OAuth client credentials signing/encryption about identityserver3 HOT 7 CLOSED

Hmm... I guess I'm wrong. I guess the third part of the message is what I'm looking for. But I guess there should be some checking done if I want to call a service using this token... Maybe it would have been nice to do this checking in the sample. Anyway, I have no idea how to check it, I will investigate.

from identityserver3.

I guess I should use the WIF to do this on the server side... But I'm not sure how to do this. I've been searching to do a validation programatically without success for now.

from identityserver3.

I have the same problem for the "MVC CodeFlowClient Manual" sample. I don't know what to do with the token after I retrieve it. I like the way it is lightweight and there is no WS-federation and no WIF client configuration, but I believe I still have to check the signature of the token, right? Is there an easy way on how to do that? I'm getting lost in all the WIF stuff to be honest...

from identityserver3.

At least in my opinion, you need to learn “all of the WIF stuff” before embarking on IdentityServer project – speaking from own experience :)

Nikolaj Ivancic

From: mciureanu [mailto:[email protected]]
Sent: Monday, April 14, 2014 10:22 AM
To: thinktecture/Thinktecture.IdentityServer.v3
Subject: Re: [Thinktecture.IdentityServer.v3] OAuth client credentials signing/encryption (#44)

I have the same problem for the "MVC CodeFlowClient Manual" sample. I don't know what to do with the token after I retrieve it. I like the way it is lightweight and there is no WS-federation and no WIF client configuration, but I believe I still have to check the signature of the token, right? Is there an easy way on how to do that? I'm getting lost in all the WIF stuff to be honest...

—
Reply to this email directly or view it on GitHub #44 (comment) . https://github.com/notifications/beacon/2712405__eyJzY29wZSI6Ik5ld3NpZXM6QmVhY29uIiwiZXhwaXJlcyI6MTcxMzEwNDQ5NiwiZGF0YSI6eyJpZCI6Mjk5NDU0NzJ9fQ==--d2b7b595bf2ac69cd6ef2c2ea249780ff7242c1a.gif

from identityserver3.

The current samples don't really focus on the token validation and usage parts because we wanted to get feedback on the actual token content first. But the form post client sample has the validation in it, see here:

https://github.com/thinktecture/Thinktecture.IdentityServer.v3/blob/master/samples/Clients/MvcFormPostClient/Controllers/AccountController.cs#L49

from identityserver3.

Thank you , didn't check this one. I was close :)
IdentityServer 3 seems closer to what I needed. I also appreciate that everything was ready to execute and almost self-explaining, I played with the examples and only later noticed that there are some videos.

from identityserver3.

Cool, glad you like it. Please keep in mind that this is not production quality as of yet.

from identityserver3.