetCoreSecurity.csproj
    │   ├── Controllers
    │   │   ├── AccountController.cs
    │   │   ├── CustomerController.cs
    │   │   ├── HomeController.cs
    │   │   └── TestController.cs
    │   ├── Policies
    │   │   ├── Models
    │   │   │   └── Customer.cs
    │   │   ├── Requirements
    │   │   │   ├── JobLevelRequirement.cs
    │   │   │   └── JobLevelRequirementHandler.cs
    │   │   ├── Resources
    │   │   │   ├── CustomerAuthorizationHandler.cs
    │   │   │   └── CustomerOperations.cs
    │   │   └── Services
    │   │   │   ├── OrganizationService.cs
    │   │   │   └── PermissionService.cs
    │   ├── Program.cs
    │   ├── Properties
    │   │   └── launchSettings.json
    │   ├── Startup.cs
    │   ├── Views
    │   │   ├── Account
    │   │   │   ├── AccessDenied.cshtml
    │   │   │   └── Login.cshtml
    │   │   ├── Home
    │   │   │   ├── Index.cshtml
    │   │   │   └── Index2.cshtml
    │   │   ├── Shared
    │   │   │   ├── Success.cshtml
    │   │   │   ├── _Layout.cshtml
    │   │   │   └── _ValidationScriptsPartial.cshtml
    │   │   ├── _ViewImports.cshtml
    │   │   └── _ViewStart.cshtml
    │   ├── appsettings.Development.json
    │   ├── appsettings.json
    │   └── wwwroot
    │   │   ├── css
    │   │       └── site.css
    │   │   ├── favicon.ico
    │   │   ├── js
    │   │       └── site.js
    │   │   └── lib
    │   │       ├── bootstrap
    │   │           ├── LICENSE
    │   │           └── dist
    │   │           │   ├── css
    │   │           │       ├── bootstrap-grid.css
    │   │           │       ├── bootstrap-grid.css.map
    │   │           │       ├── bootstrap-grid.min.css
    │   │           │       ├── bootstrap-grid.min.css.map
    │   │           │       ├── bootstrap-reboot.css
    │   │           │       ├── bootstrap-reboot.css.map
    │   │           │       ├── bootstrap-reboot.min.css
    │   │           │       ├── bootstrap-reboot.min.css.map
    │   │           │       ├── bootstrap.css
    │   │           │       ├── bootstrap.css.map
    │   │           │       ├── bootstrap.min.css
    │   │           │       └── bootstrap.min.css.map
    │   │           │   └── js
    │   │           │       ├── bootstrap.bundle.js
    │   │           │       ├── bootstrap.bundle.js.map
    │   │           │       ├── bootstrap.bundle.min.js
    │   │           │       ├── bootstrap.bundle.min.js.map
    │   │           │       ├── bootstrap.js
    │   │           │       ├── bootstrap.js.map
    │   │           │       ├── bootstrap.min.js
    │   │           │       └── bootstrap.min.js.map
    │   │       ├── jquery-validation-unobtrusive
    │   │           ├── LICENSE.txt
    │   │           ├── jquery.validate.unobtrusive.js
    │   │           └── jquery.validate.unobtrusive.min.js
    │   │       ├── jquery-validation
    │   │           ├── LICENSE.md
    │   │           └── dist
    │   │           │   ├── additional-methods.js
    │   │           │   ├── additional-methods.min.js
    │   │           │   ├── jquery.validate.js
    │   │           │   └── jquery.validate.min.js
    │   │       └── jquery
    │   │           ├── LICENSE.txt
    │   │           └── dist
    │   │               ├── jquery.js
    │   │               ├── jquery.min.js
    │   │               └── jquery.min.map
    └── Authorization.sln
├── BFF
    ├── BFF.sln
    ├── readme.md
    └── src
    │   ├── Api
    │       ├── CrossDomainApi.csproj
    │       ├── Program.cs
    │       ├── Properties
    │       │   └── launchSettings.json
    │       ├── Startup.cs
    │       ├── TestController.cs
    │       ├── appsettings.Development.json
    │       └── appsettings.json
    │   └── Host
    │       ├── Controller
    │           └── UserController.cs
    │       ├── Host.csproj
    │       ├── Internal
    │           └── StrictSameSiteExternalAuthenticationMiddleware.cs
    │       ├── Program.cs
    │       ├── Properties
    │           └── launchSettings.json
    │       ├── Startup.cs
    │       ├── appsettings.Development.json
    │       ├── appsettings.json
    │       └── wwwroot
    │           └── index.html
├── BlazorServer
    ├── BlazorServer.sln
    └── BlazorServer
    │   ├── App.razor
    │   ├── BlazorServer.csproj
    │   ├── Pages
    │       ├── Error.razor
    │       ├── Index.razor
    │       ├── Login.cshtml
    │       ├── Login.cshtml.cs
    │       ├── Logout.cshtml
    │       ├── Logout.cshtml.cs
    │       ├── Secure.razor
    │       └── _Host.cshtml
    │   ├── Program.cs
    │   ├── Properties
    │       └── launchSettings.json
    │   ├── Shared
    │       ├── LoginDisplay.razor
    │       ├── MainLayout.razor
    │       └── NavMenu.razor
    │   ├── Startup.cs
    │   ├── _Imports.razor
    │   ├── appsettings.Development.json
    │   ├── appsettings.json
    │   └── wwwroot
    │       ├── css
    │           ├── bootstrap
    │           │   ├── bootstrap.min.css
    │           │   └── bootstrap.min.css.map
    │           ├── open-iconic
    │           │   ├── FONT-LICENSE
    │           │   ├── ICON-LICENSE
    │           │   ├── README.md
    │           │   └── font
    │           │   │   ├── css
    │           │   │       └── open-iconic-bootstrap.min.css
    │           │   │   └── fonts
    │           │   │       ├── open-iconic.eot
    │           │   │       ├── open-iconic.otf
    │           │   │       ├── open-iconic.svg
    │           │   │       ├── open-iconic.ttf
    │           │   │       └── open-iconic.woff
    │           └── site.css
    │       └── favicon.ico
├── ClientCredentialsFlow
    ├── ClientCredentialsFlow.sln
    └── src
    │   ├── ClientCredentialsFlow.csproj
    │   └── Program.cs
├── DataProtection
    ├── AspNetCoreSecurity
    │   ├── AspNetCoreSecurity.csproj
    │   ├── Controllers
    │   │   └── HomeController.cs
    │   ├── Program.cs
    │   ├── Properties
    │   │   └── launchSettings.json
    │   ├── Startup.cs
    │   ├── Views
    │   │   ├── Home
    │   │   │   └── Index.cshtml
    │   │   ├── Shared
    │   │   │   ├── _Layout.cshtml
    │   │   │   └── _ValidationScriptsPartial.cshtml
    │   │   ├── _ViewImports.cshtml
    │   │   └── _ViewStart.cshtml
    │   ├── appsettings.Development.json
    │   ├── appsettings.json
    │   └── wwwroot
    │   │   ├── css
    │   │       └── site.css
    │   │   ├── favicon.ico
    │   │   ├── js
    │   │       └── site.js
    │   │   └── lib
    │   │       ├── bootstrap
    │   │           ├── LICENSE
    │   │           └── dist
    │   │           │   ├── css
    │   │           │       ├── bootstrap-grid.css
    │   │           │       ├── bootstrap-grid.css.map
    │   │           │       ├── bootstrap-grid.min.css
    │   │           │       ├── bootstrap-grid.min.css.map
    │   │           │       ├── bootstrap-reboot.css
    │   │           │       ├── bootstrap-reboot.css.map
    │   │           │       ├── bootstrap-reboot.min.css
    │   │           │       ├── bootstrap-reboot.min.css.map
    │   │           │       ├── bootstrap.css
    │   │           │       ├── bootstrap.css.map
    │   │           │       ├── bootstrap.min.css
    │   │           │       └── bootstrap.min.css.map
    │   │           │   └── js
    │   │           │       ├── bootstrap.bundle.js
    │   │           │       ├── bootstrap.bundle.js.map
    │   │           │       ├── bootstrap.bundle.min.js
    │   │           │       ├── bootstrap.bundle.min.js.map
    │   │           │       ├── bootstrap.js
    │   │           │       ├── bootstrap.js.map
    │   │           │       ├── bootstrap.min.js
    │   │           │       └── bootstrap.min.js.map
    │   │       ├── jquery-validation-unobtrusive
    │   │           ├── LICENSE.txt
    │   │           ├── jquery.validate.unobtrusive.js
    │   │           └── jquery.validate.unobtrusive.min.js
    │   │       ├── jquery-validation
    │   │           ├── LICENSE.md
    │   │           └── dist
    │   │           │   ├── additional-methods.js
    │   │           │   ├── additional-methods.min.js
    │   │           │   ├── jquery.validate.js
    │   │           │   └── jquery.validate.min.js
    │   │       └── jquery
    │   │           ├── LICENSE.txt
    │   │           └── dist
    │   │               ├── jquery.js
    │   │               ├── jquery.min.js
    │   │               └── jquery.min.map
    └── DataProtection.sln
├── DeviceFlow
    ├── Client
    │   ├── Client.csproj
    │   └── Program.cs
    └── DeviceFlow.sln
├── Directory.Build.targets
├── External Authentication with Callback
    ├── AspNetCoreSecurity
    │   ├── AspNetCoreSecurity.csproj
    │   ├── Controllers
    │   │   ├── AccountController.cs
    │   │   └── HomeController.cs
    │   ├── Program.cs
    │   ├── Properties
    │   │   └── launchSettings.json
    │   ├── Startup.cs
    │   ├── Views
    │   │   ├── Account
    │   │   │   ├── AccessDenied.cshtml
    │   │   │   └── Login.cshtml
    │   │   ├── Home
    │   │   │   ├── Index.cshtml
    │   │   │   └── Secure.cshtml
    │   │   ├── Shared
    │   │   │   ├── _Layout.cshtml
    │   │   │   └── _ValidationScriptsPartial.cshtml
    │   │   ├── _ViewImports.cshtml
    │   │   └── _ViewStart.cshtml
    │   ├── appsettings.Development.json
    │   ├── appsettings.json
    │   └── wwwroot
    │   │   ├── css
    │   │       └── site.css
    │   │   ├── favicon.ico
    │   │   ├── js
    │   │       └── site.js
    │   │   └── lib
    │   │       ├── bootstrap
    │   │           ├── LICENSE
    │   │           └── dist
    │   │           │   ├── css
    │   │           │       ├── bootstrap-grid.css
    │   │           │       ├── bootstrap-grid.css.map
    │   │           │       ├── bootstrap-grid.min.css
    │   │           │       ├── bootstrap-grid.min.css.map
    │   │           │       ├── bootstrap-reboot.css
    │   │           │       ├── bootstrap-reboot.css.map
    │   │           │       ├── bootstrap-reboot.min.css
    │   │           │       ├── bootstrap-reboot.min.css.map
    │   │           │       ├── bootstrap.css
    │   │           │       ├── bootstrap.css.map
    │   │           │       ├── bootstrap.min.css
    │   │           │       └── bootstrap.min.css.map
    │   │           │   └── js
    │   │           │       ├── bootstrap.bundle.js
    │   │           │       ├── bootstrap.bundle.js.map
    │   │           │       ├── bootstrap.bundle.min.js
    │   │           │       ├── bootstrap.bundle.min.js.map
    │   │           │       ├── bootstrap.js
    │   │           │       ├── bootstrap.js.map
    │   │           │       ├── bootstrap.min.js
    │   │           │       └── bootstrap.min.js.map
    │   │       ├── jquery-validation-unobtrusive
    │   │           ├── LICENSE.txt
    │   │           ├── jquery.validate.unobtrusive.js
    │   │           └── jquery.validate.unobtrusive.min.js
    │   │       ├── jquery-validation
    │   │           ├── LICENSE.md
    │   │           └── dist
    │   │           │   ├── additional-methods.js
    │   │           │   ├── additional-methods.min.js
    │   │           │   ├── jquery.validate.js
    │   │           │   └── jquery.validate.min.js
    │   │       └── jquery
    │   │           ├── LICENSE.txt
    │   │           └── dist
    │   │               ├── jquery.js
    │   │               ├── jquery.min.js
    │   │               └── jquery.min.map
    └── ExternalAuthenticationWithCallback.sln
├── LICENSE
├── Local Authentication
    ├── AspNetCoreSecurity.sln
    └── AspNetCoreSecurity
    │   ├── AspNetCoreSecurity.csproj
    │   ├── Controllers
    │       ├── AccountController.cs
    │       └── HomeController.cs
    │   ├── Program.cs
    │   ├── Properties
    │       └── launchSettings.json
    │   ├── Startup.cs
    │   ├── Views
    │       ├── Account
    │       │   ├── AccessDenied.cshtml
    │       │   └── Login.cshtml
    │       ├── Home
    │       │   ├── Index.cshtml
    │       │   └── Secure.cshtml
    │       ├── Shared
    │       │   ├── _Layout.cshtml
    │       │   └── _ValidationScriptsPartial.cshtml
    │       ├── _ViewImports.cshtml
    │       └── _ViewStart.cshtml
    │   ├── appsettings.Development.json
    │   ├── appsettings.json
    │   └── wwwroot
    │       ├── css
    │           └── site.css
    │       ├── favicon.ico
    │       ├── js
    │           └── site.js
    │       └── lib
    │           ├── bootstrap
    │               ├── LICENSE
    │               └── dist
    │               │   ├── css
    │               │       ├── bootstrap-grid.css
    │               │       ├── bootstrap-grid.css.map
    │               │       ├── bootstrap-grid.min.css
    │               │       ├── bootstrap-grid.min.css.map
    │               │       ├── bootstrap-reboot.css
    │               │       ├── bootstrap-reboot.css.map
    │               │       ├── bootstrap-reboot.min.css
    │               │       ├── bootstrap-reboot.min.css.map
    │               │       ├── bootstrap.css
    │               │       ├── bootstrap.css.map
    │               │       ├── bootstrap.min.css
    │               │       └── bootstrap.min.css.map
    │               │   └── js
    │               │       ├── bootstrap.bundle.js
    │               │       ├── bootstrap.bundle.js.map
    │               │       ├── bootstrap.bundle.min.js
    │               │       ├── bootstrap.bundle.min.js.map
    │               │       ├── bootstrap.js
    │               │       ├── bootstrap.js.map
    │               │       ├── bootstrap.min.js
    │               │       └── bootstrap.min.js.map
    │           ├── jquery-validation-unobtrusive
    │               ├── LICENSE.txt
    │               ├── jquery.validate.unobtrusive.js
    │               └── jquery.validate.unobtrusive.min.js
    │           ├── jquery-validation
    │               ├── LICENSE.md
    │               └── dist
    │               │   ├── additional-methods.js
    │               │   ├── additional-methods.min.js
    │               │   ├── jquery.validate.js
    │               │   └── jquery.validate.min.js
    │           └── jquery
    │               ├── LICENSE.txt
    │               └── dist
    │                   ├── jquery.js
    │                   ├── jquery.min.js
    │                   └── jquery.min.map
├── OidcTokensApis
    ├── OidcTokensApis.sln
    └── src
    │   ├── Api
    │       ├── Api.csproj
    │       ├── Program.cs
    │       ├── Properties
    │       │   └── launchSettings.json
    │       ├── Startup.cs
    │       ├── TestController.cs
    │       ├── appsettings.Development.json
    │       └── appsettings.json
    │   └── MvcClient
    │       ├── Controllers
    │           └── HomeController.cs
    │       ├── MvcClient.csproj
    │       ├── Program.cs
    │       ├── Properties
    │           └── launchSettings.json
    │       ├── Startup.cs
    │       ├── Views
    │           ├── Home
    │           │   ├── CallApi.cshtml
    │           │   ├── Index.cshtml
    │           │   └── Secure.cshtml
    │           ├── Shared
    │           │   ├── _Layout.cshtml
    │           │   └── _ValidationScriptsPartial.cshtml
    │           ├── _ViewImports.cshtml
    │           └── _ViewStart.cshtml
    │       ├── appsettings.json
    │       └── wwwroot
    │           ├── css
    │               └── site.css
    │           ├── favicon.ico
    │           ├── js
    │               └── site.js
    │           └── lib
    │               ├── bootstrap
    │                   ├── LICENSE
    │                   └── dist
    │                   │   ├── css
    │                   │       ├── bootstrap-grid.css
    │                   │       ├── bootstrap-grid.css.map
    │                   │       ├── bootstrap-grid.min.css
    │                   │       ├── bootstrap-grid.min.css.map
    │                   │       ├── bootstrap-reboot.css
    │                   │       ├── bootstrap-reboot.css.map
    │                   │       ├── bootstrap-reboot.min.css
    │                   │       ├── bootstrap-reboot.min.css.map
    │                   │       ├── bootstrap.css
    │                   │       ├── bootstrap.css.map
    │                   │       ├── bootstrap.min.css
    │                   │       └── bootstrap.min.css.map
    │                   │   └── js
    │                   │       ├── bootstrap.bundle.js
    │                   │       ├── bootstrap.bundle.js.map
    │                   │       ├── bootstrap.bundle.min.js
    │                   │       ├── bootstrap.bundle.min.js.map
    │                   │       ├── bootstrap.js
    │                   │       ├── bootstrap.js.map
    │                   │       ├── bootstrap.min.js
    │                   │       └── bootstrap.min.js.map
    │               ├── jquery-validation-unobtrusive
    │                   ├── LICENSE.txt
    │                   ├── jquery.validate.unobtrusive.js
    │                   └── jquery.validate.unobtrusive.min.js
    │               ├── jquery-validation
    │                   ├── LICENSE.md
    │                   └── dist
    │                   │   ├── additional-methods.js
    │                   │   ├── additional-methods.min.js
    │                   │   ├── jquery.validate.js
    │                   │   └── jquery.validate.min.js
    │               └── jquery
    │                   ├── LICENSE.txt
    │                   └── dist
    │                       ├── jquery.js
    │                       ├── jquery.min.js
    │                       └── jquery.min.map
├── README.md
├── SPA
    ├── SPA.sln
    └── src
    │   └── SpaClientApp
    │       ├── Program.cs
    │       ├── Properties
    │           └── launchSettings.json
    │       ├── SpaClientApp.csproj
    │       ├── Startup.cs
    │       └── wwwroot
    │           ├── callback.html
    │           ├── index.html
    │           ├── oidc-client.js
    │           ├── oidc-client.min.js
    │           └── silent.html
└── Start
    ├── AspNetCoreSecurity
        ├── AspNetCoreSecurity.csproj
        ├── Controllers
        │   ├── AccountController.cs
        │   └── HomeController.cs
        ├── Program.cs
        ├── Properties
        │   └── launchSettings.json
        ├── Startup.cs
        ├── Views
        │   ├── Account
        │   │   ├── AccessDenied.cshtml
        │   │   └── Login.cshtml
        │   ├── Home
        │   │   ├── Index.cshtml
        │   │   └── Secure.cshtml
        │   ├── Shared
        │   │   ├── _Layout.cshtml
        │   │   └── _ValidationScriptsPartial.cshtml
        │   ├── _ViewImports.cshtml
        │   └── _ViewStart.cshtml
        ├── appsettings.Development.json
        ├── appsettings.json
        └── wwwroot
        │   ├── css
        │       └── site.css
        │   ├── favicon.ico
        │   ├── js
        │       └── site.js
        │   └── lib
        │       ├── bootstrap
        │           ├── LICENSE
        │           └── dist
        │           │   ├── css
        │           │       ├── bootstrap-grid.css
        │           │       ├── bootstrap-grid.css.map
        │           │       ├── bootstrap-grid.min.css
        │           │       ├── bootstrap-grid.min.css.map
        │           │       ├── bootstrap-reboot.css
        │           │       ├── bootstrap-reboot.css.map
        │           │       ├── bootstrap-reboot.min.css
        │           │       ├── bootstrap-reboot.min.css.map
        │           │       ├── bootstrap.css
        │           │       ├── bootstrap.css.map
        │           │       ├── bootstrap.min.css
        │           │       └── bootstrap.min.css.map
        │           │   └── js
        │           │       ├── bootstrap.bundle.js
        │           │       ├── bootstrap.bundle.js.map
        │           │       ├── bootstrap.bundle.min.js
        │           │       ├── bootstrap.bundle.min.js.map
        │           │       ├── bootstrap.js
        │           │       ├── bootstrap.js.map
        │           │       ├── bootstrap.min.js
        │           │       └── bootstrap.min.js.map
        │       ├── jquery-validation-unobtrusive
        │           ├── LICENSE.txt
        │           ├── jquery.validate.unobtrusive.js
        │           └── jquery.validate.unobtrusive.min.js
        │       ├── jquery-validation
        │           ├── LICENSE.md
        │           └── dist
        │           │   ├── additional-methods.js
        │           │   ├── additional-methods.min.js
        │           │   ├── jquery.validate.js
        │           │   └── jquery.validate.min.js
        │       └── jquery
        │           ├── LICENSE.txt
        │           └── dist
        │               ├── jquery.js
        │               ├── jquery.min.js
        │               └── jquery.min.map
    └── Start.sln


/Authorization/AspNetCoreSecurity/AspNetCoreSecurity.csproj:
--------------------------------------------------------------------------------
1 | <Project Sdk="Microsoft.NET.Sdk.Web">
2 |   
3 |   <PropertyGroup>
4 |     <TargetFramework>netcoreapp3.0</TargetFramework>
5 |   </PropertyGroup>
6 | 
7 | </Project>


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Controllers/AccountController.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | using Microsoft.AspNetCore.Authentication;
 5 | using Microsoft.AspNetCore.Authorization;
 6 | using Microsoft.AspNetCore.Mvc;
 7 | using System.Collections.Generic;
 8 | using System.Security.Claims;
 9 | using System.Threading.Tasks;
10 | 
11 | namespace AspNetCoreSecurity.Controllers
12 | {
13 |     [AllowAnonymous]
14 |     public class AccountController : Controller
15 |     {
16 |         [HttpGet]
17 |         public IActionResult Login(string returnUrl = null)
18 |         {
19 |             ViewData["ReturnUrl"] = returnUrl;
20 |             return View();
21 |         }
22 | 
23 |         [HttpPost]
24 |         [ValidateAntiForgeryToken]
25 |         public async Task<IActionResult> Login(string userName, string password, string returnUrl = null)
26 |         {
27 |             ViewData["ReturnUrl"] = returnUrl;
28 | 
29 |             if (!string.IsNullOrWhiteSpace(userName) &&
30 |                 userName == password)
31 |             {
32 |                 List<Claim> claims;
33 | 
34 |                 if (userName == "alice")
35 |                 {
36 |                     claims = new List<Claim>
37 |                     {
38 |                         new Claim("sub", "1"),
39 |                         new Claim("name", "Alice"),
40 |                         new Claim("email", "alice@smith.com"),
41 |                         new Claim("status", "senior"),
42 |                         new Claim("department", "sales"),
43 |                         new Claim("region", "south")
44 |                     };
45 |                 }
46 |                 else if (userName == "bob")
47 |                 {
48 |                     claims = new List<Claim>
49 |                     {
50 |                         new Claim("sub", "2"),
51 |                         new Claim("name", "Bob"),
52 |                         new Claim("email", "bob@smith.com"),
53 |                         new Claim("status", "junior"),
54 |                         new Claim("department", "sales"),
55 |                         new Claim("region", "north"),
56 |                         new Claim("role", "supervisor")
57 |                     };
58 |                 }
59 |                 else
60 |                 {
61 |                     claims = new List<Claim>
62 |                     {
63 |                         new Claim("sub", "3"),
64 |                         new Claim("name", userName),
65 |                         new Claim("email", userName + "@smith.com"),
66 |                         new Claim("status", "intern"),
67 |                         new Claim("department", "development")
68 |                     };
69 |                 }
70 | 
71 |                 var id = new ClaimsIdentity(claims, "local", "name", "role");
72 |                 await HttpContext.SignInAsync(new ClaimsPrincipal(id));
73 | 
74 |                 return LocalRedirect(returnUrl);
75 |             }
76 | 
77 |             return View();
78 |         }
79 | 
80 |         public async Task<IActionResult> Logout()
81 |         {
82 |             await HttpContext.SignOutAsync();
83 |             return Redirect("/");
84 |         }
85 | 
86 |         public IActionResult AccessDenied() => View();
87 |     }
88 | }


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Controllers/CustomerController.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | using AspNetCoreAuthentication.Policies;
 5 | using Microsoft.AspNetCore.Authorization;
 6 | using Microsoft.AspNetCore.Mvc;
 7 | using System.Threading.Tasks;
 8 | 
 9 | namespace Authentication.Controllers
10 | {
11 |     public class CustomerController : Controller
12 |     {
13 |         private readonly IAuthorizationService _authz;
14 | 
15 |         public CustomerController(IAuthorizationService authz)
16 |         {
17 |             _authz = authz;
18 |         }
19 | 
20 |         public async Task<IActionResult> Manage()
21 |         {
22 |             var customer = new Customer
23 |             {
24 |                 Name = "Acme Corp",
25 |                 Region = "south",
26 |                 Fortune500 = true
27 |             };
28 | 
29 |             var result = await _authz.AuthorizeAsync(User, customer, CustomerOperations.Manage);
30 | 
31 |             if (result.Succeeded)
32 |             {
33 |                 return View("success");
34 |             }
35 | 
36 |             return Forbid();
37 |         }
38 | 
39 |         public async Task<IActionResult> Discount(int amount)
40 |         {
41 |             var customer = new Customer
42 |             {
43 |                 Name = "Acme Corp",
44 |                 Region = "south",
45 |                 Fortune500 = true
46 |             };
47 | 
48 |             var result = await _authz.AuthorizeAsync(User, customer, CustomerOperations.GiveDiscount(amount));
49 | 
50 |             if (result.Succeeded)
51 |             {
52 |                 return View("success");
53 |             }
54 | 
55 |             return Forbid();
56 |         }
57 |     }
58 | }


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Controllers/HomeController.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | using Microsoft.AspNetCore.Mvc;
 5 | 
 6 | namespace AspNetCoreAuthentication.Controllers
 7 | {
 8 |     public class HomeController : Controller
 9 |     {
10 |         public IActionResult Index()
11 |         {
12 |             return View();
13 |         }
14 | 
15 |         public IActionResult Index2()
16 |         {
17 |             return View();
18 |         }
19 |     }
20 | }
21 | 


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Controllers/TestController.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | using Microsoft.AspNetCore.Authorization;
 5 | using Microsoft.AspNetCore.Mvc;
 6 | using System.Threading.Tasks;
 7 | 
 8 | namespace Authentication.Controllers
 9 | {
10 |     public class TestController : Controller
11 |     {
12 |         private readonly IAuthorizationService _authz;
13 | 
14 |         public TestController(IAuthorizationService authz)
15 |         {
16 |             _authz = authz;
17 |         }
18 | 
19 |         [Authorize("SalesOnly")]
20 |         public IActionResult SalesOnly()
21 |         {
22 |             return View("success");
23 |         }
24 | 
25 |         [Authorize("SalesSenior")]
26 |         public IActionResult SalesSenior()
27 |         {
28 |             return View("success");
29 |         }
30 | 
31 |         public async Task<IActionResult> SalesSeniorImperative()
32 |         {
33 |             if ((await _authz.AuthorizeAsync(User, "SalesSenior")).Succeeded)
34 |             {
35 |                 return View("success");
36 |             }
37 | 
38 |             return Forbid();
39 |         }
40 | 
41 |         [Authorize("DevInterns")]
42 |         public IActionResult DevInterns()
43 |         {
44 |             return View("success");
45 |         }
46 | 
47 |         [Authorize(Roles = "NoOneHasAccess")]
48 |         public IActionResult NoAccess()
49 |         {
50 |             return View("success");
51 |         }
52 |     }
53 | }


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Policies/Models/Customer.cs:
--------------------------------------------------------------------------------
 1 | namespace AspNetCoreAuthentication.Policies
 2 | {
 3 |     public class Customer
 4 |     {
 5 |         public int Id { get; set; }
 6 |         public string Name { get; set; }
 7 |         public string Region { get; set; }
 8 |         public bool Fortune500 { get; set; }
 9 |     }
10 | }


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Policies/Requirements/JobLevelRequirement.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authorization;
 2 | 
 3 | namespace AspNetCoreAuthentication.Policies
 4 | {
 5 |     public class JobLevelRequirement : IAuthorizationRequirement
 6 |     {
 7 |         public JobLevel Level { get; }
 8 | 
 9 |         public JobLevelRequirement(JobLevel level)
10 |         {
11 |             Level = level;
12 |         }
13 |     }
14 | 
15 |     public static class StatusPolicyBuilderExtensions
16 |     {
17 |         public static AuthorizationPolicyBuilder RequireJobLevel(this AuthorizationPolicyBuilder builder, JobLevel level)
18 |         {
19 |             builder.AddRequirements(new JobLevelRequirement(level));
20 |             return builder;
21 |         }
22 |     }
23 | 
24 |     public enum JobLevel
25 |     {
26 |         Intern,
27 |         Developer,
28 |         Management,
29 |         CxO
30 |     }
31 | }


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Policies/Requirements/JobLevelRequirementHandler.cs:
--------------------------------------------------------------------------------
 1 | using System.Threading.Tasks;
 2 | using Microsoft.AspNetCore.Authorization;
 3 | 
 4 | namespace AspNetCoreAuthentication.Policies
 5 | {
 6 |     public class JobLevelRequirementHandler : AuthorizationHandler<JobLevelRequirement>
 7 |     {
 8 |         private readonly IOrganizationService _service;
 9 | 
10 |         public JobLevelRequirementHandler(IOrganizationService service)
11 |         {
12 |             _service = service;
13 |         }
14 |         
15 |         protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, JobLevelRequirement requirement)
16 |         {
17 |             var currentLevel = _service.GetJobLevel(context.User);
18 | 
19 |             if (currentLevel == requirement.Level)
20 |             {
21 |                 context.Succeed(requirement);
22 |             }
23 | 
24 |             return Task.FromResult(0);
25 |         }
26 |     }
27 | }


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Policies/Resources/CustomerAuthorizationHandler.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authorization;
 2 | using Microsoft.AspNetCore.Authorization.Infrastructure;
 3 | using System.Threading.Tasks;
 4 | 
 5 | namespace AspNetCoreAuthentication.Policies
 6 | {
 7 |     public class CustomerAuthorizationHandler : AuthorizationHandler<OperationAuthorizationRequirement, Customer>
 8 |     {
 9 |         private readonly IPermissionService _permissions;
10 | 
11 |         public CustomerAuthorizationHandler(IPermissionService permissions)
12 |         {
13 |             _permissions = permissions;
14 |         }
15 | 
16 |         protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, OperationAuthorizationRequirement requirement, Customer resource)
17 |         {
18 |             var nop = Task.CompletedTask;
19 | 
20 |             // user must be in sales
21 |             if (!context.User.HasClaim("department", "sales"))
22 |             {
23 |                 return nop;
24 |             }
25 | 
26 |             // ...and responsible for customer region
27 |             if (!context.User.HasClaim("region", resource.Region))
28 |             {
29 |                 return nop;
30 |             }
31 | 
32 |             // if customer is fortune 500 - sales rep must be senior
33 |             if (resource.Fortune500)
34 |             {
35 |                 if (!context.User.HasClaim("status", "senior"))
36 |                 {
37 |                     return nop;
38 |                 }
39 |             }
40 | 
41 |             if (requirement.Name == "GiveDiscount")
42 |             {
43 |                 HandleDiscountOperation(context, requirement, resource);
44 |                 return nop;
45 |             }
46 | 
47 |             context.Succeed(requirement);
48 |             return nop;
49 |         }
50 | 
51 |         private void HandleDiscountOperation(AuthorizationHandlerContext context, OperationAuthorizationRequirement requirement, Customer resource)
52 |         {
53 |             var discountOperation = requirement as DiscountOperationAuthorizationRequirement;
54 |             var salesRep = context.User.FindFirst("sub").Value;
55 | 
56 |             var result = _permissions.IsDiscountAllowed(
57 |                 salesRep,
58 |                 resource.Id,
59 |                 discountOperation.Amount);
60 | 
61 |             if (result)
62 |             {
63 |                 context.Succeed(requirement);
64 |             }
65 |         }
66 |     }
67 | }


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Policies/Resources/CustomerOperations.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authorization.Infrastructure;
 2 | 
 3 | namespace AspNetCoreAuthentication.Policies
 4 | {
 5 |     public static class CustomerOperations
 6 |     {
 7 |         public static OperationAuthorizationRequirement Manage = 
 8 |             new OperationAuthorizationRequirement { Name = "Manage" };
 9 |         public static OperationAuthorizationRequirement SendMail =
10 |             new OperationAuthorizationRequirement { Name = "SendMail" };
11 | 
12 |         public static OperationAuthorizationRequirement GiveDiscount(int amount)
13 |         {
14 |             return new DiscountOperationAuthorizationRequirement
15 |             {
16 |                 Name = "GiveDiscount",
17 |                 Amount = amount
18 |             };
19 |         }
20 |     }
21 | 
22 |     public class DiscountOperationAuthorizationRequirement : OperationAuthorizationRequirement
23 |     {
24 |         public int Amount { get; set; }
25 |     }
26 | }


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Policies/Services/OrganizationService.cs:
--------------------------------------------------------------------------------
 1 | using System.Security.Claims;
 2 | 
 3 | namespace AspNetCoreAuthentication.Policies
 4 | {
 5 |     public interface IOrganizationService
 6 |     {
 7 |         JobLevel GetJobLevel(ClaimsPrincipal user);
 8 |     }
 9 | 
10 |     public class OrganizationService : IOrganizationService
11 |     {
12 |         public JobLevel GetJobLevel(ClaimsPrincipal user)
13 |         {
14 |             return JobLevel.Developer;
15 |         }
16 |     }
17 | }


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Policies/Services/PermissionService.cs:
--------------------------------------------------------------------------------
 1 | namespace AspNetCoreAuthentication.Policies
 2 | {
 3 |     public interface IPermissionService
 4 |     {
 5 |         bool IsDiscountAllowed(string subject, int customerId, int amount);
 6 |     }
 7 | 
 8 |     public class PermissionService : IPermissionService
 9 |     {
10 |         public bool IsDiscountAllowed(string subject, int customerId, int amount)
11 |         {
12 |             return (amount < 10);
13 |         }
14 |     }
15 | }


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Program.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Hosting;
 2 | using Microsoft.Extensions.Hosting;
 3 | 
 4 | namespace AspNetCoreSecurity
 5 | {
 6 |     public class Program
 7 |     {
 8 |         public static void Main(string[] args)
 9 |         {
10 |             CreateHostBuilder(args).Build().Run();
11 |         }
12 | 
13 |         public static IHostBuilder CreateHostBuilder(string[] args) =>
14 |             Host.CreateDefaultBuilder(args)
15 |                 .ConfigureWebHostDefaults(webBuilder =>
16 |                 {
17 |                     webBuilder.UseStartup<Startup>();
18 |                 });
19 |     }
20 | }


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "iisSettings": {
 3 |     "windowsAuthentication": false, 
 4 |     "anonymousAuthentication": true, 
 5 |     "iisExpress": {
 6 |       "applicationUrl": "http://localhost:60275",
 7 |       "sslPort": 44305
 8 |     }
 9 |   },
10 |   "profiles": {
11 |     "IIS Express": {
12 |       "commandName": "IISExpress",
13 |       "launchBrowser": true,
14 |       "environmentVariables": {
15 |         "ASPNETCORE_ENVIRONMENT": "Development"
16 |       }
17 |     },
18 |     "AspNetCoreSecurity": {
19 |       "commandName": "Project",
20 |       "launchBrowser": true,
21 |       "applicationUrl": "https://localhost:5001;http://localhost:5000",
22 |       "environmentVariables": {
23 |         "ASPNETCORE_ENVIRONMENT": "Development"
24 |       }
25 |     }
26 |   }
27 | }
28 | 


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Startup.cs:
--------------------------------------------------------------------------------
 1 | using AspNetCoreAuthentication.Policies;
 2 | using Microsoft.AspNetCore.Authentication.Cookies;
 3 | using Microsoft.AspNetCore.Authorization;
 4 | using Microsoft.AspNetCore.Builder;
 5 | using Microsoft.Extensions.DependencyInjection;
 6 | 
 7 | namespace AspNetCoreSecurity
 8 | {
 9 |     public class Startup
10 |     {
11 |         public void ConfigureServices(IServiceCollection services)
12 |         {
13 |             services.AddControllersWithViews();
14 | 
15 |             services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
16 |                 .AddCookie();
17 | 
18 |             services.AddAuthorization(options =>
19 |             {
20 |                 // some examples
21 |                 options.AddPolicy("SalesOnly", policy =>
22 |                 {
23 |                     policy.RequireClaim("department", "sales");
24 |                 });
25 | 
26 |                 options.AddPolicy("SalesSenior", policy =>
27 |                 {
28 |                     policy.RequireClaim("department", "sales");
29 |                     policy.RequireClaim("status", "senior");
30 |                 });
31 | 
32 |                 options.AddPolicy("DevInterns", policy =>
33 |                 {
34 |                     policy.RequireClaim("department", "development");
35 |                     policy.RequireClaim("status", "intern");
36 |                 });
37 | 
38 |                 // custom policy
39 |                 options.AddPolicy("CxO", policy =>
40 |                 {
41 |                     policy.RequireJobLevel(JobLevel.CxO);
42 |                 });
43 |             });
44 | 
45 |             // register resource authorization handlers
46 |             services.AddTransient<IAuthorizationHandler, CustomerAuthorizationHandler>();
47 |             services.AddTransient<IAuthorizationHandler, JobLevelRequirementHandler>();
48 | 
49 |             // register data access services
50 |             services.AddTransient<IPermissionService, PermissionService>();
51 |             services.AddTransient<IOrganizationService, OrganizationService>();
52 |         }
53 | 
54 |         public void Configure(IApplicationBuilder app)
55 |         {
56 |             app.UseDeveloperExceptionPage();
57 |             app.UseStaticFiles();
58 |             
59 |             app.UseRouting();
60 |             app.UseAuthentication();
61 |             app.UseAuthorization();
62 | 
63 |             app.UseEndpoints(endpoints =>
64 |             {
65 |                 endpoints.MapDefaultControllerRoute()
66 |                     .RequireAuthorization();
67 |             });
68 |         }
69 |     }
70 | }


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Views/Account/AccessDenied.cshtml:
--------------------------------------------------------------------------------
1 | <h2>Access denied!</h2>


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Views/Account/Login.cshtml:
--------------------------------------------------------------------------------
 1 | <h2>Login</h2>
 2 | 
 3 | <div class="row">
 4 |     <div class="col-md-8">
 5 |         <section>
 6 |             <form asp-controller="Account" asp-action="Login" asp-route-returnurl="@ViewData["ReturnUrl"]" method="post" class="form-horizontal" role="form">
 7 |                 <div class="form-group">
 8 |                     <label class="col-md-2 control-label">UserName</label>
 9 |                     <div class="col-md-10">
10 |                         <input type="text" name="username" autofocus />
11 |                     </div>
12 |                 </div>
13 | 
14 |                 <div class="form-group">
15 |                     <label class="col-md-2 control-label">Password</label>
16 |                     <div class="col-md-10">
17 |                         <input type="password" name="password" />
18 |                     </div>
19 |                 </div>
20 | 
21 |                 <div class="form-group">
22 |                     <div class="col-md-offset-2 col-md-10">
23 |                         <button type="submit" class="btn btn-primary">Log in</button>
24 |                     </div>
25 |                 </div>
26 |             </form>
27 |         </section>
28 |     </div>
29 | </div>


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Views/Home/Index.cshtml:
--------------------------------------------------------------------------------
 1 | @{
 2 |     ViewData["Title"] = "Home Page";
 3 | }
 4 | 
 5 | <h1>ASP.NET Core Authorization</h1>
 6 | 
 7 | <dl>
 8 |     @foreach (var claim in User.Claims)
 9 |     {
10 |         <dt>@claim.Type</dt>
11 |         <dd>@claim.Value</dd>
12 |     }
13 | </dl>
14 | 
15 | <a href="home/index2">Switch to UI authorization rendering version</a>
16 | 
17 | <h3>Policies</h3>
18 | 
19 | <div>
20 |     <a href="test/noAccess">No access</a>
21 | </div>
22 | 
23 | <div>
24 |     <a href="test/salesOnly">Sales only</a>
25 | </div>
26 | 
27 | <div>
28 |     <a href="test/salesSenior">Sales seniors only</a>
29 | </div>
30 | 
31 | <div>
32 |     <a href="test/salesSeniorImperative">Sales seniors only (imperative)</a>
33 | </div>
34 | 
35 | <div>
36 |     <a href="test/devInterns">Dev interns only</a>
37 | </div>
38 | 
39 | <h3>Customer resource</h3>
40 | 
41 | <div>
42 |     <a href="customer/manage">Manage</a>
43 | </div>
44 | 
45 | <div>
46 |     <a href="customer/discount?amount=5">Give discount (5%)</a>
47 | </div>
48 | 
49 | <div>
50 |     <a href="customer/discount?amount=15">Give discount (15%)</a>
51 | </div>


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Views/Home/Index2.cshtml:
--------------------------------------------------------------------------------
 1 | @{
 2 |     ViewData["Title"] = "Home Page";
 3 |     
 4 |     @using Microsoft.AspNetCore.Authorization
 5 |     @inject IAuthorizationService _authz
 6 | }
 7 | 
 8 | <h2>Claims</h2>
 9 | 
10 | <dl>
11 |     @foreach (var claim in User.Claims)
12 |     {
13 |         <dt>@claim.Type</dt>
14 |         <dd>@claim.Value</dd>
15 |     }
16 | </dl>
17 | 
18 | <h3>Policies (with UI authorization rendering)</h3>
19 | 
20 | @if ((await _authz.AuthorizeAsync(User, "SalesOnly")).Succeeded)
21 | {
22 |     <div>
23 |         <a href="/test/salesOnly">Sales only</a>
24 |     </div>
25 | }
26 | 
27 | @if ((await _authz.AuthorizeAsync(User, "SalesSenior")).Succeeded)
28 | {
29 |     <div>
30 |         <a href="/test/salesSenior">Sales seniors only</a>
31 |     </div>
32 | }
33 | 
34 | @if ((await _authz.AuthorizeAsync(User, "DevInterns")).Succeeded)
35 | {
36 |     <div>
37 |         <a href="/test/devInterns">Dev interns only</a>
38 |     </div>
39 | }


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Views/Shared/Success.cshtml:
--------------------------------------------------------------------------------
1 | <h2>Success</h2>


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Views/Shared/_ValidationScriptsPartial.cshtml:
--------------------------------------------------------------------------------
 1 | <environment include="Development">
 2 |     <script src="~/lib/jquery-validation/dist/jquery.validate.js"></script>
 3 |     <script src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.js"></script>
 4 | </environment>
 5 | <environment exclude="Development">
 6 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.17.0/jquery.validate.min.js"
 7 |             asp-fallback-src="~/lib/jquery-validation/dist/jquery.validate.min.js"
 8 |             asp-fallback-test="window.jQuery && window.jQuery.validator"
 9 |             crossorigin="anonymous"
10 |             integrity="sha256-F6h55Qw6sweK+t7SiOJX+2bpSAa3b/fnlrVCJvmEj1A=">
11 |     </script>
12 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-validation-unobtrusive/3.2.11/jquery.validate.unobtrusive.min.js"
13 |             asp-fallback-src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.min.js"
14 |             asp-fallback-test="window.jQuery && window.jQuery.validator && window.jQuery.validator.unobtrusive"
15 |             crossorigin="anonymous"
16 |             integrity="sha256-9GycpJnliUjJDVDqP0UEu/bsm9U+3dnQUH8+3W10vkY=">
17 |     </script>
18 | </environment>
19 | 


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Views/_ViewImports.cshtml:
--------------------------------------------------------------------------------
1 | @using AspNetCoreSecurity
2 | @addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
3 | 


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/Views/_ViewStart.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     Layout = "_Layout";
3 | }
4 | 


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/appsettings.Development.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Debug",
 5 |       "System": "Information",
 6 |       "Microsoft": "Information"
 7 |     }
 8 |   }
 9 | }
10 | 


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/appsettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Information",
 5 |       "Microsoft": "Warning",
 6 |       "Microsoft.Hosting.Lifetime": "Information"
 7 |     }
 8 |   },
 9 |   "AllowedHosts": "*"
10 | }
11 | 


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/wwwroot/css/site.css:
--------------------------------------------------------------------------------
 1 | /* Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
 2 | for details on configuring this project to bundle and minify static web assets. */
 3 | 
 4 | a.navbar-brand {
 5 |   white-space: normal;
 6 |   text-align: center;
 7 |   word-break: break-all;
 8 | }
 9 | 
10 | /* Provide sufficient contrast against white background */
11 | a {
12 |   color: #0366d6;
13 | }
14 | 
15 | .btn-primary {
16 |   color: #fff;
17 |   background-color: #1b6ec2;
18 |   border-color: #1861ac;
19 | }
20 | 
21 | .nav-pills .nav-link.active, .nav-pills .show > .nav-link {
22 |   color: #fff;
23 |   background-color: #1b6ec2;
24 |   border-color: #1861ac;
25 | }
26 | 
27 | /* Sticky footer styles
28 | -------------------------------------------------- */
29 | html {
30 |   font-size: 14px;
31 | }
32 | @media (min-width: 768px) {
33 |   html {
34 |     font-size: 16px;
35 |   }
36 | }
37 | 
38 | .border-top {
39 |   border-top: 1px solid #e5e5e5;
40 | }
41 | .border-bottom {
42 |   border-bottom: 1px solid #e5e5e5;
43 | }
44 | 
45 | .box-shadow {
46 |   box-shadow: 0 .25rem .75rem rgba(0, 0, 0, .05);
47 | }
48 | 
49 | button.accept-policy {
50 |   font-size: 1rem;
51 |   line-height: inherit;
52 | }
53 | 
54 | /* Sticky footer styles
55 | -------------------------------------------------- */
56 | html {
57 |   position: relative;
58 |   min-height: 100%;
59 | }
60 | 
61 | body {
62 |   /* Margin bottom by footer height */
63 |   margin-bottom: 60px;
64 | }
65 | .footer {
66 |   position: absolute;
67 |   bottom: 0;
68 |   width: 100%;
69 |   white-space: nowrap;
70 |   line-height: 60px; /* Vertically center the text there */
71 | }
72 | 


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/wwwroot/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/leastprivilege/AspNetCoreSecuritySamples/79848a6e956ecafc858547353459f0c5b161afa9/Authorization/AspNetCoreSecurity/wwwroot/favicon.ico


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/wwwroot/js/site.js:
--------------------------------------------------------------------------------
1 | // Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
2 | // for details on configuring this project to bundle and minify static web assets.
3 | 
4 | // Write your JavaScript code.
5 | 


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/wwwroot/lib/bootstrap/LICENSE:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | 
 3 | Copyright (c) 2011-2018 Twitter, Inc.
 4 | Copyright (c) 2011-2018 The Bootstrap Authors
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.min.css:
--------------------------------------------------------------------------------
1 | /*!
2 |  * Bootstrap Reboot v4.3.1 (https://getbootstrap.com/)
3 |  * Copyright 2011-2019 The Bootstrap Authors
4 |  * Copyright 2011-2019 Twitter, Inc.
5 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
6 |  * Forked from Normalize.css, licensed MIT (https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
7 |  */*,::after,::before{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}article,aside,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}[tabindex="-1"]:focus{outline:0!important}hr{box-sizing:content-box;height:0;overflow:visible}h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem}p{margin-top:0;margin-bottom:1rem}abbr[data-original-title],abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#007bff;text-decoration:none;background-color:transparent}a:hover{color:#0056b3;text-decoration:underline}a:not([href]):not([tabindex]){color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus,a:not([href]):not([tabindex]):hover{color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus{outline:0}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;font-size:1em}pre{margin-top:0;margin-bottom:1rem;overflow:auto}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}svg{overflow:hidden;vertical-align:middle}table{border-collapse:collapse}caption{padding-top:.75rem;padding-bottom:.75rem;color:#6c757d;text-align:left;caption-side:bottom}th{text-align:inherit}label{display:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=reset]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor:pointer}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{padding:0;border-style:none}input[type=checkbox],input[type=radio]{box-sizing:border-box;padding:0}input[type=date],input[type=datetime-local],input[type=month],input[type=time]{-webkit-appearance:listbox}textarea{overflow:auto;resize:vertical}fieldset{min-width:0;padding:0;margin:0;border:0}legend{display:block;width:100%;max-width:100%;padding:0;margin-bottom:.5rem;font-size:1.5rem;line-height:inherit;color:inherit;white-space:normal}progress{vertical-align:baseline}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{outline-offset:-2px;-webkit-appearance:none}[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}output{display:inline-block}summary{display:list-item;cursor:pointer}template{display:none}[hidden]{display:none!important}
8 | /*# sourceMappingURL=bootstrap-reboot.min.css.map */


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/wwwroot/lib/jquery-validation-unobtrusive/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright (c) .NET Foundation. All rights reserved.
 2 | 
 3 | Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 4 | these files except in compliance with the License. You may obtain a copy of the
 5 | License at
 6 | 
 7 | http://www.apache.org/licenses/LICENSE-2.0
 8 | 
 9 | Unless required by applicable law or agreed to in writing, software distributed
10 | under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
11 | CONDITIONS OF ANY KIND, either express or implied. See the License for the
12 | specific language governing permissions and limitations under the License.
13 | 


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/wwwroot/lib/jquery-validation/LICENSE.md:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | =====================
 3 | 
 4 | Copyright Jörn Zaefferer
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/Authorization/AspNetCoreSecurity/wwwroot/lib/jquery/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright JS Foundation and other contributors, https://js.foundation/
 2 | 
 3 | This software consists of voluntary contributions made by many
 4 | individuals. For exact contribution history, see the revision history
 5 | available at https://github.com/jquery/jquery
 6 | 
 7 | The following license applies to all parts of this software except as
 8 | documented below:
 9 | 
10 | ====
11 | 
12 | Permission is hereby granted, free of charge, to any person obtaining
13 | a copy of this software and associated documentation files (the
14 | "Software"), to deal in the Software without restriction, including
15 | without limitation the rights to use, copy, modify, merge, publish,
16 | distribute, sublicense, and/or sell copies of the Software, and to
17 | permit persons to whom the Software is furnished to do so, subject to
18 | the following conditions:
19 | 
20 | The above copyright notice and this permission notice shall be
21 | included in all copies or substantial portions of the Software.
22 | 
23 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
24 | EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
25 | MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
26 | NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
27 | LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
28 | OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
29 | WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
30 | 
31 | ====
32 | 
33 | All files located in the node_modules and external directories are
34 | externally maintained libraries used by this software which have their
35 | own licenses; we recommend you read them, as their terms may differ from
36 | the terms above.
37 | 


--------------------------------------------------------------------------------
/Authorization/Authorization.sln:
--------------------------------------------------------------------------------
 1 | 
 2 | Microsoft Visual Studio Solution File, Format Version 12.00
 3 | # Visual Studio Version 16
 4 | VisualStudioVersion = 16.0.29020.237
 5 | MinimumVisualStudioVersion = 10.0.40219.1
 6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "AspNetCoreSecurity", "AspNetCoreSecurity\AspNetCoreSecurity.csproj", "{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}"
 7 | EndProject
 8 | Global
 9 | 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
10 | 		Debug|Any CPU = Debug|Any CPU
11 | 		Release|Any CPU = Release|Any CPU
12 | 	EndGlobalSection
13 | 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
14 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
15 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Debug|Any CPU.Build.0 = Debug|Any CPU
16 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Release|Any CPU.ActiveCfg = Release|Any CPU
17 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Release|Any CPU.Build.0 = Release|Any CPU
18 | 	EndGlobalSection
19 | 	GlobalSection(SolutionProperties) = preSolution
20 | 		HideSolutionNode = FALSE
21 | 	EndGlobalSection
22 | 	GlobalSection(ExtensibilityGlobals) = postSolution
23 | 		SolutionGuid = {B16F60B5-AFFD-4B9C-9CB9-C3DE513F6307}
24 | 	EndGlobalSection
25 | EndGlobal
26 | 


--------------------------------------------------------------------------------
/BFF/BFF.sln:
--------------------------------------------------------------------------------
 1 | 
 2 | Microsoft Visual Studio Solution File, Format Version 12.00
 3 | # Visual Studio Version 16
 4 | VisualStudioVersion = 16.0.29306.81
 5 | MinimumVisualStudioVersion = 15.0.26124.0
 6 | Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "src", "src", "{E03D7A7C-9E2C-40C1-80DB-6B2EDE68A80C}"
 7 | EndProject
 8 | Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Host", "src\Host\Host.csproj", "{42633B3D-76E6-4227-B888-FEBC9B2C9D03}"
 9 | EndProject
10 | Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "CrossDomainApi", "src\Api\CrossDomainApi.csproj", "{85C432F1-2C13-4EC7-B242-41250732CF8B}"
11 | EndProject
12 | Global
13 | 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
14 | 		Debug|Any CPU = Debug|Any CPU
15 | 		Debug|x64 = Debug|x64
16 | 		Debug|x86 = Debug|x86
17 | 		Release|Any CPU = Release|Any CPU
18 | 		Release|x64 = Release|x64
19 | 		Release|x86 = Release|x86
20 | 	EndGlobalSection
21 | 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
22 | 		{42633B3D-76E6-4227-B888-FEBC9B2C9D03}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
23 | 		{42633B3D-76E6-4227-B888-FEBC9B2C9D03}.Debug|Any CPU.Build.0 = Debug|Any CPU
24 | 		{42633B3D-76E6-4227-B888-FEBC9B2C9D03}.Debug|x64.ActiveCfg = Debug|Any CPU
25 | 		{42633B3D-76E6-4227-B888-FEBC9B2C9D03}.Debug|x64.Build.0 = Debug|Any CPU
26 | 		{42633B3D-76E6-4227-B888-FEBC9B2C9D03}.Debug|x86.ActiveCfg = Debug|Any CPU
27 | 		{42633B3D-76E6-4227-B888-FEBC9B2C9D03}.Debug|x86.Build.0 = Debug|Any CPU
28 | 		{42633B3D-76E6-4227-B888-FEBC9B2C9D03}.Release|Any CPU.ActiveCfg = Release|Any CPU
29 | 		{42633B3D-76E6-4227-B888-FEBC9B2C9D03}.Release|Any CPU.Build.0 = Release|Any CPU
30 | 		{42633B3D-76E6-4227-B888-FEBC9B2C9D03}.Release|x64.ActiveCfg = Release|Any CPU
31 | 		{42633B3D-76E6-4227-B888-FEBC9B2C9D03}.Release|x64.Build.0 = Release|Any CPU
32 | 		{42633B3D-76E6-4227-B888-FEBC9B2C9D03}.Release|x86.ActiveCfg = Release|Any CPU
33 | 		{42633B3D-76E6-4227-B888-FEBC9B2C9D03}.Release|x86.Build.0 = Release|Any CPU
34 | 		{85C432F1-2C13-4EC7-B242-41250732CF8B}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
35 | 		{85C432F1-2C13-4EC7-B242-41250732CF8B}.Debug|Any CPU.Build.0 = Debug|Any CPU
36 | 		{85C432F1-2C13-4EC7-B242-41250732CF8B}.Debug|x64.ActiveCfg = Debug|Any CPU
37 | 		{85C432F1-2C13-4EC7-B242-41250732CF8B}.Debug|x64.Build.0 = Debug|Any CPU
38 | 		{85C432F1-2C13-4EC7-B242-41250732CF8B}.Debug|x86.ActiveCfg = Debug|Any CPU
39 | 		{85C432F1-2C13-4EC7-B242-41250732CF8B}.Debug|x86.Build.0 = Debug|Any CPU
40 | 		{85C432F1-2C13-4EC7-B242-41250732CF8B}.Release|Any CPU.ActiveCfg = Release|Any CPU
41 | 		{85C432F1-2C13-4EC7-B242-41250732CF8B}.Release|Any CPU.Build.0 = Release|Any CPU
42 | 		{85C432F1-2C13-4EC7-B242-41250732CF8B}.Release|x64.ActiveCfg = Release|Any CPU
43 | 		{85C432F1-2C13-4EC7-B242-41250732CF8B}.Release|x64.Build.0 = Release|Any CPU
44 | 		{85C432F1-2C13-4EC7-B242-41250732CF8B}.Release|x86.ActiveCfg = Release|Any CPU
45 | 		{85C432F1-2C13-4EC7-B242-41250732CF8B}.Release|x86.Build.0 = Release|Any CPU
46 | 	EndGlobalSection
47 | 	GlobalSection(SolutionProperties) = preSolution
48 | 		HideSolutionNode = FALSE
49 | 	EndGlobalSection
50 | 	GlobalSection(NestedProjects) = preSolution
51 | 		{42633B3D-76E6-4227-B888-FEBC9B2C9D03} = {E03D7A7C-9E2C-40C1-80DB-6B2EDE68A80C}
52 | 		{85C432F1-2C13-4EC7-B242-41250732CF8B} = {E03D7A7C-9E2C-40C1-80DB-6B2EDE68A80C}
53 | 	EndGlobalSection
54 | 	GlobalSection(ExtensibilityGlobals) = postSolution
55 | 		SolutionGuid = {109C72A8-4835-4315-9B23-3B50CF151957}
56 | 	EndGlobalSection
57 | EndGlobal
58 | 


--------------------------------------------------------------------------------
/BFF/readme.md:
--------------------------------------------------------------------------------
 1 | This sample shows a possible approach for securing a SPA using
 2 | 
 3 | * a server-side backend for user authentication and session management
 4 | * SameSite cookies
 5 | * automatic token management
 6 | * proxying calls to back-end services
 7 | 
 8 | No explicit anti-forgery protection has been implemented, because we assume SameSite cookies work for you.
 9 | 
10 | See [this](https://leastprivilege.com/2019/01/18/an-alternative-way-to-secure-spas-with-asp-net-core-openid-connect-oauth-2-0-and-proxykit/) blog post for more details.
11 | 


--------------------------------------------------------------------------------
/BFF/src/Api/CrossDomainApi.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk.Web">
 2 | 
 3 |   <PropertyGroup>
 4 |     <TargetFramework>netcoreapp3.1</TargetFramework>
 5 |   </PropertyGroup>
 6 | 
 7 |   <ItemGroup>
 8 |     <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" />
 9 |   </ItemGroup>
10 |   
11 | </Project>


--------------------------------------------------------------------------------
/BFF/src/Api/Program.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.IO;
 4 | using System.Linq;
 5 | using System.Threading.Tasks;
 6 | using Microsoft.AspNetCore;
 7 | using Microsoft.AspNetCore.Hosting;
 8 | using Microsoft.Extensions.Configuration;
 9 | using Microsoft.Extensions.Logging;
10 | 
11 | namespace Api
12 | {
13 |     public class Program
14 |     {
15 |         public static void Main(string[] args)
16 |         {
17 |             CreateWebHostBuilder(args).Build().Run();
18 |         }
19 | 
20 |         public static IWebHostBuilder CreateWebHostBuilder(string[] args) =>
21 |             WebHost.CreateDefaultBuilder(args)
22 |                 .UseStartup<Startup>();
23 |     }
24 | }
25 | 


--------------------------------------------------------------------------------
/BFF/src/Api/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "iisSettings": {
 3 |     "windowsAuthentication": false,
 4 |     "anonymousAuthentication": true,
 5 |     "iisExpress": {
 6 |       "applicationUrl": "http://localhost:29411",
 7 |       "sslPort": 44356
 8 |     }
 9 |   },
10 |   "profiles": {
11 |     "IIS Express": {
12 |       "commandName": "IISExpress",
13 |       "launchBrowser": true,
14 |       "environmentVariables": {
15 |         "ASPNETCORE_ENVIRONMENT": "Development"
16 |       }
17 |     },
18 |     "Api": {
19 |       "commandName": "Project",
20 |       "environmentVariables": {
21 |         "ASPNETCORE_ENVIRONMENT": "Development"
22 |       },
23 |       "applicationUrl": "http://localhost:5001"
24 |     }
25 |   }
26 | }


--------------------------------------------------------------------------------
/BFF/src/Api/Startup.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Builder;
 2 | using Microsoft.Extensions.DependencyInjection;
 3 | using System.IdentityModel.Tokens.Jwt;
 4 | 
 5 | namespace Api
 6 | {
 7 |     public class Startup
 8 |     {
 9 |         public Startup()
10 |         {
11 |             JwtSecurityTokenHandler.DefaultInboundClaimTypeMap.Clear();
12 |         }
13 | 
14 |         public void ConfigureServices(IServiceCollection services)
15 |         {
16 |             services.AddControllers();
17 | 
18 |             services.AddAuthentication("jwt")
19 |                 .AddJwtBearer("jwt", options =>
20 |                 {
21 |                     options.Authority = "https://demo.identityserver.io";
22 |                     options.Audience = "api";
23 |                 });
24 |         }
25 | 
26 |         public void Configure(IApplicationBuilder app)
27 |         {
28 |             app.UseDeveloperExceptionPage();
29 | 
30 |             app.UseRouting();
31 |             app.UseAuthentication();
32 |             app.UseAuthorization();
33 | 
34 |             app.UseEndpoints(endpoints =>
35 |             {
36 |                 endpoints.MapControllers()
37 |                     .RequireAuthorization();
38 |             });
39 |         }
40 |     }
41 | }
42 | 


--------------------------------------------------------------------------------
/BFF/src/Api/TestController.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authorization;
 2 | using Microsoft.AspNetCore.Mvc;
 3 | using System.Linq;
 4 | 
 5 | namespace Api
 6 | {
 7 |     [Route("test")]
 8 |     public class TestController : ControllerBase
 9 |     {
10 |         public IActionResult Get()
11 |         {
12 |             return new JsonResult("OK");
13 |         }
14 | 
15 |         [Route("identity")]
16 |         [Authorize]
17 |         public IActionResult Identity()
18 |         {
19 |             var claims = from c in User.Claims select new { c.Type, c.Value };
20 | 
21 |             return new JsonResult(claims);
22 |         }
23 |     }
24 | }


--------------------------------------------------------------------------------
/BFF/src/Api/appsettings.Development.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Debug",
 5 |       "System": "Information",
 6 |       "Microsoft": "Information"
 7 |     }
 8 |   }
 9 | }
10 | 


--------------------------------------------------------------------------------
/BFF/src/Api/appsettings.json:
--------------------------------------------------------------------------------
1 | {
2 |   "Logging": {
3 |     "LogLevel": {
4 |       "Default": "Warning"
5 |     }
6 |   },
7 |   "AllowedHosts": "*"
8 | }
9 | 


--------------------------------------------------------------------------------
/BFF/src/Host/Controller/UserController.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Mvc;
 2 | using System.Threading.Tasks;
 3 | 
 4 | namespace Host.Controller
 5 | {
 6 |     [Route("user")]
 7 |     public class UserController : ControllerBase
 8 |     {
 9 |         [Route("info")]
10 |         public IActionResult GetUser()
11 |         {
12 |             var user = new { name = User.Identity.Name };
13 | 
14 |             return new JsonResult(user);
15 |         }
16 | 
17 |         [Route("logout")]
18 |         public IActionResult Logout()
19 |         {
20 |             return SignOut("cookies", "oidc");
21 |         }
22 |     }
23 | }


--------------------------------------------------------------------------------
/BFF/src/Host/Host.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk.Web">
 2 | 
 3 |   <PropertyGroup>
 4 |     <TargetFramework>netcoreapp3.1</TargetFramework>
 5 |   </PropertyGroup>
 6 | 
 7 |   <ItemGroup>
 8 |     <PackageReference Include="IdentityModel.AspNetCore" Version="1.0.0-rc.4.1" />
 9 |     <PackageReference Include="ProxyKit" Version="2.2.1" />
10 |   </ItemGroup>
11 | 
12 | </Project>
13 | 


--------------------------------------------------------------------------------
/BFF/src/Host/Internal/StrictSameSiteExternalAuthenticationMiddleware.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authentication;
 2 | using Microsoft.AspNetCore.Http;
 3 | using Microsoft.Extensions.DependencyInjection;
 4 | using System.Linq;
 5 | using System.Threading.Tasks;
 6 | 
 7 | namespace IdentityModel.AspNetCore
 8 | {
 9 |     // Fixes for Safari
10 |     // https://brockallen.com/2019/01/11/same-site-cookies-asp-net-core-and-external-authentication-providers/
11 |     public class StrictSameSiteExternalAuthenticationMiddleware
12 |     {
13 |         private readonly RequestDelegate _next;
14 | 
15 |         public StrictSameSiteExternalAuthenticationMiddleware(RequestDelegate next)
16 |         {
17 |             _next = next;
18 |         }
19 | 
20 |         public async Task Invoke(HttpContext ctx)
21 |         {
22 |             var schemes = ctx.RequestServices.GetRequiredService<IAuthenticationSchemeProvider>();
23 |             var handlers = ctx.RequestServices.GetRequiredService<IAuthenticationHandlerProvider>();
24 | 
25 |             foreach (var scheme in await schemes.GetRequestHandlerSchemesAsync())
26 |             {
27 |                 var handler = await handlers.GetHandlerAsync(ctx, scheme.Name) as IAuthenticationRequestHandler;
28 |                 if (handler != null && await handler.HandleRequestAsync())
29 |                 {
30 |                     // start same-site cookie special handling
31 |                     string location = null;
32 |                     if (ctx.Response.StatusCode == 302)
33 |                     {
34 |                         location = ctx.Response.Headers["location"];
35 |                     }
36 |                     else if (ctx.Request.Method == "GET" && !ctx.Request.Query["skip"].Any())
37 |                     {
38 |                         location = ctx.Request.Path + ctx.Request.QueryString + "&skip=1";
39 |                     }
40 | 
41 |                     if (location != null)
42 |                     {
43 |                         ctx.Response.StatusCode = 200;
44 |                         var html = $@"
45 |                         <html><head>
46 |                             <meta http-equiv='refresh' content='0;url={location}' />
47 |                         </head></html>";
48 |                         await ctx.Response.WriteAsync(html);
49 |                     }
50 |                     // end same-site cookie special handling
51 | 
52 |                     return;
53 |                 }
54 |             }
55 | 
56 |             await _next(ctx);
57 |         }
58 |     }
59 | }
60 | 


--------------------------------------------------------------------------------
/BFF/src/Host/Program.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.IO;
 4 | using System.Linq;
 5 | using System.Threading.Tasks;
 6 | using Microsoft.AspNetCore;
 7 | using Microsoft.AspNetCore.Hosting;
 8 | using Microsoft.Extensions.Configuration;
 9 | using Microsoft.Extensions.Logging;
10 | 
11 | namespace Host
12 | {
13 |     public class Program
14 |     {
15 |         public static void Main(string[] args)
16 |         {
17 |             CreateWebHostBuilder(args).Build().Run();
18 |         }
19 | 
20 |         public static IWebHostBuilder CreateWebHostBuilder(string[] args) =>
21 |             WebHost.CreateDefaultBuilder(args)
22 |                 .UseStartup<Startup>();
23 |     }
24 | }
25 | 


--------------------------------------------------------------------------------
/BFF/src/Host/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "iisSettings": {
 3 |     "windowsAuthentication": false,
 4 |     "anonymousAuthentication": true,
 5 |     "iisExpress": {
 6 |       "applicationUrl": "http://localhost:46651",
 7 |       "sslPort": 44360
 8 |     }
 9 |   },
10 |   "profiles": {
11 |     "IIS Express": {
12 |       "commandName": "IISExpress",
13 |       "launchBrowser": true,
14 |       "environmentVariables": {
15 |         "ASPNETCORE_ENVIRONMENT": "Development"
16 |       }
17 |     },
18 |     "Host": {
19 |       "commandName": "Project",
20 |       "launchBrowser": true,
21 |       "environmentVariables": {
22 |         "ASPNETCORE_ENVIRONMENT": "Development"
23 |       },
24 |       "applicationUrl": "http://localhost:5000"
25 |     }
26 |   }
27 | }


--------------------------------------------------------------------------------
/BFF/src/Host/Startup.cs:
--------------------------------------------------------------------------------
  1 | using IdentityModel.AspNetCore;
  2 | using IdentityModel.Client;
  3 | using Microsoft.AspNetCore.Authentication;
  4 | using Microsoft.AspNetCore.Builder;
  5 | using Microsoft.AspNetCore.Hosting;
  6 | using Microsoft.AspNetCore.Http;
  7 | using Microsoft.Extensions.DependencyInjection;
  8 | using Microsoft.IdentityModel.Tokens;
  9 | using ProxyKit;
 10 | using System;
 11 | using System.IdentityModel.Tokens.Jwt;
 12 | 
 13 | namespace Host
 14 | {
 15 |     public class Startup
 16 |     {
 17 |         public Startup()
 18 |         {
 19 |             JwtSecurityTokenHandler.DefaultInboundClaimTypeMap.Clear();
 20 |         }
 21 | 
 22 |         public void ConfigureServices(IServiceCollection services)
 23 |         {
 24 |             services.AddProxy();
 25 |             services.AddAccessTokenManagement();
 26 | 
 27 |             services.AddControllers();
 28 |             services.AddDistributedMemoryCache();
 29 | 
 30 |             services.AddAuthentication(options =>
 31 |             {
 32 |                 options.DefaultScheme = "cookies";
 33 |                 options.DefaultChallengeScheme = "oidc";
 34 |             })
 35 |             .AddCookie("cookies", options =>
 36 |             {
 37 |                 options.Cookie.Name = "bff";
 38 |                 options.Cookie.SameSite = SameSiteMode.Strict;
 39 |             })
 40 |             .AddOpenIdConnect("oidc", options =>
 41 |             {
 42 |                 options.Authority = "https://demo.identityserver.io";
 43 |                 options.ClientId = "interactive.confidential";
 44 |                 options.ClientSecret = "secret";
 45 | 
 46 |                 options.ResponseType = "code";
 47 |                 options.GetClaimsFromUserInfoEndpoint = true;
 48 |                 options.SaveTokens = true;
 49 | 
 50 |                 options.Scope.Clear();
 51 |                 options.Scope.Add("openid");
 52 |                 options.Scope.Add("profile");
 53 |                 options.Scope.Add("api");
 54 |                 options.Scope.Add("offline_access");
 55 | 
 56 |                 options.TokenValidationParameters = new TokenValidationParameters
 57 |                 {
 58 |                     NameClaimType = "name",
 59 |                     RoleClaimType = "role"
 60 |                 };
 61 |             });
 62 |         }
 63 | 
 64 |         public void Configure(IApplicationBuilder app)
 65 |         {
 66 |             app.UseDeveloperExceptionPage();
 67 | 
 68 |             app.UseMiddleware<StrictSameSiteExternalAuthenticationMiddleware>();
 69 |             app.UseAuthentication();
 70 | 
 71 |             app.Use(async (context, next) =>
 72 |             {
 73 |                 if (!context.User.Identity.IsAuthenticated)
 74 |                 {
 75 |                     await context.ChallengeAsync();
 76 |                     return;
 77 |                 }
 78 | 
 79 |                 await next();
 80 |             });
 81 | 
 82 |             app.Map("/api", api =>
 83 |             {
 84 |                 api.RunProxy(async context =>
 85 |                 {
 86 |                     var forwardContext = context.ForwardTo("http://localhost:5001");
 87 | 
 88 |                     var token = await context.GetUserAccessTokenAsync();
 89 |                     forwardContext.UpstreamRequest.SetBearerToken(token);
 90 | 
 91 |                     return await forwardContext.Send();
 92 |                 });
 93 |             });
 94 | 
 95 |             app.UseDefaultFiles();
 96 |             app.UseStaticFiles();
 97 | 
 98 |             app.UseRouting();
 99 | 
100 |             app.UseAuthentication();
101 |             app.UseAuthorization();
102 | 
103 |             app.UseEndpoints(endpoints =>
104 |                 {
105 |                     endpoints.MapControllers()
106 |                         .RequireAuthorization();
107 |                 });
108 |         }
109 |     }
110 | }


--------------------------------------------------------------------------------
/BFF/src/Host/appsettings.Development.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Debug",
 5 |       "System": "Information",
 6 |       "Microsoft": "Information"
 7 |     }
 8 |   }
 9 | }
10 | 


--------------------------------------------------------------------------------
/BFF/src/Host/appsettings.json:
--------------------------------------------------------------------------------
1 | {
2 |   "Logging": {
3 |     "LogLevel": {
4 |       "Default": "Warning"
5 |     }
6 |   },
7 |   "AllowedHosts": "*"
8 | }
9 | 


--------------------------------------------------------------------------------
/BFF/src/Host/wwwroot/index.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html>
 3 | <head>
 4 |     <meta charset="utf-8" />
 5 |     <title></title>
 6 | </head>
 7 | <body>
 8 |     <div>
 9 |         <!--<button id="cookie">Show cookie content</button>-->
10 |         <button id="front">Call front-end API</button>
11 |         <button id="back">Call back-end API</button>
12 |         <button id="logout">Logout</button>
13 |     </div>
14 |     
15 |     <div>
16 |         <pre id="out"></pre>
17 |     </div>
18 | 
19 |     <script>
20 |         document.getElementById("front").addEventListener("click", callFrontEndApi);
21 |         document.getElementById("back").addEventListener("click", callBackEndApi);
22 |         document.getElementById("logout").addEventListener("click", logout);
23 | 
24 |         function callFrontEndApi() {
25 |             var xhr = new XMLHttpRequest();
26 |             xhr.open("GET", "user/info");
27 |             xhr.onload = function () {
28 |                 if (xhr.status === 200) {
29 |                     log(xhr.status, JSON.parse(xhr.responseText));
30 |                 }
31 |                 else {
32 |                     log("Error: " + xhr.status);
33 |                 }
34 |             }
35 | 
36 |             xhr.send();
37 |         }
38 | 
39 |         function callBackEndApi() {
40 |             var xhr = new XMLHttpRequest();
41 |             xhr.open("GET", "api/test/identity");
42 |             xhr.onload = function () {
43 |                 if (xhr.status === 200) {
44 |                     log(xhr.status, JSON.parse(xhr.responseText));
45 |                 }
46 |                 else {
47 |                     log("Error: " + xhr.status);
48 |                 }
49 |             }
50 | 
51 |             xhr.send();
52 |         }
53 | 
54 |         function logout() {
55 |             window.location = "user/logout";
56 |         }
57 | 
58 |         function log() {
59 |             document.getElementById('out').innerText = '';
60 | 
61 |             Array.prototype.forEach.call(arguments, function (msg) {
62 |                 if (msg instanceof Error) {
63 |                     msg = "Error: " + msg.message;
64 |                 }
65 |                 else if (typeof msg !== 'string') {
66 |                     msg = JSON.stringify(msg, null, 2);
67 |                 }
68 |                 document.getElementById('out').innerHTML += msg + '\r\n';
69 |             });
70 |         }
71 | 
72 |     </script>
73 | 
74 | </body>
75 | </html>


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer.sln:
--------------------------------------------------------------------------------
 1 | 
 2 | Microsoft Visual Studio Solution File, Format Version 12.00
 3 | # Visual Studio Version 16
 4 | VisualStudioVersion = 16.0.29519.181
 5 | MinimumVisualStudioVersion = 10.0.40219.1
 6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "BlazorServer", "BlazorServer\BlazorServer.csproj", "{83E3CBA5-2529-495E-B033-864974E6FA8F}"
 7 | EndProject
 8 | Global
 9 | 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
10 | 		Debug|Any CPU = Debug|Any CPU
11 | 		Release|Any CPU = Release|Any CPU
12 | 	EndGlobalSection
13 | 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
14 | 		{83E3CBA5-2529-495E-B033-864974E6FA8F}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
15 | 		{83E3CBA5-2529-495E-B033-864974E6FA8F}.Debug|Any CPU.Build.0 = Debug|Any CPU
16 | 		{83E3CBA5-2529-495E-B033-864974E6FA8F}.Release|Any CPU.ActiveCfg = Release|Any CPU
17 | 		{83E3CBA5-2529-495E-B033-864974E6FA8F}.Release|Any CPU.Build.0 = Release|Any CPU
18 | 	EndGlobalSection
19 | 	GlobalSection(SolutionProperties) = preSolution
20 | 		HideSolutionNode = FALSE
21 | 	EndGlobalSection
22 | 	GlobalSection(ExtensibilityGlobals) = postSolution
23 | 		SolutionGuid = {53F90B15-D47C-4ED2-8030-D918EFC242E6}
24 | 	EndGlobalSection
25 | EndGlobal
26 | 


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/App.razor:
--------------------------------------------------------------------------------
 1 | <CascadingAuthenticationState>
 2 |     <Router AppAssembly="@typeof(Program).Assembly">
 3 |         <Found Context="routeData">
 4 |             <AuthorizeRouteView RouteData="@routeData" DefaultLayout="@typeof(MainLayout)" />
 5 |         </Found>
 6 |         <NotFound>
 7 |             <LayoutView Layout="@typeof(MainLayout)">
 8 |                 <p>Sorry, there's nothing at this address.</p>
 9 |             </LayoutView>
10 |         </NotFound>
11 |     </Router>
12 | </CascadingAuthenticationState>
13 | 


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/BlazorServer.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk.Web">
 2 | 
 3 |   <PropertyGroup>
 4 |     <TargetFramework>netcoreapp3.1</TargetFramework>
 5 |     <WebProject_DirectoryAccessLevelKey>0</WebProject_DirectoryAccessLevelKey>
 6 |   </PropertyGroup>
 7 | 
 8 |   <ItemGroup>
 9 |     <PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="3.1.0" />
10 |     <PackageReference Include="Microsoft.Extensions.Logging.Debug" Version="3.1.0" />
11 |     <PackageReference Include="Microsoft.VisualStudio.Web.CodeGeneration.Design" Version="3.1.0" />
12 |   </ItemGroup>
13 | 
14 | </Project>
15 | 


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/Pages/Error.razor:
--------------------------------------------------------------------------------
 1 | @page "/error"
 2 | 
 3 | 
 4 | <h1 class="text-danger">Error.</h1>
 5 | <h2 class="text-danger">An error occurred while processing your request.</h2>
 6 | 
 7 | <h3>Development Mode</h3>
 8 | <p>
 9 |     Swapping to <strong>Development</strong> environment will display more detailed information about the error that occurred.
10 | </p>
11 | <p>
12 |     <strong>The Development environment shouldn't be enabled for deployed applications.</strong>
13 |     It can result in displaying sensitive information from exceptions to end users.
14 |     For local debugging, enable the <strong>Development</strong> environment by setting the <strong>ASPNETCORE_ENVIRONMENT</strong> environment variable to <strong>Development</strong>
15 |     and restarting the app.
16 | </p>


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/Pages/Index.razor:
--------------------------------------------------------------------------------
1 | @page "/"
2 | 
3 | <h1>Blazor Server</h1>


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/Pages/Login.cshtml:
--------------------------------------------------------------------------------
1 | @page
2 | @model BlazorServer.LoginModel
3 | @{
4 |     ViewData["Title"] = "Login";
5 | }
6 | 
7 | <h1>Login</h1>
8 | 
9 | 


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/Pages/Login.cshtml.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authentication;
 2 | using Microsoft.AspNetCore.Mvc.RazorPages;
 3 | using System.Threading.Tasks;
 4 | 
 5 | namespace BlazorServer
 6 | {
 7 |     public class LoginModel : PageModel
 8 |     {
 9 |         public async Task OnGet()
10 |         {
11 |             if (!HttpContext.User.Identity.IsAuthenticated)
12 |             {
13 |                 await HttpContext.ChallengeAsync(new AuthenticationProperties { RedirectUri = "/secure" });
14 |             }
15 |             else
16 |             {
17 |                 Response.Redirect("/");
18 |             }
19 |         }
20 |     }
21 | }


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/Pages/Logout.cshtml:
--------------------------------------------------------------------------------
1 | @page
2 | @model BlazorServer.LogoutModel
3 | @{
4 |     ViewData["Title"] = "Logout";
5 | }
6 | 
7 | <h1>Logout</h1>
8 | 
9 | 


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/Pages/Logout.cshtml.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authentication;
 2 | using Microsoft.AspNetCore.Mvc.RazorPages;
 3 | using System.Threading.Tasks;
 4 | 
 5 | namespace BlazorServer
 6 | {
 7 |     public class LogoutModel : PageModel
 8 |     {
 9 |         public async Task OnGet()
10 |         {
11 |             if (HttpContext.User.Identity.IsAuthenticated)
12 |             {
13 |                 await HttpContext.SignOutAsync("cookie");
14 |                 await HttpContext.SignOutAsync("oidc");
15 |             }
16 |             else
17 |             {
18 |                 Response.Redirect("/");
19 |             }
20 |         }
21 |     }
22 | }


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/Pages/Secure.razor:
--------------------------------------------------------------------------------
 1 | @page "/secure"
 2 | @inject AuthenticationStateProvider AuthenticationStateProvider
 3 | @attribute [Authorize]
 4 | 
 5 | <h1>Claims</h1>
 6 | 
 7 | <dl>
 8 |     @foreach (var claim in GetUser().Result.Claims)
 9 |     {
10 |         <dt>@claim.Type</dt>
11 |         <dd>@claim.Value</dd>
12 |     }
13 | </dl>
14 | 
15 | 
16 | @code {
17 |         private async Task<System.Security.Claims.ClaimsPrincipal> GetUser()
18 |         {
19 |             var authState = await AuthenticationStateProvider.GetAuthenticationStateAsync();
20 |             return authState.User;
21 |         }
22 | }


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/Pages/_Host.cshtml:
--------------------------------------------------------------------------------
 1 | @page "/"
 2 | @namespace BlazorServer.Pages
 3 | @addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
 4 | @{
 5 |     Layout = null;
 6 | }
 7 | 
 8 | <!DOCTYPE html>
 9 | <html lang="en">
10 | <head>
11 |     <meta charset="utf-8" />
12 |     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
13 |     <title>BlazorServer</title>
14 |     <base href="~/" />
15 |     <link rel="stylesheet" href="css/bootstrap/bootstrap.min.css" />
16 |     <link href="css/site.css" rel="stylesheet" />
17 | </head>
18 | <body>
19 |     <app>
20 |         <component type="typeof(App)" render-mode="ServerPrerendered" />
21 |     </app>
22 | 
23 |     <div id="blazor-error-ui">
24 |         <environment include="Staging,Production">
25 |             An error has occurred. This application may no longer respond until reloaded.
26 |         </environment>
27 |         <environment include="Development">
28 |             An unhandled exception has occurred. See browser dev tools for details.
29 |         </environment>
30 |         <a href="" class="reload">Reload</a>
31 |         <a class="dismiss">🗙</a>
32 |     </div>
33 | 
34 |     <script src="_framework/blazor.server.js"></script>
35 | </body>
36 | </html>
37 | 


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/Program.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Hosting;
 2 | using Microsoft.Extensions.Hosting;
 3 | 
 4 | namespace BlazorServer
 5 | {
 6 |     public class Program
 7 |     {
 8 |         public static void Main(string[] args)
 9 |         {
10 |             CreateHostBuilder(args).Build().Run();
11 |         }
12 | 
13 |         public static IHostBuilder CreateHostBuilder(string[] args) =>
14 |             Host.CreateDefaultBuilder(args)
15 |                 .ConfigureWebHostDefaults(webBuilder =>
16 |                 {
17 |                     webBuilder.UseStartup<Startup>();
18 |                 });
19 |     }
20 | }
21 | 


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "iisSettings": {
 3 |     "windowsAuthentication": false,
 4 |     "anonymousAuthentication": true,
 5 |     "iisExpress": {
 6 |       "applicationUrl": "http://localhost:65233",
 7 |       "sslPort": 44310
 8 |     }
 9 |   },
10 |   "profiles": {
11 |     "IIS Express": {
12 |       "commandName": "IISExpress",
13 |       "launchBrowser": true,
14 |       "environmentVariables": {
15 |         "ASPNETCORE_ENVIRONMENT": "Development"
16 |       }
17 |     },
18 |     "BlazorServer": {
19 |       "commandName": "Project",
20 |       "launchBrowser": true,
21 |       "applicationUrl": "https://localhost:5001;http://localhost:5000",
22 |       "environmentVariables": {
23 |         "ASPNETCORE_ENVIRONMENT": "Development"
24 |       }
25 |     }
26 |   }
27 | }
28 | 


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/Shared/LoginDisplay.razor:
--------------------------------------------------------------------------------
1 | <AuthorizeView>
2 |     <Authorized>
3 |         Hello, @context.User.Identity.Name!
4 |     </Authorized>
5 | </AuthorizeView>
6 | 


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/Shared/MainLayout.razor:
--------------------------------------------------------------------------------
 1 | @inherits LayoutComponentBase
 2 | 
 3 | <div class="sidebar">
 4 |     <NavMenu />
 5 | </div>
 6 | 
 7 | <div class="main">
 8 |     <div class="top-row px-4 auth">
 9 |         <LoginDisplay />
10 |     </div>
11 | 
12 |     <div class="content px-4">
13 |         @Body
14 |     </div>
15 | </div>
16 | 


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/Shared/NavMenu.razor:
--------------------------------------------------------------------------------
 1 | <div class="top-row pl-4 navbar navbar-dark">
 2 |     <a class="navbar-brand" href="">BlazorServer</a>
 3 |     
 4 |     <button class="navbar-toggler" @onclick="ToggleNavMenu">
 5 |         <span class="navbar-toggler-icon"></span>
 6 |     </button>
 7 | </div>
 8 | 
 9 |     <div class="@NavMenuCssClass" @onclick="ToggleNavMenu">
10 | 
11 |         <ul class="nav flex-column">
12 |             <li class="nav-item px-3">
13 |                 <NavLink class="nav-link" href="" Match="NavLinkMatch.All">
14 |                     <span class="oi oi-home" aria-hidden="true"></span> Home
15 |                 </NavLink>
16 | 
17 |                 <AuthorizeView>
18 |                     <Authorized>
19 |                         <NavLink class="nav-link" href="secure" Match="NavLinkMatch.All">
20 |                             <span class="oi oi-home" aria-hidden="true"></span> Secure
21 |                         </NavLink>
22 |                         <NavLink class="nav-link" href="logout" Match="NavLinkMatch.All">
23 |                             <span class="oi oi-home" aria-hidden="true"></span> Logout
24 |                         </NavLink>
25 |                     </Authorized>
26 | 
27 |                     <NotAuthorized>
28 |                         <NavLink class="nav-link" href="login" Match="NavLinkMatch.All">
29 |                             <span class="oi oi-home" aria-hidden="true"></span> Login
30 |                         </NavLink>
31 |                     </NotAuthorized>
32 |                 </AuthorizeView>
33 |             </li>
34 |         </ul>
35 |     </div>
36 | 
37 | 
38 | @code {
39 |     private bool collapseNavMenu = true;
40 | 
41 |     private string NavMenuCssClass => collapseNavMenu ? "collapse" : null;
42 | 
43 |     private void ToggleNavMenu()
44 |     {
45 |         collapseNavMenu = !collapseNavMenu;
46 |     }
47 | }
48 | 


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/Startup.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authorization;
 2 | using Microsoft.AspNetCore.Builder;
 3 | using Microsoft.AspNetCore.Mvc.Authorization;
 4 | using Microsoft.Extensions.DependencyInjection;
 5 | using Microsoft.IdentityModel.Tokens;
 6 | using System.IdentityModel.Tokens.Jwt;
 7 | 
 8 | namespace BlazorServer
 9 | {
10 |     public class Startup
11 |     {
12 |         public void ConfigureServices(IServiceCollection services)
13 |         {
14 |             JwtSecurityTokenHandler.DefaultMapInboundClaims = false;
15 | 
16 |             services.AddAuthentication(options =>
17 |             {
18 |                 options.DefaultScheme = "cookie";
19 |                 options.DefaultChallengeScheme = "oidc";
20 |             })
21 |                 .AddCookie("cookie")
22 |                 .AddOpenIdConnect("oidc", options =>
23 |                 {
24 |                     options.Authority = "https://demo.identityserver.io";
25 | 
26 |                     options.ClientId = "interactive.confidential";
27 |                     options.ClientSecret = "secret";
28 | 
29 |                     options.ResponseType = "code";
30 |                     options.GetClaimsFromUserInfoEndpoint = true;
31 |                     options.SaveTokens = true;
32 | 
33 |                     options.TokenValidationParameters = new TokenValidationParameters
34 |                     {
35 |                         NameClaimType = "name"
36 |                     };
37 |                 });
38 | 
39 | 
40 |             services.AddControllersWithViews();
41 |             services.AddRazorPages();
42 |             services.AddServerSideBlazor();
43 |         }
44 | 
45 |         public void Configure(IApplicationBuilder app)
46 |         {
47 |             app.UseDeveloperExceptionPage();
48 | 
49 |             app.UseHttpsRedirection();
50 |             app.UseStaticFiles();
51 | 
52 |             app.UseRouting();
53 | 
54 |             app.UseAuthentication();
55 |             app.UseAuthorization();
56 | 
57 |             app.UseEndpoints(endpoints =>
58 |             {
59 |                 endpoints.MapControllers();
60 |                 endpoints.MapBlazorHub();
61 |                 endpoints.MapFallbackToPage("/_Host");
62 |             });
63 |         }
64 |     }
65 | }
66 | 


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/_Imports.razor:
--------------------------------------------------------------------------------
 1 | @using System.Net.Http
 2 | @using Microsoft.AspNetCore.Authorization
 3 | @using Microsoft.AspNetCore.Components.Authorization
 4 | @using Microsoft.AspNetCore.Components.Forms
 5 | @using Microsoft.AspNetCore.Components.Routing
 6 | @using Microsoft.AspNetCore.Components.Web
 7 | @using Microsoft.JSInterop
 8 | @using BlazorServer
 9 | @using BlazorServer.Shared
10 | 


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/appsettings.Development.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "DetailedErrors": true,
 3 |   "Logging": {
 4 |     "LogLevel": {
 5 |       "Default": "Information",
 6 |       "Microsoft": "Warning",
 7 |       "Microsoft.Hosting.Lifetime": "Information"
 8 |     }
 9 |   }
10 | }
11 | 


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/appsettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Information",
 5 |       "Microsoft": "Warning",
 6 |       "Microsoft.Hosting.Lifetime": "Information"
 7 |     }
 8 |   },
 9 |   "AllowedHosts": "*"
10 | }
11 | 


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/wwwroot/css/open-iconic/ICON-LICENSE:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | 
 3 | Copyright (c) 2014 Waybury
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy
 6 | of this software and associated documentation files (the "Software"), to deal
 7 | in the Software without restriction, including without limitation the rights
 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 | 
12 | The above copyright notice and this permission notice shall be included in
13 | all copies or substantial portions of the Software.
14 | 
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
21 | THE SOFTWARE.


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/wwwroot/css/open-iconic/font/fonts/open-iconic.eot:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/leastprivilege/AspNetCoreSecuritySamples/79848a6e956ecafc858547353459f0c5b161afa9/BlazorServer/BlazorServer/wwwroot/css/open-iconic/font/fonts/open-iconic.eot


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/wwwroot/css/open-iconic/font/fonts/open-iconic.otf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/leastprivilege/AspNetCoreSecuritySamples/79848a6e956ecafc858547353459f0c5b161afa9/BlazorServer/BlazorServer/wwwroot/css/open-iconic/font/fonts/open-iconic.otf


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/wwwroot/css/open-iconic/font/fonts/open-iconic.ttf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/leastprivilege/AspNetCoreSecuritySamples/79848a6e956ecafc858547353459f0c5b161afa9/BlazorServer/BlazorServer/wwwroot/css/open-iconic/font/fonts/open-iconic.ttf


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/wwwroot/css/open-iconic/font/fonts/open-iconic.woff:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/leastprivilege/AspNetCoreSecuritySamples/79848a6e956ecafc858547353459f0c5b161afa9/BlazorServer/BlazorServer/wwwroot/css/open-iconic/font/fonts/open-iconic.woff


--------------------------------------------------------------------------------
/BlazorServer/BlazorServer/wwwroot/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/leastprivilege/AspNetCoreSecuritySamples/79848a6e956ecafc858547353459f0c5b161afa9/BlazorServer/BlazorServer/wwwroot/favicon.ico


--------------------------------------------------------------------------------
/ClientCredentialsFlow/ClientCredentialsFlow.sln:
--------------------------------------------------------------------------------
 1 | 
 2 | Microsoft Visual Studio Solution File, Format Version 12.00
 3 | # Visual Studio 15
 4 | VisualStudioVersion = 15.0.26124.0
 5 | MinimumVisualStudioVersion = 15.0.26124.0
 6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "ClientCredentialsFlow", "src\ClientCredentialsFlow.csproj", "{83D489A0-BF58-441E-9C6E-7426A2D576FE}"
 7 | EndProject
 8 | Global
 9 | 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
10 | 		Debug|Any CPU = Debug|Any CPU
11 | 		Debug|x64 = Debug|x64
12 | 		Debug|x86 = Debug|x86
13 | 		Release|Any CPU = Release|Any CPU
14 | 		Release|x64 = Release|x64
15 | 		Release|x86 = Release|x86
16 | 	EndGlobalSection
17 | 	GlobalSection(SolutionProperties) = preSolution
18 | 		HideSolutionNode = FALSE
19 | 	EndGlobalSection
20 | 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
21 | 		{83D489A0-BF58-441E-9C6E-7426A2D576FE}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
22 | 		{83D489A0-BF58-441E-9C6E-7426A2D576FE}.Debug|Any CPU.Build.0 = Debug|Any CPU
23 | 		{83D489A0-BF58-441E-9C6E-7426A2D576FE}.Debug|x64.ActiveCfg = Debug|Any CPU
24 | 		{83D489A0-BF58-441E-9C6E-7426A2D576FE}.Debug|x64.Build.0 = Debug|Any CPU
25 | 		{83D489A0-BF58-441E-9C6E-7426A2D576FE}.Debug|x86.ActiveCfg = Debug|Any CPU
26 | 		{83D489A0-BF58-441E-9C6E-7426A2D576FE}.Debug|x86.Build.0 = Debug|Any CPU
27 | 		{83D489A0-BF58-441E-9C6E-7426A2D576FE}.Release|Any CPU.ActiveCfg = Release|Any CPU
28 | 		{83D489A0-BF58-441E-9C6E-7426A2D576FE}.Release|Any CPU.Build.0 = Release|Any CPU
29 | 		{83D489A0-BF58-441E-9C6E-7426A2D576FE}.Release|x64.ActiveCfg = Release|Any CPU
30 | 		{83D489A0-BF58-441E-9C6E-7426A2D576FE}.Release|x64.Build.0 = Release|Any CPU
31 | 		{83D489A0-BF58-441E-9C6E-7426A2D576FE}.Release|x86.ActiveCfg = Release|Any CPU
32 | 		{83D489A0-BF58-441E-9C6E-7426A2D576FE}.Release|x86.Build.0 = Release|Any CPU
33 | 	EndGlobalSection
34 | EndGlobal
35 | 


--------------------------------------------------------------------------------
/ClientCredentialsFlow/src/ClientCredentialsFlow.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk">
 2 | 
 3 |   <PropertyGroup>
 4 |     <OutputType>Exe</OutputType>
 5 |     <TargetFramework>netcoreapp3.0</TargetFramework>
 6 |   </PropertyGroup>
 7 | 
 8 |   <ItemGroup>
 9 |     <PackageReference Include="IdentityModel" Version="4.0.0" />
10 |   </ItemGroup>
11 | 
12 | </Project>
13 | 


--------------------------------------------------------------------------------
/ClientCredentialsFlow/src/Program.cs:
--------------------------------------------------------------------------------
 1 | using IdentityModel.Client;
 2 | using System;
 3 | using System.Net.Http;
 4 | using System.Threading.Tasks;
 5 | 
 6 | namespace ClientCredentialsFlow
 7 | {
 8 |     class Program
 9 |     {
10 |         static DiscoveryCache Cache = new DiscoveryCache("https://demo.identityserver.io");
11 | 
12 |         static async Task Main(string[] args)
13 |         {
14 |             var disco = await Cache.GetAsync();
15 |             if (disco.IsError) throw new Exception(disco.Error);
16 | 
17 |             var tokenClient = new HttpClient();
18 |             var tokenResponse = await tokenClient.RequestClientCredentialsTokenAsync(new ClientCredentialsTokenRequest
19 |             {
20 |                 Address = disco.TokenEndpoint,
21 |                 ClientId = "m2m",
22 |                 ClientSecret = "secret"
23 |             });
24 | 
25 |             if (tokenResponse.IsError) throw new Exception(tokenResponse.Error);
26 | 
27 |             // call API
28 |             var apiClient = new HttpClient();
29 |             apiClient.SetBearerToken(tokenResponse.AccessToken);
30 | 
31 |             Console.WriteLine(await apiClient.GetStringAsync("https://demo.identityserver.io/api/test"));
32 |         }
33 |     }
34 | }
35 | 


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/AspNetCoreSecurity.csproj:
--------------------------------------------------------------------------------
1 | <Project Sdk="Microsoft.NET.Sdk.Web">
2 |   
3 |   <PropertyGroup>
4 |     <TargetFramework>netcoreapp3.0</TargetFramework>
5 |   </PropertyGroup>
6 | 
7 | </Project>


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/Controllers/HomeController.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Mvc;
 2 | using Microsoft.AspNetCore.DataProtection;
 3 | 
 4 | namespace AspNetCoreAuthentication.Controllers
 5 | {
 6 |     public class HomeController : Controller
 7 |     {
 8 |         private IDataProtector _protector;
 9 | 
10 |         public HomeController(IDataProtectionProvider provider)
11 |         {
12 |             _protector = provider.CreateProtector(GetType().FullName);
13 |         }
14 | 
15 |         public IActionResult Index()
16 |         {
17 |             return View();
18 |         }
19 | 
20 |         public IActionResult Protect(Data data)
21 |         {
22 |             data.CipherText = _protector.Protect(data.PlainText);
23 | 
24 |             return View("index", data);
25 |         }
26 | 
27 |         public IActionResult Unprotect(Data data)
28 |         {
29 |             data.PlainText = _protector.Unprotect(data.CipherText);
30 | 
31 |             return View("index", data);
32 |         }
33 |     }
34 | 
35 |     public class Data
36 |     {
37 |         public string PlainText { get; set; }
38 |         public string CipherText { get; set; }
39 |     }
40 | }


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/Program.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Hosting;
 2 | using Microsoft.Extensions.Hosting;
 3 | 
 4 | namespace AspNetCoreSecurity
 5 | {
 6 |     public class Program
 7 |     {
 8 |         public static void Main(string[] args)
 9 |         {
10 |             CreateHostBuilder(args).Build().Run();
11 |         }
12 | 
13 |         public static IHostBuilder CreateHostBuilder(string[] args) =>
14 |             Host.CreateDefaultBuilder(args)
15 |                 .ConfigureWebHostDefaults(webBuilder =>
16 |                 {
17 |                     webBuilder.UseStartup<Startup>();
18 |                 });
19 |     }
20 | }


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "iisSettings": {
 3 |     "windowsAuthentication": false, 
 4 |     "anonymousAuthentication": true, 
 5 |     "iisExpress": {
 6 |       "applicationUrl": "http://localhost:60275",
 7 |       "sslPort": 44305
 8 |     }
 9 |   },
10 |   "profiles": {
11 |     "IIS Express": {
12 |       "commandName": "IISExpress",
13 |       "launchBrowser": true,
14 |       "environmentVariables": {
15 |         "ASPNETCORE_ENVIRONMENT": "Development"
16 |       }
17 |     },
18 |     "AspNetCoreSecurity": {
19 |       "commandName": "Project",
20 |       "launchBrowser": true,
21 |       "applicationUrl": "https://localhost:5001;http://localhost:5000",
22 |       "environmentVariables": {
23 |         "ASPNETCORE_ENVIRONMENT": "Development"
24 |       }
25 |     }
26 |   }
27 | }
28 | 


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/Startup.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Builder;
 2 | using Microsoft.AspNetCore.DataProtection;
 3 | using Microsoft.Extensions.DependencyInjection;
 4 | using System.IO;
 5 | 
 6 | namespace AspNetCoreSecurity
 7 | {
 8 |     public class Startup
 9 |     {
10 |         public void ConfigureServices(IServiceCollection services)
11 |         {
12 |             services.AddControllersWithViews();
13 | 
14 |             // never persist key store to local directory, just for demo purposes
15 |             services.AddDataProtection()
16 |                 .SetApplicationName("DataProtectionDemo")
17 |                 .ProtectKeysWithDpapi()
18 |                 .PersistKeysToFileSystem(new DirectoryInfo(Directory.GetCurrentDirectory()));
19 |         }
20 | 
21 |         public void Configure(IApplicationBuilder app)
22 |         {
23 |             app.UseDeveloperExceptionPage();
24 |             app.UseStaticFiles();
25 |             
26 |             app.UseRouting();
27 | 
28 |             app.UseEndpoints(endpoints =>
29 |             {
30 |                 endpoints.MapDefaultControllerRoute();
31 |             });
32 |         }
33 |     }
34 | }


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/Views/Home/Index.cshtml:
--------------------------------------------------------------------------------
 1 | @model AspNetCoreAuthentication.Controllers.Data
 2 | 
 3 | @{
 4 |     ViewData["Title"] = "Home Page";
 5 | }
 6 | 
 7 | <div class="row">
 8 |     <div class="col-md-6">
 9 |         <form asp-controller="Home" asp-action="Protect" method="post" class="form-horizontal" role="form">
10 |             <h2>Protect</h2>
11 |             <p>
12 |                 <input asp-for="PlainText" class="form-control input-lg" autocomplete="off" placeholder="Un-encrypted data" />
13 |             </p>
14 |             <p>
15 |                 <input type="submit" class="btn btn-primary" value="Protect" />
16 |             </p>
17 |         </form>
18 |     </div>
19 |     <div class="col-md-6">
20 |         <form asp-controller="Home" asp-action="Unprotect" method="post" class="form-horizontal" role="form">
21 |             <h2>Unprotect</h2>
22 |             <p>
23 |                 <input asp-for="CipherText" class="form-control input-lg" autocomplete="off" placeholder="Encrypted data" />
24 |             </p>
25 |             <p>
26 |                 <input type="submit" class="btn btn-primary" value="Unprotect" />
27 |             </p>
28 |         </form>
29 |     </div>
30 | </div>
31 | 


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/Views/Shared/_ValidationScriptsPartial.cshtml:
--------------------------------------------------------------------------------
 1 | <environment include="Development">
 2 |     <script src="~/lib/jquery-validation/dist/jquery.validate.js"></script>
 3 |     <script src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.js"></script>
 4 | </environment>
 5 | <environment exclude="Development">
 6 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.17.0/jquery.validate.min.js"
 7 |             asp-fallback-src="~/lib/jquery-validation/dist/jquery.validate.min.js"
 8 |             asp-fallback-test="window.jQuery && window.jQuery.validator"
 9 |             crossorigin="anonymous"
10 |             integrity="sha256-F6h55Qw6sweK+t7SiOJX+2bpSAa3b/fnlrVCJvmEj1A=">
11 |     </script>
12 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-validation-unobtrusive/3.2.11/jquery.validate.unobtrusive.min.js"
13 |             asp-fallback-src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.min.js"
14 |             asp-fallback-test="window.jQuery && window.jQuery.validator && window.jQuery.validator.unobtrusive"
15 |             crossorigin="anonymous"
16 |             integrity="sha256-9GycpJnliUjJDVDqP0UEu/bsm9U+3dnQUH8+3W10vkY=">
17 |     </script>
18 | </environment>
19 | 


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/Views/_ViewImports.cshtml:
--------------------------------------------------------------------------------
1 | @using AspNetCoreSecurity
2 | @addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
3 | 


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/Views/_ViewStart.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     Layout = "_Layout";
3 | }
4 | 


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/appsettings.Development.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Debug",
 5 |       "System": "Information",
 6 |       "Microsoft": "Information"
 7 |     }
 8 |   }
 9 | }
10 | 


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/appsettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Information",
 5 |       "Microsoft": "Warning",
 6 |       "Microsoft.Hosting.Lifetime": "Information"
 7 |     }
 8 |   },
 9 |   "AllowedHosts": "*"
10 | }
11 | 


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/wwwroot/css/site.css:
--------------------------------------------------------------------------------
 1 | /* Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
 2 | for details on configuring this project to bundle and minify static web assets. */
 3 | 
 4 | a.navbar-brand {
 5 |   white-space: normal;
 6 |   text-align: center;
 7 |   word-break: break-all;
 8 | }
 9 | 
10 | /* Provide sufficient contrast against white background */
11 | a {
12 |   color: #0366d6;
13 | }
14 | 
15 | .btn-primary {
16 |   color: #fff;
17 |   background-color: #1b6ec2;
18 |   border-color: #1861ac;
19 | }
20 | 
21 | .nav-pills .nav-link.active, .nav-pills .show > .nav-link {
22 |   color: #fff;
23 |   background-color: #1b6ec2;
24 |   border-color: #1861ac;
25 | }
26 | 
27 | /* Sticky footer styles
28 | -------------------------------------------------- */
29 | html {
30 |   font-size: 14px;
31 | }
32 | @media (min-width: 768px) {
33 |   html {
34 |     font-size: 16px;
35 |   }
36 | }
37 | 
38 | .border-top {
39 |   border-top: 1px solid #e5e5e5;
40 | }
41 | .border-bottom {
42 |   border-bottom: 1px solid #e5e5e5;
43 | }
44 | 
45 | .box-shadow {
46 |   box-shadow: 0 .25rem .75rem rgba(0, 0, 0, .05);
47 | }
48 | 
49 | button.accept-policy {
50 |   font-size: 1rem;
51 |   line-height: inherit;
52 | }
53 | 
54 | /* Sticky footer styles
55 | -------------------------------------------------- */
56 | html {
57 |   position: relative;
58 |   min-height: 100%;
59 | }
60 | 
61 | body {
62 |   /* Margin bottom by footer height */
63 |   margin-bottom: 60px;
64 | }
65 | .footer {
66 |   position: absolute;
67 |   bottom: 0;
68 |   width: 100%;
69 |   white-space: nowrap;
70 |   line-height: 60px; /* Vertically center the text there */
71 | }
72 | 


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/wwwroot/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/leastprivilege/AspNetCoreSecuritySamples/79848a6e956ecafc858547353459f0c5b161afa9/DataProtection/AspNetCoreSecurity/wwwroot/favicon.ico


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/wwwroot/js/site.js:
--------------------------------------------------------------------------------
1 | // Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
2 | // for details on configuring this project to bundle and minify static web assets.
3 | 
4 | // Write your JavaScript code.
5 | 


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/wwwroot/lib/bootstrap/LICENSE:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | 
 3 | Copyright (c) 2011-2018 Twitter, Inc.
 4 | Copyright (c) 2011-2018 The Bootstrap Authors
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.min.css:
--------------------------------------------------------------------------------
1 | /*!
2 |  * Bootstrap Reboot v4.3.1 (https://getbootstrap.com/)
3 |  * Copyright 2011-2019 The Bootstrap Authors
4 |  * Copyright 2011-2019 Twitter, Inc.
5 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
6 |  * Forked from Normalize.css, licensed MIT (https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
7 |  */*,::after,::before{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}article,aside,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}[tabindex="-1"]:focus{outline:0!important}hr{box-sizing:content-box;height:0;overflow:visible}h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem}p{margin-top:0;margin-bottom:1rem}abbr[data-original-title],abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#007bff;text-decoration:none;background-color:transparent}a:hover{color:#0056b3;text-decoration:underline}a:not([href]):not([tabindex]){color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus,a:not([href]):not([tabindex]):hover{color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus{outline:0}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;font-size:1em}pre{margin-top:0;margin-bottom:1rem;overflow:auto}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}svg{overflow:hidden;vertical-align:middle}table{border-collapse:collapse}caption{padding-top:.75rem;padding-bottom:.75rem;color:#6c757d;text-align:left;caption-side:bottom}th{text-align:inherit}label{display:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=reset]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor:pointer}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{padding:0;border-style:none}input[type=checkbox],input[type=radio]{box-sizing:border-box;padding:0}input[type=date],input[type=datetime-local],input[type=month],input[type=time]{-webkit-appearance:listbox}textarea{overflow:auto;resize:vertical}fieldset{min-width:0;padding:0;margin:0;border:0}legend{display:block;width:100%;max-width:100%;padding:0;margin-bottom:.5rem;font-size:1.5rem;line-height:inherit;color:inherit;white-space:normal}progress{vertical-align:baseline}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{outline-offset:-2px;-webkit-appearance:none}[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}output{display:inline-block}summary{display:list-item;cursor:pointer}template{display:none}[hidden]{display:none!important}
8 | /*# sourceMappingURL=bootstrap-reboot.min.css.map */


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/wwwroot/lib/jquery-validation-unobtrusive/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright (c) .NET Foundation. All rights reserved.
 2 | 
 3 | Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 4 | these files except in compliance with the License. You may obtain a copy of the
 5 | License at
 6 | 
 7 | http://www.apache.org/licenses/LICENSE-2.0
 8 | 
 9 | Unless required by applicable law or agreed to in writing, software distributed
10 | under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
11 | CONDITIONS OF ANY KIND, either express or implied. See the License for the
12 | specific language governing permissions and limitations under the License.
13 | 


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/wwwroot/lib/jquery-validation/LICENSE.md:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | =====================
 3 | 
 4 | Copyright Jörn Zaefferer
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/DataProtection/AspNetCoreSecurity/wwwroot/lib/jquery/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright JS Foundation and other contributors, https://js.foundation/
 2 | 
 3 | This software consists of voluntary contributions made by many
 4 | individuals. For exact contribution history, see the revision history
 5 | available at https://github.com/jquery/jquery
 6 | 
 7 | The following license applies to all parts of this software except as
 8 | documented below:
 9 | 
10 | ====
11 | 
12 | Permission is hereby granted, free of charge, to any person obtaining
13 | a copy of this software and associated documentation files (the
14 | "Software"), to deal in the Software without restriction, including
15 | without limitation the rights to use, copy, modify, merge, publish,
16 | distribute, sublicense, and/or sell copies of the Software, and to
17 | permit persons to whom the Software is furnished to do so, subject to
18 | the following conditions:
19 | 
20 | The above copyright notice and this permission notice shall be
21 | included in all copies or substantial portions of the Software.
22 | 
23 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
24 | EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
25 | MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
26 | NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
27 | LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
28 | OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
29 | WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
30 | 
31 | ====
32 | 
33 | All files located in the node_modules and external directories are
34 | externally maintained libraries used by this software which have their
35 | own licenses; we recommend you read them, as their terms may differ from
36 | the terms above.
37 | 


--------------------------------------------------------------------------------
/DataProtection/DataProtection.sln:
--------------------------------------------------------------------------------
 1 | 
 2 | Microsoft Visual Studio Solution File, Format Version 12.00
 3 | # Visual Studio Version 16
 4 | VisualStudioVersion = 16.0.29020.237
 5 | MinimumVisualStudioVersion = 10.0.40219.1
 6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "AspNetCoreSecurity", "AspNetCoreSecurity\AspNetCoreSecurity.csproj", "{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}"
 7 | EndProject
 8 | Global
 9 | 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
10 | 		Debug|Any CPU = Debug|Any CPU
11 | 		Release|Any CPU = Release|Any CPU
12 | 	EndGlobalSection
13 | 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
14 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
15 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Debug|Any CPU.Build.0 = Debug|Any CPU
16 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Release|Any CPU.ActiveCfg = Release|Any CPU
17 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Release|Any CPU.Build.0 = Release|Any CPU
18 | 	EndGlobalSection
19 | 	GlobalSection(SolutionProperties) = preSolution
20 | 		HideSolutionNode = FALSE
21 | 	EndGlobalSection
22 | 	GlobalSection(ExtensibilityGlobals) = postSolution
23 | 		SolutionGuid = {B16F60B5-AFFD-4B9C-9CB9-C3DE513F6307}
24 | 	EndGlobalSection
25 | EndGlobal
26 | 


--------------------------------------------------------------------------------
/DeviceFlow/Client/Client.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk">
 2 | 
 3 |   <PropertyGroup>
 4 |     <TargetFramework>netcoreapp3.0</TargetFramework>
 5 |     <OutputType>Exe</OutputType>
 6 |   </PropertyGroup>
 7 | 
 8 |   <ItemGroup>
 9 |     <PackageReference Include="IdentityModel" Version="4.0.0" />
10 |   </ItemGroup>
11 | 
12 | </Project>
13 | 


--------------------------------------------------------------------------------
/DeviceFlow/DeviceFlow.sln:
--------------------------------------------------------------------------------
 1 | 
 2 | Microsoft Visual Studio Solution File, Format Version 12.00
 3 | # Visual Studio Version 16
 4 | VisualStudioVersion = 16.0.29306.81
 5 | MinimumVisualStudioVersion = 10.0.40219.1
 6 | Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Client", "Client\Client.csproj", "{6FB77EF7-F60F-4DEB-9402-711F015C23E5}"
 7 | EndProject
 8 | Global
 9 | 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
10 | 		Debug|Any CPU = Debug|Any CPU
11 | 		Release|Any CPU = Release|Any CPU
12 | 	EndGlobalSection
13 | 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
14 | 		{6FB77EF7-F60F-4DEB-9402-711F015C23E5}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
15 | 		{6FB77EF7-F60F-4DEB-9402-711F015C23E5}.Debug|Any CPU.Build.0 = Debug|Any CPU
16 | 		{6FB77EF7-F60F-4DEB-9402-711F015C23E5}.Release|Any CPU.ActiveCfg = Release|Any CPU
17 | 		{6FB77EF7-F60F-4DEB-9402-711F015C23E5}.Release|Any CPU.Build.0 = Release|Any CPU
18 | 	EndGlobalSection
19 | 	GlobalSection(SolutionProperties) = preSolution
20 | 		HideSolutionNode = FALSE
21 | 	EndGlobalSection
22 | 	GlobalSection(ExtensibilityGlobals) = postSolution
23 | 		SolutionGuid = {E33ECD1A-DAB3-4B84-9AE6-7400D797E787}
24 | 	EndGlobalSection
25 | EndGlobal
26 | 


--------------------------------------------------------------------------------
/Directory.Build.targets:
--------------------------------------------------------------------------------
 1 | <Project>
 2 | 
 3 |   <PropertyGroup>
 4 |     <AspNetVersion>3.0.0</AspNetVersion>
 5 |   </PropertyGroup>
 6 | 
 7 |   <ItemGroup>
 8 |     <PackageReference Update="IdentityModel" Version="4.0.0" />
 9 | 
10 |     <PackageReference Update="Microsoft.IdentityModel.Protocols.OpenIdConnect" Version="5.5.0" />
11 | 
12 |     <PackageReference Update="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="$(AspNetVersion)" />
13 |     <PackageReference Update="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="$(AspNetVersion)" />
14 |     <PackageReference Update="Microsoft.AspNetCore.Authentication.JwtBearer" Version="$(AspNetVersion)" />
15 | 
16 |     <PackageReference Update="Microsoft.Extensions.Http.Polly" Version="$(AspNetVersion)" />
17 |   </ItemGroup>
18 | 
19 | </Project>


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/AspNetCoreSecurity.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk.Web">
 2 |   
 3 |   <PropertyGroup>
 4 |     <TargetFramework>netcoreapp3.0</TargetFramework>
 5 |   </PropertyGroup>
 6 |   
 7 |   <ItemGroup>
 8 |     <PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" />
 9 |   </ItemGroup>
10 | 
11 | </Project>


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/Controllers/AccountController.cs:
--------------------------------------------------------------------------------
  1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
  2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
  3 | 
  4 | using Microsoft.AspNetCore.Authentication;
  5 | using Microsoft.AspNetCore.Mvc;
  6 | using System;
  7 | using System.Collections.Generic;
  8 | using System.Security.Claims;
  9 | using System.Threading.Tasks;
 10 | 
 11 | namespace AspNetCoreSecurity.Controllers
 12 | {
 13 |     public class AccountController : Controller
 14 |     {
 15 |         [HttpGet]
 16 |         public IActionResult Login(string returnUrl = null)
 17 |         {
 18 |             ViewData["ReturnUrl"] = returnUrl;
 19 |             return View();
 20 |         }
 21 | 
 22 |         [HttpPost]
 23 |         [ValidateAntiForgeryToken]
 24 |         public async Task<IActionResult> Login(string userName, string password, string returnUrl = null)
 25 |         {
 26 |             ViewData["ReturnUrl"] = returnUrl;
 27 | 
 28 |             if (!string.IsNullOrWhiteSpace(userName) &&
 29 |                 userName == password)
 30 |             {
 31 |                 var claims = new List<Claim>
 32 |                 {
 33 |                     new Claim("sub", "123456789"),
 34 |                     new Claim("name", "Dominick"),
 35 |                     new Claim("role", "Geek")
 36 |                 };
 37 | 
 38 |                 var ci = new ClaimsIdentity(claims, "password", "name", "role");
 39 |                 var p = new ClaimsPrincipal(ci);
 40 | 
 41 |                 await HttpContext.SignInAsync(p);
 42 | 
 43 |                 if (Url.IsLocalUrl(returnUrl))
 44 |                 {
 45 |                     return Redirect(returnUrl);
 46 |                 }
 47 |                 else
 48 |                 {
 49 |                     return Redirect("/");
 50 |                 }
 51 |             }
 52 | 
 53 |             return View();
 54 |         }
 55 | 
 56 |         public IActionResult Google(string returnUrl)
 57 |         {
 58 |             if (!Url.IsLocalUrl(returnUrl))
 59 |             {
 60 |                 return Redirect("/");
 61 |             }
 62 | 
 63 |             var props = new AuthenticationProperties
 64 |             {
 65 |                 RedirectUri = Url.Action(nameof(Callback)),
 66 | 
 67 |                 Items =
 68 |                 {
 69 |                     { "uru", returnUrl },
 70 |                     { "scheme", "Google" }
 71 |                 }
 72 |             };
 73 | 
 74 |             return Challenge(props, "Google");
 75 |         }
 76 | 
 77 |         public async Task<IActionResult> Callback()
 78 |         {
 79 |             var result = await HttpContext.AuthenticateAsync("external");
 80 |             if (!result.Succeeded)
 81 |             {
 82 |                 throw new Exception("error");
 83 |             }
 84 | 
 85 |             // get sub and issuer to check if external user is known
 86 |             var sub = result.Principal.FindFirst("sub");
 87 |             var issuer = result.Properties.Items["scheme"];
 88 | 
 89 |             // do your customm provisioning logic
 90 | 
 91 |             // sign in user
 92 |             var claims = new List<Claim>
 93 |             {
 94 |                 new Claim("sub", "123456789"),
 95 |                 new Claim("name", "Dominick"),
 96 |                 new Claim("role", "Geek"),
 97 |                 new Claim("email", result.Principal.FindFirst("email").Value)
 98 |             };
 99 | 
100 |             var ci = new ClaimsIdentity(claims, issuer, "name", "role");
101 |             var p = new ClaimsPrincipal(ci);
102 | 
103 |             await HttpContext.SignInAsync(p);
104 | 
105 |             return Redirect(result.Properties.Items["uru"]);
106 |         }
107 | 
108 |         public IActionResult AccessDenied() => View();
109 | 
110 |         public async Task<IActionResult> Logout()
111 |         {
112 |             await HttpContext.SignOutAsync();
113 |             return Redirect("/");
114 |         }
115 |     }
116 | }


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/Controllers/HomeController.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authorization;
 2 | using Microsoft.AspNetCore.Mvc;
 3 | 
 4 | namespace AspNetCoreSecurity.Controllers
 5 | {
 6 |     public class HomeController : Controller
 7 |     {
 8 |         public IActionResult Index()
 9 |         {
10 |             return View();
11 |         }
12 | 
13 |         [Authorize]
14 |         public IActionResult Secure()
15 |         {
16 |             return View();
17 |         }
18 |     }
19 | }


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/Program.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Hosting;
 2 | using Microsoft.Extensions.Hosting;
 3 | 
 4 | namespace AspNetCoreSecurity
 5 | {
 6 |     public class Program
 7 |     {
 8 |         public static void Main(string[] args)
 9 |         {
10 |             CreateHostBuilder(args).Build().Run();
11 |         }
12 | 
13 |         public static IHostBuilder CreateHostBuilder(string[] args) =>
14 |             Host.CreateDefaultBuilder(args)
15 |                 .ConfigureWebHostDefaults(webBuilder =>
16 |                 {
17 |                     webBuilder.UseStartup<Startup>();
18 |                 });
19 |     }
20 | }


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "iisSettings": {
 3 |     "windowsAuthentication": false, 
 4 |     "anonymousAuthentication": true, 
 5 |     "iisExpress": {
 6 |       "applicationUrl": "http://localhost:60275",
 7 |       "sslPort": 44305
 8 |     }
 9 |   },
10 |   "profiles": {
11 |     "IIS Express": {
12 |       "commandName": "IISExpress",
13 |       "launchBrowser": true,
14 |       "environmentVariables": {
15 |         "ASPNETCORE_ENVIRONMENT": "Development"
16 |       }
17 |     },
18 |     "AspNetCoreSecurity": {
19 |       "commandName": "Project",
20 |       "launchBrowser": true,
21 |       "applicationUrl": "https://localhost:5001;http://localhost:5000",
22 |       "environmentVariables": {
23 |         "ASPNETCORE_ENVIRONMENT": "Development"
24 |       }
25 |     }
26 |   }
27 | }
28 | 


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/Startup.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Builder;
 2 | using Microsoft.Extensions.DependencyInjection;
 3 | using Microsoft.IdentityModel.Tokens;
 4 | using System.IdentityModel.Tokens.Jwt;
 5 | 
 6 | namespace AspNetCoreSecurity
 7 | {
 8 |     public class Startup
 9 |     {
10 |         public Startup()
11 |         {
12 |             // turn off claim type mappings
13 |             JwtSecurityTokenHandler.DefaultMapInboundClaims = false;
14 |         }
15 | 
16 |         public void ConfigureServices(IServiceCollection services)
17 |         {
18 |             services.AddControllersWithViews();
19 | 
20 |             services.AddAuthentication("cookie")
21 |                 .AddCookie("cookie", options =>
22 |                 {
23 |                     options.Cookie.Name = "demo";
24 | 
25 |                     options.LoginPath = "/account/login";
26 |                     options.AccessDeniedPath = "/account/accessdenied";
27 |                 })
28 |                 .AddCookie("external", options =>
29 |                 {
30 |                     options.Cookie.Name = "external";
31 |                 })
32 |                 .AddOpenIdConnect("Google", "Google", options =>
33 |                 {
34 |                     options.SignInScheme = "external";
35 |                     
36 |                     options.Authority = "https://accounts.google.com/";
37 |                     options.ClientId = "434483408261-55tc8n0cs4ff1fe21ea8df2o443v2iuc.apps.googleusercontent.com";
38 | 
39 |                     options.CallbackPath = "/signin-google";
40 |                     options.Scope.Add("email");
41 | 
42 |                     options.TokenValidationParameters = new TokenValidationParameters
43 |                     {
44 |                         NameClaimType = "name",
45 |                         RoleClaimType = "role"
46 |                     };
47 |                 });
48 |         }
49 | 
50 |         public void Configure(IApplicationBuilder app)
51 |         {
52 |             app.UseDeveloperExceptionPage();
53 |             app.UseStaticFiles();
54 |             
55 |             app.UseRouting();
56 |             app.UseAuthentication();
57 |             app.UseAuthorization();
58 | 
59 |             app.UseEndpoints(endpoints =>
60 |             {
61 |                 endpoints.MapDefaultControllerRoute();
62 |             });
63 |         }
64 |     }
65 | }


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/Views/Account/AccessDenied.cshtml:
--------------------------------------------------------------------------------
1 | <h2>Access denied!</h2>


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/Views/Account/Login.cshtml:
--------------------------------------------------------------------------------
 1 | <h2>Login</h2>
 2 | 
 3 | <div class="row">
 4 |     <div class="col-md-8">
 5 |         <section>
 6 |             <form asp-controller="Account" asp-action="Login" asp-route-returnurl="@ViewData["ReturnUrl"]" method="post" class="form-horizontal" role="form">
 7 |                 <div class="form-group">
 8 |                     <label class="col-md-2 control-label">UserName</label>
 9 |                     <div class="col-md-10">
10 |                         <input type="text" name="username" />
11 |                     </div>
12 |                 </div>
13 | 
14 |                 <div class="form-group">
15 |                     <label class="col-md-2 control-label">Password</label>
16 |                     <div class="col-md-10">
17 |                         <input type="password" name="password" />
18 |                     </div>
19 |                 </div>
20 | 
21 |                 <div class="form-group">
22 |                     <div class="col-md-offset-2 col-md-10">
23 |                         <button type="submit" class="btn btn-primary">Log in</button>
24 |                     </div>
25 |                 </div>
26 |             </form>
27 | 
28 |             <a asp-action="google"
29 |                asp-route-returnurl="@ViewData["returnurl"]">
30 |                 sign-in with google
31 |             </a>
32 |         </section>
33 |     </div>
34 | </div>


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/Views/Home/Index.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     ViewData["Title"] = "Home Page";
3 | }
4 | 
5 | <div class="text-center">
6 |     <h1 class="display-4">Welcome</h1>
7 |     <p>Learn about <a href="https://identityserver4.readthedocs.io">securing Web apps with IdentityServer</a>.</p>
8 | </div>
9 | 


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/Views/Home/Secure.cshtml:
--------------------------------------------------------------------------------
 1 | @{
 2 |     ViewData["Title"] = "Secure";
 3 | }
 4 | 
 5 | @using Microsoft.AspNetCore.Authentication
 6 | 
 7 | <h2>Claims</h2>
 8 | 
 9 | <dl>
10 |     @foreach (var claim in User.Claims)
11 |     {
12 |         <dt>@claim.Type</dt>
13 |         <dd>@claim.Value</dd>
14 |     }
15 | </dl>
16 | 
17 | <h2>Properties</h2>
18 | 
19 | <dl>
20 |     @foreach (var prop in (await Context.AuthenticateAsync()).Properties.Items)
21 |     {
22 |         <dt>@prop.Key</dt>
23 |         <dd>@prop.Value</dd>
24 |     }
25 | </dl>


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/Views/Shared/_ValidationScriptsPartial.cshtml:
--------------------------------------------------------------------------------
 1 | <environment include="Development">
 2 |     <script src="~/lib/jquery-validation/dist/jquery.validate.js"></script>
 3 |     <script src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.js"></script>
 4 | </environment>
 5 | <environment exclude="Development">
 6 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.17.0/jquery.validate.min.js"
 7 |             asp-fallback-src="~/lib/jquery-validation/dist/jquery.validate.min.js"
 8 |             asp-fallback-test="window.jQuery && window.jQuery.validator"
 9 |             crossorigin="anonymous"
10 |             integrity="sha256-F6h55Qw6sweK+t7SiOJX+2bpSAa3b/fnlrVCJvmEj1A=">
11 |     </script>
12 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-validation-unobtrusive/3.2.11/jquery.validate.unobtrusive.min.js"
13 |             asp-fallback-src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.min.js"
14 |             asp-fallback-test="window.jQuery && window.jQuery.validator && window.jQuery.validator.unobtrusive"
15 |             crossorigin="anonymous"
16 |             integrity="sha256-9GycpJnliUjJDVDqP0UEu/bsm9U+3dnQUH8+3W10vkY=">
17 |     </script>
18 | </environment>
19 | 


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/Views/_ViewImports.cshtml:
--------------------------------------------------------------------------------
1 | @using AspNetCoreSecurity
2 | @addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
3 | 


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/Views/_ViewStart.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     Layout = "_Layout";
3 | }
4 | 


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/appsettings.Development.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Debug",
 5 |       "System": "Information",
 6 |       "Microsoft": "Information"
 7 |     }
 8 |   }
 9 | }
10 | 


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/appsettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Information",
 5 |       "Microsoft": "Warning",
 6 |       "Microsoft.Hosting.Lifetime": "Information"
 7 |     }
 8 |   },
 9 |   "AllowedHosts": "*"
10 | }
11 | 


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/wwwroot/css/site.css:
--------------------------------------------------------------------------------
 1 | /* Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
 2 | for details on configuring this project to bundle and minify static web assets. */
 3 | 
 4 | a.navbar-brand {
 5 |   white-space: normal;
 6 |   text-align: center;
 7 |   word-break: break-all;
 8 | }
 9 | 
10 | /* Provide sufficient contrast against white background */
11 | a {
12 |   color: #0366d6;
13 | }
14 | 
15 | .btn-primary {
16 |   color: #fff;
17 |   background-color: #1b6ec2;
18 |   border-color: #1861ac;
19 | }
20 | 
21 | .nav-pills .nav-link.active, .nav-pills .show > .nav-link {
22 |   color: #fff;
23 |   background-color: #1b6ec2;
24 |   border-color: #1861ac;
25 | }
26 | 
27 | /* Sticky footer styles
28 | -------------------------------------------------- */
29 | html {
30 |   font-size: 14px;
31 | }
32 | @media (min-width: 768px) {
33 |   html {
34 |     font-size: 16px;
35 |   }
36 | }
37 | 
38 | .border-top {
39 |   border-top: 1px solid #e5e5e5;
40 | }
41 | .border-bottom {
42 |   border-bottom: 1px solid #e5e5e5;
43 | }
44 | 
45 | .box-shadow {
46 |   box-shadow: 0 .25rem .75rem rgba(0, 0, 0, .05);
47 | }
48 | 
49 | button.accept-policy {
50 |   font-size: 1rem;
51 |   line-height: inherit;
52 | }
53 | 
54 | /* Sticky footer styles
55 | -------------------------------------------------- */
56 | html {
57 |   position: relative;
58 |   min-height: 100%;
59 | }
60 | 
61 | body {
62 |   /* Margin bottom by footer height */
63 |   margin-bottom: 60px;
64 | }
65 | .footer {
66 |   position: absolute;
67 |   bottom: 0;
68 |   width: 100%;
69 |   white-space: nowrap;
70 |   line-height: 60px; /* Vertically center the text there */
71 | }
72 | 


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/wwwroot/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/leastprivilege/AspNetCoreSecuritySamples/79848a6e956ecafc858547353459f0c5b161afa9/External Authentication with Callback/AspNetCoreSecurity/wwwroot/favicon.ico


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/wwwroot/js/site.js:
--------------------------------------------------------------------------------
1 | // Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
2 | // for details on configuring this project to bundle and minify static web assets.
3 | 
4 | // Write your JavaScript code.
5 | 


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/wwwroot/lib/bootstrap/LICENSE:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | 
 3 | Copyright (c) 2011-2018 Twitter, Inc.
 4 | Copyright (c) 2011-2018 The Bootstrap Authors
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.min.css:
--------------------------------------------------------------------------------
1 | /*!
2 |  * Bootstrap Reboot v4.3.1 (https://getbootstrap.com/)
3 |  * Copyright 2011-2019 The Bootstrap Authors
4 |  * Copyright 2011-2019 Twitter, Inc.
5 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
6 |  * Forked from Normalize.css, licensed MIT (https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
7 |  */*,::after,::before{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}article,aside,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}[tabindex="-1"]:focus{outline:0!important}hr{box-sizing:content-box;height:0;overflow:visible}h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem}p{margin-top:0;margin-bottom:1rem}abbr[data-original-title],abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#007bff;text-decoration:none;background-color:transparent}a:hover{color:#0056b3;text-decoration:underline}a:not([href]):not([tabindex]){color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus,a:not([href]):not([tabindex]):hover{color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus{outline:0}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;font-size:1em}pre{margin-top:0;margin-bottom:1rem;overflow:auto}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}svg{overflow:hidden;vertical-align:middle}table{border-collapse:collapse}caption{padding-top:.75rem;padding-bottom:.75rem;color:#6c757d;text-align:left;caption-side:bottom}th{text-align:inherit}label{display:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=reset]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor:pointer}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{padding:0;border-style:none}input[type=checkbox],input[type=radio]{box-sizing:border-box;padding:0}input[type=date],input[type=datetime-local],input[type=month],input[type=time]{-webkit-appearance:listbox}textarea{overflow:auto;resize:vertical}fieldset{min-width:0;padding:0;margin:0;border:0}legend{display:block;width:100%;max-width:100%;padding:0;margin-bottom:.5rem;font-size:1.5rem;line-height:inherit;color:inherit;white-space:normal}progress{vertical-align:baseline}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{outline-offset:-2px;-webkit-appearance:none}[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}output{display:inline-block}summary{display:list-item;cursor:pointer}template{display:none}[hidden]{display:none!important}
8 | /*# sourceMappingURL=bootstrap-reboot.min.css.map */


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/wwwroot/lib/jquery-validation-unobtrusive/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright (c) .NET Foundation. All rights reserved.
 2 | 
 3 | Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 4 | these files except in compliance with the License. You may obtain a copy of the
 5 | License at
 6 | 
 7 | http://www.apache.org/licenses/LICENSE-2.0
 8 | 
 9 | Unless required by applicable law or agreed to in writing, software distributed
10 | under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
11 | CONDITIONS OF ANY KIND, either express or implied. See the License for the
12 | specific language governing permissions and limitations under the License.
13 | 


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/wwwroot/lib/jquery-validation/LICENSE.md:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | =====================
 3 | 
 4 | Copyright Jörn Zaefferer
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/External Authentication with Callback/AspNetCoreSecurity/wwwroot/lib/jquery/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright JS Foundation and other contributors, https://js.foundation/
 2 | 
 3 | This software consists of voluntary contributions made by many
 4 | individuals. For exact contribution history, see the revision history
 5 | available at https://github.com/jquery/jquery
 6 | 
 7 | The following license applies to all parts of this software except as
 8 | documented below:
 9 | 
10 | ====
11 | 
12 | Permission is hereby granted, free of charge, to any person obtaining
13 | a copy of this software and associated documentation files (the
14 | "Software"), to deal in the Software without restriction, including
15 | without limitation the rights to use, copy, modify, merge, publish,
16 | distribute, sublicense, and/or sell copies of the Software, and to
17 | permit persons to whom the Software is furnished to do so, subject to
18 | the following conditions:
19 | 
20 | The above copyright notice and this permission notice shall be
21 | included in all copies or substantial portions of the Software.
22 | 
23 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
24 | EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
25 | MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
26 | NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
27 | LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
28 | OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
29 | WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
30 | 
31 | ====
32 | 
33 | All files located in the node_modules and external directories are
34 | externally maintained libraries used by this software which have their
35 | own licenses; we recommend you read them, as their terms may differ from
36 | the terms above.
37 | 


--------------------------------------------------------------------------------
/External Authentication with Callback/ExternalAuthenticationWithCallback.sln:
--------------------------------------------------------------------------------
 1 | 
 2 | Microsoft Visual Studio Solution File, Format Version 12.00
 3 | # Visual Studio Version 16
 4 | VisualStudioVersion = 16.0.29020.237
 5 | MinimumVisualStudioVersion = 10.0.40219.1
 6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "AspNetCoreSecurity", "AspNetCoreSecurity\AspNetCoreSecurity.csproj", "{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}"
 7 | EndProject
 8 | Global
 9 | 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
10 | 		Debug|Any CPU = Debug|Any CPU
11 | 		Release|Any CPU = Release|Any CPU
12 | 	EndGlobalSection
13 | 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
14 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
15 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Debug|Any CPU.Build.0 = Debug|Any CPU
16 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Release|Any CPU.ActiveCfg = Release|Any CPU
17 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Release|Any CPU.Build.0 = Release|Any CPU
18 | 	EndGlobalSection
19 | 	GlobalSection(SolutionProperties) = preSolution
20 | 		HideSolutionNode = FALSE
21 | 	EndGlobalSection
22 | 	GlobalSection(ExtensibilityGlobals) = postSolution
23 | 		SolutionGuid = {B16F60B5-AFFD-4B9C-9CB9-C3DE513F6307}
24 | 	EndGlobalSection
25 | EndGlobal
26 | 


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity.sln:
--------------------------------------------------------------------------------
 1 | 
 2 | Microsoft Visual Studio Solution File, Format Version 12.00
 3 | # Visual Studio Version 16
 4 | VisualStudioVersion = 16.0.29020.237
 5 | MinimumVisualStudioVersion = 10.0.40219.1
 6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "AspNetCoreSecurity", "AspNetCoreSecurity\AspNetCoreSecurity.csproj", "{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}"
 7 | EndProject
 8 | Global
 9 | 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
10 | 		Debug|Any CPU = Debug|Any CPU
11 | 		Release|Any CPU = Release|Any CPU
12 | 	EndGlobalSection
13 | 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
14 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
15 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Debug|Any CPU.Build.0 = Debug|Any CPU
16 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Release|Any CPU.ActiveCfg = Release|Any CPU
17 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Release|Any CPU.Build.0 = Release|Any CPU
18 | 	EndGlobalSection
19 | 	GlobalSection(SolutionProperties) = preSolution
20 | 		HideSolutionNode = FALSE
21 | 	EndGlobalSection
22 | 	GlobalSection(ExtensibilityGlobals) = postSolution
23 | 		SolutionGuid = {B16F60B5-AFFD-4B9C-9CB9-C3DE513F6307}
24 | 	EndGlobalSection
25 | EndGlobal
26 | 


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/AspNetCoreSecurity.csproj:
--------------------------------------------------------------------------------
1 | <Project Sdk="Microsoft.NET.Sdk.Web">
2 |   
3 |   <PropertyGroup>
4 |     <TargetFramework>netcoreapp3.0</TargetFramework>
5 |   </PropertyGroup>
6 | 
7 | </Project>


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/Controllers/AccountController.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | using Microsoft.AspNetCore.Authentication;
 5 | using Microsoft.AspNetCore.Mvc;
 6 | using System.Collections.Generic;
 7 | using System.Security.Claims;
 8 | using System.Threading.Tasks;
 9 | 
10 | namespace AspNetCoreSecurity.Controllers
11 | {
12 |     public class AccountController : Controller
13 |     {
14 |         [HttpGet]
15 |         public IActionResult Login(string returnUrl = null)
16 |         {
17 |             ViewData["ReturnUrl"] = returnUrl;
18 |             return View();
19 |         }
20 | 
21 |         [HttpPost]
22 |         [ValidateAntiForgeryToken]
23 |         public async Task<IActionResult> Login(string userName, string password, string returnUrl = null)
24 |         {
25 |             ViewData["ReturnUrl"] = returnUrl;
26 | 
27 |             if (!string.IsNullOrWhiteSpace(userName) &&
28 |                 userName == password)
29 |             {
30 |                 var claims = new List<Claim>
31 |                 {
32 |                     new Claim("sub", "123456789"),
33 |                     new Claim("name", "Dominick"),
34 |                     new Claim("role", "Geek")
35 |                 };
36 | 
37 |                 var ci = new ClaimsIdentity(claims, "password", "name", "role");
38 |                 var p = new ClaimsPrincipal(ci);
39 | 
40 |                 await HttpContext.SignInAsync(p);
41 | 
42 |                 return LocalRedirect(returnUrl);
43 |             }
44 | 
45 |             return View();
46 |         }
47 | 
48 |         public async Task<IActionResult> Logout()
49 |         {
50 |             await HttpContext.SignOutAsync();
51 |             return Redirect("/");
52 |         }
53 | 
54 |         public IActionResult AccessDenied() => View();
55 |     }
56 | }


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/Controllers/HomeController.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authorization;
 2 | using Microsoft.AspNetCore.Mvc;
 3 | 
 4 | namespace AspNetCoreSecurity.Controllers
 5 | {
 6 |     public class HomeController : Controller
 7 |     {
 8 |         public IActionResult Index()
 9 |         {
10 |             return View();
11 |         }
12 | 
13 |         [Authorize]
14 |         public IActionResult Secure()
15 |         {
16 |             return View();
17 |         }
18 |     }
19 | }


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/Program.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Hosting;
 2 | using Microsoft.Extensions.Hosting;
 3 | 
 4 | namespace AspNetCoreSecurity
 5 | {
 6 |     public class Program
 7 |     {
 8 |         public static void Main(string[] args)
 9 |         {
10 |             CreateHostBuilder(args).Build().Run();
11 |         }
12 | 
13 |         public static IHostBuilder CreateHostBuilder(string[] args) =>
14 |             Host.CreateDefaultBuilder(args)
15 |                 .ConfigureWebHostDefaults(webBuilder =>
16 |                 {
17 |                     webBuilder.UseStartup<Startup>();
18 |                 });
19 |     }
20 | }


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "iisSettings": {
 3 |     "windowsAuthentication": false, 
 4 |     "anonymousAuthentication": true, 
 5 |     "iisExpress": {
 6 |       "applicationUrl": "http://localhost:60275",
 7 |       "sslPort": 44305
 8 |     }
 9 |   },
10 |   "profiles": {
11 |     "IIS Express": {
12 |       "commandName": "IISExpress",
13 |       "launchBrowser": true,
14 |       "environmentVariables": {
15 |         "ASPNETCORE_ENVIRONMENT": "Development"
16 |       }
17 |     },
18 |     "AspNetCoreSecurity": {
19 |       "commandName": "Project",
20 |       "launchBrowser": true,
21 |       "applicationUrl": "https://localhost:5001;http://localhost:5000",
22 |       "environmentVariables": {
23 |         "ASPNETCORE_ENVIRONMENT": "Development"
24 |       }
25 |     }
26 |   }
27 | }
28 | 


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/Startup.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Builder;
 2 | using Microsoft.Extensions.DependencyInjection;
 3 | 
 4 | namespace AspNetCoreSecurity
 5 | {
 6 |     public class Startup
 7 |     {
 8 |         public void ConfigureServices(IServiceCollection services)
 9 |         {
10 |             services.AddControllersWithViews();
11 | 
12 |             services.AddAuthentication("cookie")
13 |                 .AddCookie("cookie", options =>
14 |                 {
15 |                     options.Cookie.Name = "demo";
16 | 
17 |                     options.LoginPath = "/account/login";
18 |                     options.AccessDeniedPath = "/account/accessdenied";
19 |                 });
20 |         }
21 | 
22 |         public void Configure(IApplicationBuilder app)
23 |         {
24 |             app.UseDeveloperExceptionPage();
25 |             app.UseStaticFiles();
26 |             
27 |             app.UseRouting();
28 |             app.UseAuthentication();
29 |             app.UseAuthorization();
30 | 
31 |             app.UseEndpoints(endpoints =>
32 |             {
33 |                 endpoints.MapDefaultControllerRoute();
34 |             });
35 |         }
36 |     }
37 | }


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/Views/Account/AccessDenied.cshtml:
--------------------------------------------------------------------------------
1 | <h2>Access denied!</h2>


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/Views/Account/Login.cshtml:
--------------------------------------------------------------------------------
 1 | <h2>Login</h2>
 2 | 
 3 | <div class="row">
 4 |     <div class="col-md-8">
 5 |         <section>
 6 |             <form asp-controller="Account" asp-action="Login" asp-route-returnurl="@ViewData["ReturnUrl"]" method="post" class="form-horizontal" role="form">
 7 |                 <div class="form-group">
 8 |                     <label class="col-md-2 control-label">UserName</label>
 9 |                     <div class="col-md-10">
10 |                         <input type="text" name="username" autofocus />
11 |                     </div>
12 |                 </div>
13 | 
14 |                 <div class="form-group">
15 |                     <label class="col-md-2 control-label">Password</label>
16 |                     <div class="col-md-10">
17 |                         <input type="password" name="password" />
18 |                     </div>
19 |                 </div>
20 | 
21 |                 <div class="form-group">
22 |                     <div class="col-md-offset-2 col-md-10">
23 |                         <button type="submit" class="btn btn-primary">Log in</button>
24 |                     </div>
25 |                 </div>
26 |             </form>
27 | 
28 |             <a asp-action="google"
29 |                asp-route-returnurl="@ViewData["returnurl"]">
30 |                 sign-in with google
31 |             </a>
32 |         </section>
33 |     </div>
34 | </div>


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/Views/Home/Index.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     ViewData["Title"] = "Home Page";
3 | }
4 | 
5 | <div class="text-center">
6 |     <h1 class="display-4">Welcome</h1>
7 |     <p>Learn about <a href="https://identityserver4.readthedocs.io">securing Web apps with IdentityServer</a>.</p>
8 | </div>
9 | 


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/Views/Home/Secure.cshtml:
--------------------------------------------------------------------------------
 1 | @{
 2 |     ViewData["Title"] = "Secure";
 3 | }
 4 | 
 5 | @using Microsoft.AspNetCore.Authentication
 6 | 
 7 | <h2>Claims</h2>
 8 | 
 9 | <dl>
10 |     @foreach (var claim in User.Claims)
11 |     {
12 |         <dt>@claim.Type</dt>
13 |         <dd>@claim.Value</dd>
14 |     }
15 | </dl>
16 | 
17 | <h2>Properties</h2>
18 | 
19 | <dl>
20 |     @foreach (var prop in (await Context.AuthenticateAsync()).Properties.Items)
21 |     {
22 |         <dt>@prop.Key</dt>
23 |         <dd>@prop.Value</dd>
24 |     }
25 | </dl>


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/Views/Shared/_ValidationScriptsPartial.cshtml:
--------------------------------------------------------------------------------
 1 | <environment include="Development">
 2 |     <script src="~/lib/jquery-validation/dist/jquery.validate.js"></script>
 3 |     <script src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.js"></script>
 4 | </environment>
 5 | <environment exclude="Development">
 6 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.17.0/jquery.validate.min.js"
 7 |             asp-fallback-src="~/lib/jquery-validation/dist/jquery.validate.min.js"
 8 |             asp-fallback-test="window.jQuery && window.jQuery.validator"
 9 |             crossorigin="anonymous"
10 |             integrity="sha256-F6h55Qw6sweK+t7SiOJX+2bpSAa3b/fnlrVCJvmEj1A=">
11 |     </script>
12 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-validation-unobtrusive/3.2.11/jquery.validate.unobtrusive.min.js"
13 |             asp-fallback-src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.min.js"
14 |             asp-fallback-test="window.jQuery && window.jQuery.validator && window.jQuery.validator.unobtrusive"
15 |             crossorigin="anonymous"
16 |             integrity="sha256-9GycpJnliUjJDVDqP0UEu/bsm9U+3dnQUH8+3W10vkY=">
17 |     </script>
18 | </environment>
19 | 


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/Views/_ViewImports.cshtml:
--------------------------------------------------------------------------------
1 | @using AspNetCoreSecurity
2 | @addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
3 | 


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/Views/_ViewStart.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     Layout = "_Layout";
3 | }
4 | 


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/appsettings.Development.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Debug",
 5 |       "System": "Information",
 6 |       "Microsoft": "Information"
 7 |     }
 8 |   }
 9 | }
10 | 


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/appsettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Information",
 5 |       "Microsoft": "Warning",
 6 |       "Microsoft.Hosting.Lifetime": "Information"
 7 |     }
 8 |   },
 9 |   "AllowedHosts": "*"
10 | }
11 | 


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/wwwroot/css/site.css:
--------------------------------------------------------------------------------
 1 | /* Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
 2 | for details on configuring this project to bundle and minify static web assets. */
 3 | 
 4 | a.navbar-brand {
 5 |   white-space: normal;
 6 |   text-align: center;
 7 |   word-break: break-all;
 8 | }
 9 | 
10 | /* Provide sufficient contrast against white background */
11 | a {
12 |   color: #0366d6;
13 | }
14 | 
15 | .btn-primary {
16 |   color: #fff;
17 |   background-color: #1b6ec2;
18 |   border-color: #1861ac;
19 | }
20 | 
21 | .nav-pills .nav-link.active, .nav-pills .show > .nav-link {
22 |   color: #fff;
23 |   background-color: #1b6ec2;
24 |   border-color: #1861ac;
25 | }
26 | 
27 | /* Sticky footer styles
28 | -------------------------------------------------- */
29 | html {
30 |   font-size: 14px;
31 | }
32 | @media (min-width: 768px) {
33 |   html {
34 |     font-size: 16px;
35 |   }
36 | }
37 | 
38 | .border-top {
39 |   border-top: 1px solid #e5e5e5;
40 | }
41 | .border-bottom {
42 |   border-bottom: 1px solid #e5e5e5;
43 | }
44 | 
45 | .box-shadow {
46 |   box-shadow: 0 .25rem .75rem rgba(0, 0, 0, .05);
47 | }
48 | 
49 | button.accept-policy {
50 |   font-size: 1rem;
51 |   line-height: inherit;
52 | }
53 | 
54 | /* Sticky footer styles
55 | -------------------------------------------------- */
56 | html {
57 |   position: relative;
58 |   min-height: 100%;
59 | }
60 | 
61 | body {
62 |   /* Margin bottom by footer height */
63 |   margin-bottom: 60px;
64 | }
65 | .footer {
66 |   position: absolute;
67 |   bottom: 0;
68 |   width: 100%;
69 |   white-space: nowrap;
70 |   line-height: 60px; /* Vertically center the text there */
71 | }
72 | 


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/wwwroot/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/leastprivilege/AspNetCoreSecuritySamples/79848a6e956ecafc858547353459f0c5b161afa9/Local Authentication/AspNetCoreSecurity/wwwroot/favicon.ico


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/wwwroot/js/site.js:
--------------------------------------------------------------------------------
1 | // Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
2 | // for details on configuring this project to bundle and minify static web assets.
3 | 
4 | // Write your JavaScript code.
5 | 


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/wwwroot/lib/bootstrap/LICENSE:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | 
 3 | Copyright (c) 2011-2018 Twitter, Inc.
 4 | Copyright (c) 2011-2018 The Bootstrap Authors
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.min.css:
--------------------------------------------------------------------------------
1 | /*!
2 |  * Bootstrap Reboot v4.3.1 (https://getbootstrap.com/)
3 |  * Copyright 2011-2019 The Bootstrap Authors
4 |  * Copyright 2011-2019 Twitter, Inc.
5 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
6 |  * Forked from Normalize.css, licensed MIT (https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
7 |  */*,::after,::before{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}article,aside,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}[tabindex="-1"]:focus{outline:0!important}hr{box-sizing:content-box;height:0;overflow:visible}h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem}p{margin-top:0;margin-bottom:1rem}abbr[data-original-title],abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#007bff;text-decoration:none;background-color:transparent}a:hover{color:#0056b3;text-decoration:underline}a:not([href]):not([tabindex]){color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus,a:not([href]):not([tabindex]):hover{color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus{outline:0}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;font-size:1em}pre{margin-top:0;margin-bottom:1rem;overflow:auto}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}svg{overflow:hidden;vertical-align:middle}table{border-collapse:collapse}caption{padding-top:.75rem;padding-bottom:.75rem;color:#6c757d;text-align:left;caption-side:bottom}th{text-align:inherit}label{display:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=reset]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor:pointer}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{padding:0;border-style:none}input[type=checkbox],input[type=radio]{box-sizing:border-box;padding:0}input[type=date],input[type=datetime-local],input[type=month],input[type=time]{-webkit-appearance:listbox}textarea{overflow:auto;resize:vertical}fieldset{min-width:0;padding:0;margin:0;border:0}legend{display:block;width:100%;max-width:100%;padding:0;margin-bottom:.5rem;font-size:1.5rem;line-height:inherit;color:inherit;white-space:normal}progress{vertical-align:baseline}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{outline-offset:-2px;-webkit-appearance:none}[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}output{display:inline-block}summary{display:list-item;cursor:pointer}template{display:none}[hidden]{display:none!important}
8 | /*# sourceMappingURL=bootstrap-reboot.min.css.map */


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/wwwroot/lib/jquery-validation-unobtrusive/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright (c) .NET Foundation. All rights reserved.
 2 | 
 3 | Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 4 | these files except in compliance with the License. You may obtain a copy of the
 5 | License at
 6 | 
 7 | http://www.apache.org/licenses/LICENSE-2.0
 8 | 
 9 | Unless required by applicable law or agreed to in writing, software distributed
10 | under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
11 | CONDITIONS OF ANY KIND, either express or implied. See the License for the
12 | specific language governing permissions and limitations under the License.
13 | 


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/wwwroot/lib/jquery-validation/LICENSE.md:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | =====================
 3 | 
 4 | Copyright Jörn Zaefferer
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/Local Authentication/AspNetCoreSecurity/wwwroot/lib/jquery/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright JS Foundation and other contributors, https://js.foundation/
 2 | 
 3 | This software consists of voluntary contributions made by many
 4 | individuals. For exact contribution history, see the revision history
 5 | available at https://github.com/jquery/jquery
 6 | 
 7 | The following license applies to all parts of this software except as
 8 | documented below:
 9 | 
10 | ====
11 | 
12 | Permission is hereby granted, free of charge, to any person obtaining
13 | a copy of this software and associated documentation files (the
14 | "Software"), to deal in the Software without restriction, including
15 | without limitation the rights to use, copy, modify, merge, publish,
16 | distribute, sublicense, and/or sell copies of the Software, and to
17 | permit persons to whom the Software is furnished to do so, subject to
18 | the following conditions:
19 | 
20 | The above copyright notice and this permission notice shall be
21 | included in all copies or substantial portions of the Software.
22 | 
23 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
24 | EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
25 | MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
26 | NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
27 | LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
28 | OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
29 | WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
30 | 
31 | ====
32 | 
33 | All files located in the node_modules and external directories are
34 | externally maintained libraries used by this software which have their
35 | own licenses; we recommend you read them, as their terms may differ from
36 | the terms above.
37 | 


--------------------------------------------------------------------------------
/OidcTokensApis/OidcTokensApis.sln:
--------------------------------------------------------------------------------
 1 | 
 2 | Microsoft Visual Studio Solution File, Format Version 12.00
 3 | # Visual Studio 15
 4 | VisualStudioVersion = 15.0.26124.0
 5 | MinimumVisualStudioVersion = 15.0.26124.0
 6 | Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "src", "src", "{C3CAE735-02CC-462D-A6E7-9D5B446D7B5A}"
 7 | EndProject
 8 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "MvcClient", "src\MvcClient\MvcClient.csproj", "{A1C4649B-EE1E-4C85-A672-0796DD2AB778}"
 9 | EndProject
10 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Api", "src\Api\Api.csproj", "{3405B4DE-31E9-472D-AEF9-4E0876B39549}"
11 | EndProject
12 | Global
13 | 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
14 | 		Debug|Any CPU = Debug|Any CPU
15 | 		Debug|x64 = Debug|x64
16 | 		Debug|x86 = Debug|x86
17 | 		Release|Any CPU = Release|Any CPU
18 | 		Release|x64 = Release|x64
19 | 		Release|x86 = Release|x86
20 | 	EndGlobalSection
21 | 	GlobalSection(SolutionProperties) = preSolution
22 | 		HideSolutionNode = FALSE
23 | 	EndGlobalSection
24 | 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
25 | 		{A1C4649B-EE1E-4C85-A672-0796DD2AB778}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
26 | 		{A1C4649B-EE1E-4C85-A672-0796DD2AB778}.Debug|Any CPU.Build.0 = Debug|Any CPU
27 | 		{A1C4649B-EE1E-4C85-A672-0796DD2AB778}.Debug|x64.ActiveCfg = Debug|Any CPU
28 | 		{A1C4649B-EE1E-4C85-A672-0796DD2AB778}.Debug|x64.Build.0 = Debug|Any CPU
29 | 		{A1C4649B-EE1E-4C85-A672-0796DD2AB778}.Debug|x86.ActiveCfg = Debug|Any CPU
30 | 		{A1C4649B-EE1E-4C85-A672-0796DD2AB778}.Debug|x86.Build.0 = Debug|Any CPU
31 | 		{A1C4649B-EE1E-4C85-A672-0796DD2AB778}.Release|Any CPU.ActiveCfg = Release|Any CPU
32 | 		{A1C4649B-EE1E-4C85-A672-0796DD2AB778}.Release|Any CPU.Build.0 = Release|Any CPU
33 | 		{A1C4649B-EE1E-4C85-A672-0796DD2AB778}.Release|x64.ActiveCfg = Release|Any CPU
34 | 		{A1C4649B-EE1E-4C85-A672-0796DD2AB778}.Release|x64.Build.0 = Release|Any CPU
35 | 		{A1C4649B-EE1E-4C85-A672-0796DD2AB778}.Release|x86.ActiveCfg = Release|Any CPU
36 | 		{A1C4649B-EE1E-4C85-A672-0796DD2AB778}.Release|x86.Build.0 = Release|Any CPU
37 | 		{3405B4DE-31E9-472D-AEF9-4E0876B39549}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
38 | 		{3405B4DE-31E9-472D-AEF9-4E0876B39549}.Debug|Any CPU.Build.0 = Debug|Any CPU
39 | 		{3405B4DE-31E9-472D-AEF9-4E0876B39549}.Debug|x64.ActiveCfg = Debug|Any CPU
40 | 		{3405B4DE-31E9-472D-AEF9-4E0876B39549}.Debug|x64.Build.0 = Debug|Any CPU
41 | 		{3405B4DE-31E9-472D-AEF9-4E0876B39549}.Debug|x86.ActiveCfg = Debug|Any CPU
42 | 		{3405B4DE-31E9-472D-AEF9-4E0876B39549}.Debug|x86.Build.0 = Debug|Any CPU
43 | 		{3405B4DE-31E9-472D-AEF9-4E0876B39549}.Release|Any CPU.ActiveCfg = Release|Any CPU
44 | 		{3405B4DE-31E9-472D-AEF9-4E0876B39549}.Release|Any CPU.Build.0 = Release|Any CPU
45 | 		{3405B4DE-31E9-472D-AEF9-4E0876B39549}.Release|x64.ActiveCfg = Release|Any CPU
46 | 		{3405B4DE-31E9-472D-AEF9-4E0876B39549}.Release|x64.Build.0 = Release|Any CPU
47 | 		{3405B4DE-31E9-472D-AEF9-4E0876B39549}.Release|x86.ActiveCfg = Release|Any CPU
48 | 		{3405B4DE-31E9-472D-AEF9-4E0876B39549}.Release|x86.Build.0 = Release|Any CPU
49 | 	EndGlobalSection
50 | 	GlobalSection(NestedProjects) = preSolution
51 | 		{A1C4649B-EE1E-4C85-A672-0796DD2AB778} = {C3CAE735-02CC-462D-A6E7-9D5B446D7B5A}
52 | 		{3405B4DE-31E9-472D-AEF9-4E0876B39549} = {C3CAE735-02CC-462D-A6E7-9D5B446D7B5A}
53 | 	EndGlobalSection
54 | EndGlobal
55 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/Api/Api.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk.Web">
 2 | 
 3 |   <PropertyGroup>
 4 |     <TargetFramework>netcoreapp3.1</TargetFramework>
 5 |   </PropertyGroup>
 6 | 
 7 |   <ItemGroup>
 8 |     <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="3.1.0" />
 9 |   </ItemGroup>
10 | 
11 | </Project>
12 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/Api/Program.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Hosting;
 2 | using Microsoft.Extensions.Hosting;
 3 | 
 4 | namespace Api
 5 | {
 6 |     public class Program
 7 |     {
 8 |         public static void Main(string[] args)
 9 |         {
10 |             CreateHostBuilder(args).Build().Run();
11 |         }
12 | 
13 |         public static IHostBuilder CreateHostBuilder(string[] args) =>
14 |             Host.CreateDefaultBuilder(args)
15 |                 .ConfigureWebHostDefaults(webBuilder =>
16 |                 {
17 |                     webBuilder.UseStartup<Startup>();
18 |                 });
19 |     }
20 | }


--------------------------------------------------------------------------------
/OidcTokensApis/src/Api/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "iisSettings": {
 3 |     "windowsAuthentication": false,
 4 |     "anonymousAuthentication": true,
 5 |     "iisExpress": {
 6 |       "applicationUrl": "http://localhost:52222",
 7 |       "sslPort": 44311
 8 |     }
 9 |   },
10 |   "profiles": {
11 |     "IIS Express": {
12 |       "commandName": "IISExpress",
13 |       "launchBrowser": true,
14 |       "environmentVariables": {
15 |         "ASPNETCORE_ENVIRONMENT": "Development"
16 |       }
17 |     },
18 |     "Api": {
19 |       "commandName": "Project",
20 |       "environmentVariables": {
21 |         "ASPNETCORE_ENVIRONMENT": "Development"
22 |       },
23 |       "applicationUrl": "https://localhost:44311/"
24 |     }
25 |   }
26 | }


--------------------------------------------------------------------------------
/OidcTokensApis/src/Api/Startup.cs:
--------------------------------------------------------------------------------
 1 | using System.IdentityModel.Tokens.Jwt;
 2 | using Microsoft.AspNetCore.Builder;
 3 | using Microsoft.Extensions.DependencyInjection;
 4 | 
 5 | namespace Api
 6 | {
 7 |     public class Startup
 8 |     {
 9 |         public Startup()
10 |         {
11 |             JwtSecurityTokenHandler.DefaultMapInboundClaims = false;
12 |         }
13 |         public void ConfigureServices(IServiceCollection services)
14 |         {
15 |             // add MVC (without views)
16 |             services.AddControllers();
17 | 
18 |             services.AddAuthentication("token")
19 |                 .AddJwtBearer("token", options =>
20 |                 {
21 |                     options.Authority = "https://demo.identityserver.io";
22 |                     options.Audience = "api";
23 |                 });
24 |                 
25 |         }
26 | 
27 |         public void Configure(IApplicationBuilder app)
28 |         {
29 |             app.UseDeveloperExceptionPage();
30 | 
31 |             app.UseRouting();
32 | 
33 |             app.UseAuthentication();
34 |             app.UseAuthorization();
35 | 
36 |             app.UseEndpoints(endpoints =>
37 |             {
38 |                 endpoints.MapControllers()
39 |                     .RequireAuthorization();
40 |             });
41 |         }
42 |     }
43 | }


--------------------------------------------------------------------------------
/OidcTokensApis/src/Api/TestController.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Mvc;
 2 | using System.Linq;
 3 | 
 4 | namespace Api
 5 | {
 6 |     [Route("test")]
 7 |     public class TestController : ControllerBase
 8 |     {
 9 |         public IActionResult Get()
10 |         {
11 |             var claims = from c in User.Claims
12 |                          select new { c.Type, c.Value };
13 | 
14 |             return new JsonResult(claims);
15 |         }
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/Api/appsettings.Development.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Debug",
 5 |       "System": "Information",
 6 |       "Microsoft": "Information"
 7 |     }
 8 |   }
 9 | }
10 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/Api/appsettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Information",
 5 |       "Microsoft": "Warning",
 6 |       "Microsoft.Hosting.Lifetime": "Information"
 7 |     }
 8 |   },
 9 |   "AllowedHosts": "*"
10 | }
11 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/Controllers/HomeController.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authorization;
 2 | using Microsoft.AspNetCore.Mvc;
 3 | using Newtonsoft.Json.Linq;
 4 | using System.Net.Http;
 5 | using System.Threading.Tasks;
 6 | 
 7 | namespace MvcCode.Controllers
 8 | {
 9 |     public class HomeController : Controller
10 |     {
11 |         private readonly IHttpClientFactory _httpClientFactory;
12 | 
13 |         public HomeController(IHttpClientFactory httpClientFactory)
14 |         {
15 |             _httpClientFactory = httpClientFactory;
16 |         }
17 | 
18 |         [AllowAnonymous]
19 |         public IActionResult Index() => View();
20 | 
21 |         public IActionResult Secure() => View();
22 | 
23 |         public IActionResult Logout() => SignOut("cookie", "oidc");
24 | 
25 |         public async Task<IActionResult> CallApiAsUser()
26 |         {
27 |             var client = _httpClientFactory.CreateClient("user_client");
28 | 
29 |             var response = await client.GetStringAsync("test");
30 |             ViewBag.Json = JArray.Parse(response).ToString();
31 | 
32 |             return View("CallApi");
33 |         }
34 | 
35 |         [AllowAnonymous]
36 |         public async Task<IActionResult> CallApiAsClient()
37 |         {
38 |             var client = _httpClientFactory.CreateClient("client");
39 | 
40 |             var response = await client.GetStringAsync("test");
41 |             ViewBag.Json = JArray.Parse(response).ToString();
42 | 
43 |             return View("CallApi");
44 |         }
45 |     }
46 | }


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/MvcClient.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk.Web">
 2 | 
 3 |   <PropertyGroup>
 4 |     <TargetFramework>netcoreapp3.1</TargetFramework>
 5 |   </PropertyGroup>
 6 | 
 7 | 
 8 |   <ItemGroup>
 9 |     <PackageReference Include="IdentityModel.AspNetCore" Version="1.0.0-rc.3" />
10 | 
11 |     <PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="3.1.0" />
12 |     <PackageReference Include="Microsoft.Extensions.Http.Polly" Version="3.1.0" />
13 | 
14 |     <PackageReference Include="Serilog.AspNetCore" Version="3.2.0" />
15 |   </ItemGroup>
16 | </Project>


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/Program.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using Microsoft.AspNetCore.Hosting;
 3 | using Microsoft.Extensions.Hosting;
 4 | using Serilog;
 5 | using Serilog.Events;
 6 | using Serilog.Sinks.SystemConsole.Themes;
 7 | 
 8 | namespace MvcCode
 9 | {
10 |     public class Program
11 |     {
12 |         public static void Main(string[] args)
13 |         {
14 |             CreateHostBuilder(args).Build().Run();
15 |         }
16 | 
17 |         public static IHostBuilder CreateHostBuilder(string[] args) =>
18 |             Host.CreateDefaultBuilder(args)
19 |                 .UseSerilog((context, config) =>
20 |                 {
21 |                     config
22 |                         .MinimumLevel.Warning()
23 |                         .MinimumLevel.Override("IdentityModel", LogEventLevel.Debug)
24 |                         .MinimumLevel.Override("System.Net.Http", LogEventLevel.Information)
25 |                         .MinimumLevel.Override("Microsoft.AspNetCore.Authentication", LogEventLevel.Information)
26 |                         .Enrich.FromLogContext()
27 |                         .WriteTo.Console(
28 |                             outputTemplate:
29 |                             "[{Timestamp:HH:mm:ss} {Level}] {SourceContext}{NewLine}{Message:lj}{NewLine}{Exception}{NewLine}",
30 |                             theme: AnsiConsoleTheme.Code);
31 |                 })
32 |                 .ConfigureWebHostDefaults(webBuilder => { webBuilder.UseStartup<Startup>(); });
33 |     }
34 | }


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "iisSettings": {
 3 |     "windowsAuthentication": false, 
 4 |     "anonymousAuthentication": true, 
 5 |     "iisExpress": {
 6 |       "applicationUrl": "http://localhost:45411",
 7 |       "sslPort": 44392
 8 |     }
 9 |   },
10 |   "profiles": {
11 |     "IIS Express": {
12 |       "commandName": "IISExpress",
13 |       "launchBrowser": true,
14 |       "environmentVariables": {
15 |         "ASPNETCORE_ENVIRONMENT": "Development"
16 |       }
17 |     },
18 |     "MvcCode": {
19 |       "commandName": "Project",
20 |       "launchBrowser": true,
21 |       "applicationUrl": "https://localhost:5001;http://localhost:5000",
22 |       "environmentVariables": {
23 |         "ASPNETCORE_ENVIRONMENT": "Development"
24 |       }
25 |     }
26 |   }
27 | }
28 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/Views/Home/CallApi.cshtml:
--------------------------------------------------------------------------------
1 | <h1>API Response</h1>
2 | 
3 | <pre>@ViewBag.Json</pre>


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/Views/Home/Index.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     ViewData["Title"] = "Home Page";
3 | }
4 | 
5 | <div class="text-center">
6 |     <h1 class="display-4">Welcome</h1>
7 |     <p>Learn about <a href="https://docs.microsoft.com/aspnet/core">building Web apps with ASP.NET Core</a>.</p>
8 | </div>
9 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/Views/Home/Secure.cshtml:
--------------------------------------------------------------------------------
 1 | @using Microsoft.AspNetCore.Authentication
 2 | 
 3 | <h2>Claims</h2>
 4 | 
 5 | <dl>
 6 |     @foreach (var claim in User.Claims)
 7 |     {
 8 |         <dt>@claim.Type</dt>
 9 |         <dd>@claim.Value</dd>
10 |     }
11 | </dl>
12 | 
13 | <h2>Properties</h2>
14 | 
15 | <dl>
16 |     @foreach (var prop in (await Context.AuthenticateAsync()).Properties.Items)
17 |     {
18 |         <dt>@prop.Key</dt>
19 |         <dd>@prop.Value</dd>
20 |     }
21 | </dl>


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/Views/Shared/_Layout.cshtml:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 | <head>
 4 |     <meta charset="utf-8" />
 5 |     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
 6 |     <title>@ViewData["Title"] - MvcCode</title>
 7 |     <link rel="stylesheet" href="~/lib/bootstrap/dist/css/bootstrap.min.css" />
 8 |     <link rel="stylesheet" href="~/css/site.css" />
 9 | </head>
10 | <body>
11 |     <header>
12 |         <nav class="navbar navbar-expand-sm navbar-toggleable-sm navbar-light bg-white border-bottom box-shadow mb-3">
13 |             <div class="container">
14 |                 <a class="navbar-brand" asp-area="" asp-controller="Home" asp-action="Index">MvcCode</a>
15 |                 <button class="navbar-toggler" type="button" data-toggle="collapse" data-target=".navbar-collapse" aria-controls="navbarSupportedContent"
16 |                         aria-expanded="false" aria-label="Toggle navigation">
17 |                     <span class="navbar-toggler-icon"></span>
18 |                 </button>
19 |                 <div class="navbar-collapse collapse d-sm-inline-flex flex-sm-row-reverse">
20 |                     <ul class="navbar-nav flex-grow-1">
21 |                         <li class="nav-item">
22 |                             <a class="nav-link text-dark" asp-area="" asp-controller="Home" asp-action="Index">Home</a>
23 |                         </li>
24 |                         <li class="nav-item">
25 |                             <a class="nav-link text-dark" asp-area="" asp-controller="Home" asp-action="Secure">Secure</a>
26 |                         </li>
27 |                         
28 |                         <li class="nav-item">
29 |                             <a class="nav-link text-dark" asp-area="" asp-controller="Home" asp-action="CallApiAsClient">Call API (as Client)</a>
30 |                         </li>
31 | 
32 |                         @if (User.Identity.IsAuthenticated)
33 |                         {
34 |                             <li class="nav-item">
35 |                                 <a class="nav-link text-dark" asp-area="" asp-controller="Home" asp-action="CallApiAsUser">Call API (as User)</a>
36 |                             </li>
37 | 
38 |                             <li class="nav-item">
39 |                                 <a class="nav-link text-dark" asp-area="" asp-controller="Home" asp-action="Logout">Logout</a>
40 |                             </li>
41 |                         }
42 | 
43 |                     </ul>
44 |                 </div>
45 |             </div>
46 |         </nav>
47 |     </header>
48 |     <div class="container">
49 |         <main role="main" class="pb-3">
50 |             @RenderBody()
51 |         </main>
52 |     </div>
53 | 
54 |     <script src="~/lib/jquery/dist/jquery.min.js"></script>
55 |     <script src="~/lib/bootstrap/dist/js/bootstrap.bundle.min.js"></script>
56 |     <script src="~/js/site.js" asp-append-version="true"></script>
57 |     @RenderSection("Scripts", required: false)
58 | </body>
59 | </html>
60 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/Views/Shared/_ValidationScriptsPartial.cshtml:
--------------------------------------------------------------------------------
1 | <script src="~/lib/jquery-validation/dist/jquery.validate.min.js"></script>
2 | <script src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.min.js"></script>
3 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/Views/_ViewImports.cshtml:
--------------------------------------------------------------------------------
1 | @using MvcCode
2 | @addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
3 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/Views/_ViewStart.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     Layout = "_Layout";
3 | }
4 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/appsettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Information",
 5 |       "Microsoft": "Warning",
 6 |       "Microsoft.Hosting.Lifetime": "Information"
 7 |     }
 8 |   },
 9 |   "AllowedHosts": "*"
10 | }
11 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/wwwroot/css/site.css:
--------------------------------------------------------------------------------
 1 | /* Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
 2 | for details on configuring this project to bundle and minify static web assets. */
 3 | 
 4 | a.navbar-brand {
 5 |   white-space: normal;
 6 |   text-align: center;
 7 |   word-break: break-all;
 8 | }
 9 | 
10 | /* Provide sufficient contrast against white background */
11 | a {
12 |   color: #0366d6;
13 | }
14 | 
15 | .btn-primary {
16 |   color: #fff;
17 |   background-color: #1b6ec2;
18 |   border-color: #1861ac;
19 | }
20 | 
21 | .nav-pills .nav-link.active, .nav-pills .show > .nav-link {
22 |   color: #fff;
23 |   background-color: #1b6ec2;
24 |   border-color: #1861ac;
25 | }
26 | 
27 | /* Sticky footer styles
28 | -------------------------------------------------- */
29 | html {
30 |   font-size: 14px;
31 | }
32 | @media (min-width: 768px) {
33 |   html {
34 |     font-size: 16px;
35 |   }
36 | }
37 | 
38 | .border-top {
39 |   border-top: 1px solid #e5e5e5;
40 | }
41 | .border-bottom {
42 |   border-bottom: 1px solid #e5e5e5;
43 | }
44 | 
45 | .box-shadow {
46 |   box-shadow: 0 .25rem .75rem rgba(0, 0, 0, .05);
47 | }
48 | 
49 | button.accept-policy {
50 |   font-size: 1rem;
51 |   line-height: inherit;
52 | }
53 | 
54 | /* Sticky footer styles
55 | -------------------------------------------------- */
56 | html {
57 |   position: relative;
58 |   min-height: 100%;
59 | }
60 | 
61 | body {
62 |   /* Margin bottom by footer height */
63 |   margin-bottom: 60px;
64 | }
65 | .footer {
66 |   position: absolute;
67 |   bottom: 0;
68 |   width: 100%;
69 |   white-space: nowrap;
70 |   line-height: 60px; /* Vertically center the text there */
71 | }
72 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/wwwroot/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/leastprivilege/AspNetCoreSecuritySamples/79848a6e956ecafc858547353459f0c5b161afa9/OidcTokensApis/src/MvcClient/wwwroot/favicon.ico


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/wwwroot/js/site.js:
--------------------------------------------------------------------------------
1 | // Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
2 | // for details on configuring this project to bundle and minify static web assets.
3 | 
4 | // Write your JavaScript code.
5 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/wwwroot/lib/bootstrap/LICENSE:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | 
 3 | Copyright (c) 2011-2018 Twitter, Inc.
 4 | Copyright (c) 2011-2018 The Bootstrap Authors
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.min.css:
--------------------------------------------------------------------------------
1 | /*!
2 |  * Bootstrap Reboot v4.3.1 (https://getbootstrap.com/)
3 |  * Copyright 2011-2019 The Bootstrap Authors
4 |  * Copyright 2011-2019 Twitter, Inc.
5 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
6 |  * Forked from Normalize.css, licensed MIT (https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
7 |  */*,::after,::before{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}article,aside,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}[tabindex="-1"]:focus{outline:0!important}hr{box-sizing:content-box;height:0;overflow:visible}h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem}p{margin-top:0;margin-bottom:1rem}abbr[data-original-title],abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#007bff;text-decoration:none;background-color:transparent}a:hover{color:#0056b3;text-decoration:underline}a:not([href]):not([tabindex]){color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus,a:not([href]):not([tabindex]):hover{color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus{outline:0}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;font-size:1em}pre{margin-top:0;margin-bottom:1rem;overflow:auto}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}svg{overflow:hidden;vertical-align:middle}table{border-collapse:collapse}caption{padding-top:.75rem;padding-bottom:.75rem;color:#6c757d;text-align:left;caption-side:bottom}th{text-align:inherit}label{display:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=reset]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor:pointer}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{padding:0;border-style:none}input[type=checkbox],input[type=radio]{box-sizing:border-box;padding:0}input[type=date],input[type=datetime-local],input[type=month],input[type=time]{-webkit-appearance:listbox}textarea{overflow:auto;resize:vertical}fieldset{min-width:0;padding:0;margin:0;border:0}legend{display:block;width:100%;max-width:100%;padding:0;margin-bottom:.5rem;font-size:1.5rem;line-height:inherit;color:inherit;white-space:normal}progress{vertical-align:baseline}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{outline-offset:-2px;-webkit-appearance:none}[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}output{display:inline-block}summary{display:list-item;cursor:pointer}template{display:none}[hidden]{display:none!important}
8 | /*# sourceMappingURL=bootstrap-reboot.min.css.map */


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/wwwroot/lib/jquery-validation-unobtrusive/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright (c) .NET Foundation. All rights reserved.
 2 | 
 3 | Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 4 | these files except in compliance with the License. You may obtain a copy of the
 5 | License at
 6 | 
 7 | http://www.apache.org/licenses/LICENSE-2.0
 8 | 
 9 | Unless required by applicable law or agreed to in writing, software distributed
10 | under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
11 | CONDITIONS OF ANY KIND, either express or implied. See the License for the
12 | specific language governing permissions and limitations under the License.
13 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/wwwroot/lib/jquery-validation/LICENSE.md:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | =====================
 3 | 
 4 | Copyright Jörn Zaefferer
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/OidcTokensApis/src/MvcClient/wwwroot/lib/jquery/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright JS Foundation and other contributors, https://js.foundation/
 2 | 
 3 | This software consists of voluntary contributions made by many
 4 | individuals. For exact contribution history, see the revision history
 5 | available at https://github.com/jquery/jquery
 6 | 
 7 | The following license applies to all parts of this software except as
 8 | documented below:
 9 | 
10 | ====
11 | 
12 | Permission is hereby granted, free of charge, to any person obtaining
13 | a copy of this software and associated documentation files (the
14 | "Software"), to deal in the Software without restriction, including
15 | without limitation the rights to use, copy, modify, merge, publish,
16 | distribute, sublicense, and/or sell copies of the Software, and to
17 | permit persons to whom the Software is furnished to do so, subject to
18 | the following conditions:
19 | 
20 | The above copyright notice and this permission notice shall be
21 | included in all copies or substantial portions of the Software.
22 | 
23 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
24 | EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
25 | MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
26 | NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
27 | LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
28 | OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
29 | WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
30 | 
31 | ====
32 | 
33 | All files located in the node_modules and external directories are
34 | externally maintained libraries used by this software which have their
35 | own licenses; we recommend you read them, as their terms may differ from
36 | the terms above.
37 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # Samples for various ASP.NET Core Security Features
 2 | 
 3 | Many samples you find on the internet try to demo a certain feature in the context of a larger use-case.
 4 | I find this often distracting.
 5 | 
 6 | The samples here follow the "write the simplest sample to show the feature" philosophy. Maybe you find this more useful.
 7 | 
 8 | ### Local Authentication
 9 | Simple local login page with cookie-based session.
10 | 
11 | ### External Authentication with callback
12 | Google authentication will simple callback logic on an MVC controller.
13 | 
14 | ### OidcTokensApis
15 | Sample showing cookie-based session with OpenID Connect-based authentication and automated access token lifetime management.
16 | 
17 | ### Authorization
18 | Some variations of policy- and resource-based authorization
19 | 
20 | ### DataProtection
21 | Shows simple protect/unprotect calls and corresponding key container.
22 | 
23 | ### SPA & BFF
24 | Two variations of how to protect a JavaScript application. SPA is pure JS where the token management happens in the front-end,
25 | whereas BFF is a combination of UI front-end and back-end token management.
26 | 
27 | ### Device Flow
28 | Simple device flow client.
29 | 


--------------------------------------------------------------------------------
/SPA/SPA.sln:
--------------------------------------------------------------------------------
 1 | 
 2 | Microsoft Visual Studio Solution File, Format Version 12.00
 3 | # Visual Studio Version 16
 4 | VisualStudioVersion = 16.0.29306.81
 5 | MinimumVisualStudioVersion = 10.0.40219.1
 6 | Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "src", "src", "{67606815-81F3-46C6-A8A3-CFF4AD207E82}"
 7 | EndProject
 8 | Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "SpaClientApp", "src\SpaClientApp\SpaClientApp.csproj", "{1CA0D6F0-1FB3-468A-A697-EBB9DFAC67AE}"
 9 | EndProject
10 | Global
11 | 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
12 | 		Debug|Any CPU = Debug|Any CPU
13 | 		Release|Any CPU = Release|Any CPU
14 | 	EndGlobalSection
15 | 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
16 | 		{1CA0D6F0-1FB3-468A-A697-EBB9DFAC67AE}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
17 | 		{1CA0D6F0-1FB3-468A-A697-EBB9DFAC67AE}.Debug|Any CPU.Build.0 = Debug|Any CPU
18 | 		{1CA0D6F0-1FB3-468A-A697-EBB9DFAC67AE}.Release|Any CPU.ActiveCfg = Release|Any CPU
19 | 		{1CA0D6F0-1FB3-468A-A697-EBB9DFAC67AE}.Release|Any CPU.Build.0 = Release|Any CPU
20 | 	EndGlobalSection
21 | 	GlobalSection(SolutionProperties) = preSolution
22 | 		HideSolutionNode = FALSE
23 | 	EndGlobalSection
24 | 	GlobalSection(NestedProjects) = preSolution
25 | 		{1CA0D6F0-1FB3-468A-A697-EBB9DFAC67AE} = {67606815-81F3-46C6-A8A3-CFF4AD207E82}
26 | 	EndGlobalSection
27 | 	GlobalSection(ExtensibilityGlobals) = postSolution
28 | 		SolutionGuid = {E85D4F24-B5C9-46BB-98BB-6D3AAAB7A9E1}
29 | 	EndGlobalSection
30 | EndGlobal
31 | 


--------------------------------------------------------------------------------
/SPA/src/SpaClientApp/Program.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | using Microsoft.AspNetCore;
 5 | using Microsoft.AspNetCore.Hosting;
 6 | 
 7 | namespace SpaClientApp
 8 | {
 9 |     public class Program
10 |     {
11 |         public static void Main(string[] args)
12 |         {
13 |             CreateWebHostBuilder(args).Build().Run();
14 |         }
15 | 
16 |         public static IWebHostBuilder CreateWebHostBuilder(string[] args) =>
17 |             WebHost.CreateDefaultBuilder(args)
18 |                 .UseStartup<Startup>();
19 |     }
20 | }


--------------------------------------------------------------------------------
/SPA/src/SpaClientApp/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "iisSettings": {
 3 |     "windowsAuthentication": false,
 4 |     "anonymousAuthentication": true,
 5 |     "iisExpress": {
 6 |       "applicationUrl": "http://localhost:5000",
 7 |       "sslPort": 0
 8 |     }
 9 |   },
10 |   "profiles": {
11 |     "IIS Express": {
12 |       "commandName": "IISExpress",
13 |       "launchBrowser": true,
14 |       "environmentVariables": {
15 |         "ASPNETCORE_ENVIRONMENT": "Development"
16 |       }
17 |     },
18 |     "SpaClientApp": {
19 |       "commandName": "Project",
20 |       "launchBrowser": true,
21 |       "environmentVariables": {
22 |         "ASPNETCORE_ENVIRONMENT": "Development"
23 |       },
24 |       "applicationUrl": "http://localhost:57695/"
25 |     }
26 |   }
27 | }


--------------------------------------------------------------------------------
/SPA/src/SpaClientApp/SpaClientApp.csproj:
--------------------------------------------------------------------------------
1 | <Project Sdk="Microsoft.NET.Sdk.Web">
2 | 
3 |   <PropertyGroup>
4 |     <TargetFramework>netcoreapp3.0</TargetFramework>
5 |   </PropertyGroup>
6 | 
7 | </Project>


--------------------------------------------------------------------------------
/SPA/src/SpaClientApp/Startup.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | using Microsoft.AspNetCore.Builder;
 5 | 
 6 | namespace SpaClientApp
 7 | {
 8 |     public class Startup
 9 |     {
10 |         public void Configure(IApplicationBuilder app)
11 |         {
12 |             app.UseDeveloperExceptionPage();
13 | 
14 |             app.UseDefaultFiles();
15 |             app.UseStaticFiles();
16 |         }
17 |     }
18 | }


--------------------------------------------------------------------------------
/SPA/src/SpaClientApp/wwwroot/callback.html:
--------------------------------------------------------------------------------
 1 | <!--Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.-->
 3 | 
 4 | <!DOCTYPE html>
 5 | <html>
 6 | <head>
 7 |     <meta charset="utf-8" />
 8 |     <title></title>
 9 | </head>
10 | <body>
11 |     <script src="oidc-client.js"></script>
12 |     <script>
13 |         var mgr = new Oidc.UserManager({ loadUserInfo: true, filterProtocolClaims: true, response_mode: "query" });
14 |         mgr.signinRedirectCallback().then(function (user) {
15 |             console.log(user);
16 |             window.location = "index.html";
17 |         }).catch(function (err) {
18 |             console.log(err);
19 |         });
20 |     </script>
21 | </body>
22 | </html>


--------------------------------------------------------------------------------
/SPA/src/SpaClientApp/wwwroot/index.html:
--------------------------------------------------------------------------------
  1 | <!--Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
  2 | Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.-->
  3 | 
  4 | <!DOCTYPE html>
  5 | <html>
  6 | <head>
  7 |     <meta charset="utf-8" />
  8 |     <title></title>
  9 | </head>
 10 | <body>
 11 |     <div>
 12 |         <button id="login">Login</button>
 13 |         <button id="api">Call API</button>
 14 |         <button id="silent">Renew Token</button>
 15 |         <button id="logout">Logout</button>
 16 |     </div>
 17 |     <div><pre id="out"></pre></div>
 18 | 
 19 |     <script src="oidc-client.js"></script>
 20 | 
 21 |     <script>
 22 |         document.getElementById("silent").addEventListener("click", silent);
 23 |         document.getElementById("login").addEventListener("click", login);
 24 |         document.getElementById("api").addEventListener("click", callApi);
 25 |         document.getElementById("logout").addEventListener("click", logout);
 26 | 
 27 |         var settings = {
 28 |             authority: "https://demo.identityserver.io",
 29 |             client_id: "interactive.public",
 30 |             response_type: "code",
 31 |             scope: "openid profile api",
 32 | 
 33 |             redirect_uri: "http://localhost:5000/callback.html",
 34 |             post_logout_redirect_uri: "http://localhost:5000/index.html",
 35 |             
 36 |             automaticSilentRenew: false,
 37 |             silent_redirect_uri: "http://localhost:5000/silent.html"
 38 |         };
 39 |         var mgr = new Oidc.UserManager(settings);
 40 | 
 41 |         
 42 | 
 43 |         mgr.getUser().then(function (user) {
 44 |             if (user) {
 45 |                 log(user);
 46 |             }
 47 |             else {
 48 |                 log("user is not logged in");
 49 |             }
 50 |         });
 51 | 
 52 |         
 53 |         
 54 |         function login() {
 55 |             mgr.signinRedirect();
 56 |         }
 57 | 
 58 | 
 59 |         function logout() {
 60 |             mgr.signoutRedirect();
 61 |         }
 62 | 
 63 |         function silent() {
 64 |             mgr.signinSilent().then(function (user) {
 65 |                 log("silent renew success!", user);
 66 |             }).catch(function (err) {
 67 |                 log(err);
 68 |             });
 69 |         }
 70 |         
 71 |         mgr.events.addUserSignedOut(function () {
 72 |             log("user is now signed out of the token server");
 73 |         });
 74 | 
 75 |         
 76 |         function callApi() {
 77 |             mgr.getUser().then(function (user) {
 78 | 
 79 |                 var xhr = new XMLHttpRequest();
 80 |                 xhr.open("GET", "https://demo.identityserver.io/api/test");
 81 |                 xhr.onload = function () {
 82 |                     if (xhr.status === 200) {
 83 |                         log(xhr.status, JSON.parse(xhr.responseText));
 84 |                     }
 85 |                     else {
 86 |                         log("Error: " + xhr.status);
 87 |                     }
 88 |                 }
 89 | 
 90 |                 xhr.setRequestHeader("Authorization", "Bearer " + user.access_token);
 91 | 
 92 |                 xhr.send();
 93 | 
 94 |             });
 95 |         }
 96 | 
 97 |         
 98 |         function log() {
 99 |             document.getElementById('out').innerText = '';
100 | 
101 |             Array.prototype.forEach.call(arguments, function (msg) {
102 |                 if (msg instanceof Error) {
103 |                     msg = "Error: " + msg.message;
104 |                 }
105 |                 else if (typeof msg !== 'string') {
106 |                     msg = JSON.stringify(msg, null, 2);
107 |                 }
108 |                 document.getElementById('out').innerHTML += msg + '\r\n';
109 |             });
110 |         }
111 | 
112 |     </script>
113 | 
114 | </body>
115 | </html>


--------------------------------------------------------------------------------
/SPA/src/SpaClientApp/wwwroot/silent.html:
--------------------------------------------------------------------------------
 1 | <!--Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.-->
 3 | 
 4 | <!DOCTYPE html>
 5 | <html>
 6 | <head>
 7 |     <meta charset="utf-8" />
 8 |     <title></title>
 9 | </head>
10 | <body>
11 |     <script src="oidc-client.js"></script>
12 |     <script>
13 |         new Oidc.UserManager().signinSilentCallback();
14 |     </script>
15 | </body>
16 | </html>


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/AspNetCoreSecurity.csproj:
--------------------------------------------------------------------------------
1 | <Project Sdk="Microsoft.NET.Sdk.Web">
2 |   
3 |   <PropertyGroup>
4 |     <TargetFramework>netcoreapp3.0</TargetFramework>
5 |   </PropertyGroup>
6 | 
7 | </Project>


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/Controllers/AccountController.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 3 | 
 4 | using Microsoft.AspNetCore.Authentication;
 5 | using Microsoft.AspNetCore.Mvc;
 6 | using System.Threading.Tasks;
 7 | 
 8 | namespace AspNetCoreSecurity.Controllers
 9 | {
10 |     public class AccountController : Controller
11 |     {
12 |         [HttpGet]
13 |         public IActionResult Login(string returnUrl = null)
14 |         {
15 |             ViewData["ReturnUrl"] = returnUrl;
16 |             return View();
17 |         }
18 | 
19 |         [HttpPost]
20 |         [ValidateAntiForgeryToken]
21 |         public async Task<IActionResult> Login(string userName, string password, string returnUrl = null)
22 |         {
23 |             ViewData["ReturnUrl"] = returnUrl;
24 | 
25 |             if (!string.IsNullOrWhiteSpace(userName) &&
26 |                 userName == password)
27 |             {
28 |                 
29 |             }
30 | 
31 |             return View();
32 |         }
33 | 
34 |         public IActionResult Denied()
35 |         {
36 |             return View();
37 |         }
38 | 
39 |         public async Task<IActionResult> Logout()
40 |         {
41 |             await HttpContext.SignOutAsync();
42 |             return Redirect("/");
43 |         }
44 |     }
45 | }


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/Controllers/HomeController.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authorization;
 2 | using Microsoft.AspNetCore.Mvc;
 3 | 
 4 | namespace AspNetCoreSecurity.Controllers
 5 | {
 6 |     public class HomeController : Controller
 7 |     {
 8 |         public IActionResult Index()
 9 |         {
10 |             return View();
11 |         }
12 | 
13 |         [Authorize]
14 |         public IActionResult Secure()
15 |         {
16 |             return View();
17 |         }
18 |     }
19 | }


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/Program.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Hosting;
 2 | using Microsoft.Extensions.Hosting;
 3 | 
 4 | namespace AspNetCoreSecurity
 5 | {
 6 |     public class Program
 7 |     {
 8 |         public static void Main(string[] args)
 9 |         {
10 |             CreateHostBuilder(args).Build().Run();
11 |         }
12 | 
13 |         public static IHostBuilder CreateHostBuilder(string[] args) =>
14 |             Host.CreateDefaultBuilder(args)
15 |                 .ConfigureWebHostDefaults(webBuilder =>
16 |                 {
17 |                     webBuilder.UseStartup<Startup>();
18 |                 });
19 |     }
20 | }


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "iisSettings": {
 3 |     "windowsAuthentication": false, 
 4 |     "anonymousAuthentication": true, 
 5 |     "iisExpress": {
 6 |       "applicationUrl": "http://localhost:60275",
 7 |       "sslPort": 44305
 8 |     }
 9 |   },
10 |   "profiles": {
11 |     "IIS Express": {
12 |       "commandName": "IISExpress",
13 |       "launchBrowser": true,
14 |       "environmentVariables": {
15 |         "ASPNETCORE_ENVIRONMENT": "Development"
16 |       }
17 |     },
18 |     "AspNetCoreSecurity": {
19 |       "commandName": "Project",
20 |       "launchBrowser": true,
21 |       "applicationUrl": "https://localhost:5001;http://localhost:5000",
22 |       "environmentVariables": {
23 |         "ASPNETCORE_ENVIRONMENT": "Development"
24 |       }
25 |     }
26 |   }
27 | }
28 | 


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/Startup.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Builder;
 2 | using Microsoft.Extensions.DependencyInjection;
 3 | 
 4 | namespace AspNetCoreSecurity
 5 | {
 6 |     public class Startup
 7 |     {
 8 |         public void ConfigureServices(IServiceCollection services)
 9 |         {
10 |             services.AddControllersWithViews();
11 |         }
12 | 
13 |         public void Configure(IApplicationBuilder app)
14 |         {
15 |             app.UseDeveloperExceptionPage();
16 |             app.UseStaticFiles();
17 |             
18 |             app.UseRouting();
19 |             app.UseAuthorization();
20 | 
21 |             app.UseEndpoints(endpoints =>
22 |             {
23 |                 endpoints.MapDefaultControllerRoute();
24 |             });
25 |         }
26 |     }
27 | }


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/Views/Account/AccessDenied.cshtml:
--------------------------------------------------------------------------------
1 | <h2>Access denied!</h2>


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/Views/Account/Login.cshtml:
--------------------------------------------------------------------------------
 1 | <h2>Login</h2>
 2 | 
 3 | <div class="row">
 4 |     <div class="col-md-8">
 5 |         <section>
 6 |             <form asp-controller="Account" asp-action="Login" asp-route-returnurl="@ViewData["ReturnUrl"]" method="post" class="form-horizontal" role="form">
 7 |                 <div class="form-group">
 8 |                     <label class="col-md-2 control-label">UserName</label>
 9 |                     <div class="col-md-10">
10 |                         <input type="text" name="username" />
11 |                     </div>
12 |                 </div>
13 | 
14 |                 <div class="form-group">
15 |                     <label class="col-md-2 control-label">Password</label>
16 |                     <div class="col-md-10">
17 |                         <input type="password" name="password" />
18 |                     </div>
19 |                 </div>
20 | 
21 |                 <div class="form-group">
22 |                     <div class="col-md-offset-2 col-md-10">
23 |                         <button type="submit" class="btn btn-primary">Log in</button>
24 |                     </div>
25 |                 </div>
26 |             </form>
27 | 
28 |             <a asp-action="google"
29 |                asp-route-returnurl="@ViewData["returnurl"]">
30 |                 sign-in with google
31 |             </a>
32 |         </section>
33 |     </div>
34 | </div>


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/Views/Home/Index.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     ViewData["Title"] = "Home Page";
3 | }
4 | 
5 | <div class="text-center">
6 |     <h1 class="display-4">Welcome</h1>
7 |     <p>Learn about <a href="https://identityserver4.readthedocs.io">securing Web apps with IdentityServer</a>.</p>
8 | </div>
9 | 


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/Views/Home/Secure.cshtml:
--------------------------------------------------------------------------------
 1 | @{
 2 |     ViewData["Title"] = "Secure";
 3 | }
 4 | 
 5 | @using Microsoft.AspNetCore.Authentication
 6 | 
 7 | <h2>Claims</h2>
 8 | 
 9 | <dl>
10 |     @foreach (var claim in User.Claims)
11 |     {
12 |         <dt>@claim.Type</dt>
13 |         <dd>@claim.Value</dd>
14 |     }
15 | </dl>
16 | 
17 | <h2>Properties</h2>
18 | 
19 | <dl>
20 |     @foreach (var prop in (await Context.AuthenticateAsync()).Properties.Items)
21 |     {
22 |         <dt>@prop.Key</dt>
23 |         <dd>@prop.Value</dd>
24 |     }
25 | </dl>


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/Views/Shared/_ValidationScriptsPartial.cshtml:
--------------------------------------------------------------------------------
 1 | <environment include="Development">
 2 |     <script src="~/lib/jquery-validation/dist/jquery.validate.js"></script>
 3 |     <script src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.js"></script>
 4 | </environment>
 5 | <environment exclude="Development">
 6 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.17.0/jquery.validate.min.js"
 7 |             asp-fallback-src="~/lib/jquery-validation/dist/jquery.validate.min.js"
 8 |             asp-fallback-test="window.jQuery && window.jQuery.validator"
 9 |             crossorigin="anonymous"
10 |             integrity="sha256-F6h55Qw6sweK+t7SiOJX+2bpSAa3b/fnlrVCJvmEj1A=">
11 |     </script>
12 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-validation-unobtrusive/3.2.11/jquery.validate.unobtrusive.min.js"
13 |             asp-fallback-src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.min.js"
14 |             asp-fallback-test="window.jQuery && window.jQuery.validator && window.jQuery.validator.unobtrusive"
15 |             crossorigin="anonymous"
16 |             integrity="sha256-9GycpJnliUjJDVDqP0UEu/bsm9U+3dnQUH8+3W10vkY=">
17 |     </script>
18 | </environment>
19 | 


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/Views/_ViewImports.cshtml:
--------------------------------------------------------------------------------
1 | @using AspNetCoreSecurity
2 | @addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
3 | 


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/Views/_ViewStart.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     Layout = "_Layout";
3 | }
4 | 


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/appsettings.Development.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Debug",
 5 |       "System": "Information",
 6 |       "Microsoft": "Information"
 7 |     }
 8 |   }
 9 | }
10 | 


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/appsettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Information",
 5 |       "Microsoft": "Warning",
 6 |       "Microsoft.Hosting.Lifetime": "Information"
 7 |     }
 8 |   },
 9 |   "AllowedHosts": "*"
10 | }
11 | 


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/wwwroot/css/site.css:
--------------------------------------------------------------------------------
 1 | /* Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
 2 | for details on configuring this project to bundle and minify static web assets. */
 3 | 
 4 | a.navbar-brand {
 5 |   white-space: normal;
 6 |   text-align: center;
 7 |   word-break: break-all;
 8 | }
 9 | 
10 | /* Provide sufficient contrast against white background */
11 | a {
12 |   color: #0366d6;
13 | }
14 | 
15 | .btn-primary {
16 |   color: #fff;
17 |   background-color: #1b6ec2;
18 |   border-color: #1861ac;
19 | }
20 | 
21 | .nav-pills .nav-link.active, .nav-pills .show > .nav-link {
22 |   color: #fff;
23 |   background-color: #1b6ec2;
24 |   border-color: #1861ac;
25 | }
26 | 
27 | /* Sticky footer styles
28 | -------------------------------------------------- */
29 | html {
30 |   font-size: 14px;
31 | }
32 | @media (min-width: 768px) {
33 |   html {
34 |     font-size: 16px;
35 |   }
36 | }
37 | 
38 | .border-top {
39 |   border-top: 1px solid #e5e5e5;
40 | }
41 | .border-bottom {
42 |   border-bottom: 1px solid #e5e5e5;
43 | }
44 | 
45 | .box-shadow {
46 |   box-shadow: 0 .25rem .75rem rgba(0, 0, 0, .05);
47 | }
48 | 
49 | button.accept-policy {
50 |   font-size: 1rem;
51 |   line-height: inherit;
52 | }
53 | 
54 | /* Sticky footer styles
55 | -------------------------------------------------- */
56 | html {
57 |   position: relative;
58 |   min-height: 100%;
59 | }
60 | 
61 | body {
62 |   /* Margin bottom by footer height */
63 |   margin-bottom: 60px;
64 | }
65 | .footer {
66 |   position: absolute;
67 |   bottom: 0;
68 |   width: 100%;
69 |   white-space: nowrap;
70 |   line-height: 60px; /* Vertically center the text there */
71 | }
72 | 


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/wwwroot/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/leastprivilege/AspNetCoreSecuritySamples/79848a6e956ecafc858547353459f0c5b161afa9/Start/AspNetCoreSecurity/wwwroot/favicon.ico


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/wwwroot/js/site.js:
--------------------------------------------------------------------------------
1 | // Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
2 | // for details on configuring this project to bundle and minify static web assets.
3 | 
4 | // Write your JavaScript code.
5 | 


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/wwwroot/lib/bootstrap/LICENSE:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | 
 3 | Copyright (c) 2011-2018 Twitter, Inc.
 4 | Copyright (c) 2011-2018 The Bootstrap Authors
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.min.css:
--------------------------------------------------------------------------------
1 | /*!
2 |  * Bootstrap Reboot v4.3.1 (https://getbootstrap.com/)
3 |  * Copyright 2011-2019 The Bootstrap Authors
4 |  * Copyright 2011-2019 Twitter, Inc.
5 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
6 |  * Forked from Normalize.css, licensed MIT (https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
7 |  */*,::after,::before{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}article,aside,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}[tabindex="-1"]:focus{outline:0!important}hr{box-sizing:content-box;height:0;overflow:visible}h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem}p{margin-top:0;margin-bottom:1rem}abbr[data-original-title],abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#007bff;text-decoration:none;background-color:transparent}a:hover{color:#0056b3;text-decoration:underline}a:not([href]):not([tabindex]){color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus,a:not([href]):not([tabindex]):hover{color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus{outline:0}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;font-size:1em}pre{margin-top:0;margin-bottom:1rem;overflow:auto}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}svg{overflow:hidden;vertical-align:middle}table{border-collapse:collapse}caption{padding-top:.75rem;padding-bottom:.75rem;color:#6c757d;text-align:left;caption-side:bottom}th{text-align:inherit}label{display:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=reset]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor:pointer}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{padding:0;border-style:none}input[type=checkbox],input[type=radio]{box-sizing:border-box;padding:0}input[type=date],input[type=datetime-local],input[type=month],input[type=time]{-webkit-appearance:listbox}textarea{overflow:auto;resize:vertical}fieldset{min-width:0;padding:0;margin:0;border:0}legend{display:block;width:100%;max-width:100%;padding:0;margin-bottom:.5rem;font-size:1.5rem;line-height:inherit;color:inherit;white-space:normal}progress{vertical-align:baseline}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{outline-offset:-2px;-webkit-appearance:none}[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}output{display:inline-block}summary{display:list-item;cursor:pointer}template{display:none}[hidden]{display:none!important}
8 | /*# sourceMappingURL=bootstrap-reboot.min.css.map */


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/wwwroot/lib/jquery-validation-unobtrusive/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright (c) .NET Foundation. All rights reserved.
 2 | 
 3 | Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 4 | these files except in compliance with the License. You may obtain a copy of the
 5 | License at
 6 | 
 7 | http://www.apache.org/licenses/LICENSE-2.0
 8 | 
 9 | Unless required by applicable law or agreed to in writing, software distributed
10 | under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
11 | CONDITIONS OF ANY KIND, either express or implied. See the License for the
12 | specific language governing permissions and limitations under the License.
13 | 


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/wwwroot/lib/jquery-validation/LICENSE.md:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | =====================
 3 | 
 4 | Copyright Jörn Zaefferer
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/Start/AspNetCoreSecurity/wwwroot/lib/jquery/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright JS Foundation and other contributors, https://js.foundation/
 2 | 
 3 | This software consists of voluntary contributions made by many
 4 | individuals. For exact contribution history, see the revision history
 5 | available at https://github.com/jquery/jquery
 6 | 
 7 | The following license applies to all parts of this software except as
 8 | documented below:
 9 | 
10 | ====
11 | 
12 | Permission is hereby granted, free of charge, to any person obtaining
13 | a copy of this software and associated documentation files (the
14 | "Software"), to deal in the Software without restriction, including
15 | without limitation the rights to use, copy, modify, merge, publish,
16 | distribute, sublicense, and/or sell copies of the Software, and to
17 | permit persons to whom the Software is furnished to do so, subject to
18 | the following conditions:
19 | 
20 | The above copyright notice and this permission notice shall be
21 | included in all copies or substantial portions of the Software.
22 | 
23 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
24 | EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
25 | MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
26 | NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
27 | LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
28 | OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
29 | WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
30 | 
31 | ====
32 | 
33 | All files located in the node_modules and external directories are
34 | externally maintained libraries used by this software which have their
35 | own licenses; we recommend you read them, as their terms may differ from
36 | the terms above.
37 | 


--------------------------------------------------------------------------------
/Start/Start.sln:
--------------------------------------------------------------------------------
 1 | 
 2 | Microsoft Visual Studio Solution File, Format Version 12.00
 3 | # Visual Studio Version 16
 4 | VisualStudioVersion = 16.0.29020.237
 5 | MinimumVisualStudioVersion = 10.0.40219.1
 6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "AspNetCoreSecurity", "AspNetCoreSecurity\AspNetCoreSecurity.csproj", "{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}"
 7 | EndProject
 8 | Global
 9 | 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
10 | 		Debug|Any CPU = Debug|Any CPU
11 | 		Release|Any CPU = Release|Any CPU
12 | 	EndGlobalSection
13 | 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
14 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
15 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Debug|Any CPU.Build.0 = Debug|Any CPU
16 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Release|Any CPU.ActiveCfg = Release|Any CPU
17 | 		{9481FEFD-5F8A-4E11-B5F8-5319C74928DE}.Release|Any CPU.Build.0 = Release|Any CPU
18 | 	EndGlobalSection
19 | 	GlobalSection(SolutionProperties) = preSolution
20 | 		HideSolutionNode = FALSE
21 | 	EndGlobalSection
22 | 	GlobalSection(ExtensibilityGlobals) = postSolution
23 | 		SolutionGuid = {B16F60B5-AFFD-4B9C-9CB9-C3DE513F6307}
24 | 	EndGlobalSection
25 | EndGlobal
26 | 


--------------------------------------------------------------------------------