ASP.NET Core 3 - IdentityServer4 - Ep.20 PKCE

[@SachinDewan12]

Hi, I have gone through the almost all videos in this series and I am expressing gratitude for you for this exceptional series. Thank you keep it up. Can you please have some videos on microservice

[@mahmoudalaskalany]

this is the most impressive series of videos i have ever watch for identity server i am using the information i learned from your stuff in en enterprise project now with SSO i hope i can finish it and thanks again for your effort just keep up the good work man

[@RawCoding]

Cheers ) good luck, let me know how it goes!

[@XurimX]

Thank you man. I feel more confident getting into Identity Server after watching your videos.

[@RawCoding]

Glad I could help :)

[@larskjrsgaard4881]

Thank you very much for this entire series. It provides an invaluable base understanding of the concepts - something I have sorely missed. From here to proficiency! Your pace is good and fast and the progression is very logical and easy to follow. It is a pleasure to follow your videos. I can - and will - highly recommend. I have done a few demo videos myself - I know a bit about what's involved am impressed by your work. A very cool episode in this series could be about integrating Windows Authentication.

[@RawCoding]

Thank you and glad you enjoyed it! Other people have asked for this too, I would like to show what windows authentication allows you to do in terms of active directory etc... but I don't have that setup at home, so I really won't be able to teach more than passing the windows token, which is not that hard, I'd like to be able to show the possibilities.

[@larskjrsgaard4881]

@@RawCoding Yeah, AD setup at home is taking it far :-) Windows authentication also works with the local user accounts once Windows Authentication is enabled in appsettings. And there is all the hassle with Windows Auth not kicking in once anonymous is enabled. So as far as I understand, Kestrel needs to be in play behind IIS if you want windows auth and anonymous concurrently, but not sure this is correct (desperately trying to get a handle on all this)....? I am a complete newbie in this context - an episode from you would see me right :-) In the meantime, could you provide a good starting point for passing the windows token?

[@RawCoding]

I see, okey I'll make an episode about that)

[@larskjrsgaard4881]

@@RawCoding Thanks, man! You're the best!

[@XxR87]

Congratulations man!! i've watched all episodes, this series is so great, thanks for sharing your knowledge with us!!

[@RawCoding]

Cheers ma dude

[@chavdarmihaylov7235]

Very useful tutorial, thank you!

[@RawCoding]

Cheers

[@ricardothomas3779]

Hey Anton. Great video. Thank you.

[@RawCoding]

Thank you for watching))

[@ricardothomas3779]

@@RawCoding Up Top Anton. Up Top => is the Jamaican slang for Kudos, or In agreement with. Please remember the video on Email verification and 2Factor Auhentication.

[@umeshkumawat8768]

Hi, Just amazing how you describe the topics. Thanks a lot. Please also make a video on C# generics.

[@RawCoding]

Okey

[@ahmerkhan7479]

Man you are great! Just keep going

[@RawCoding]

Thank you 🙏

[@mihaimyh]

Hi, thank you for these videos, I was looking for IdentityServer configuration and I am planning watching your series from the beginning. I do have a question: did you implemented or consider implementing something like an admin UI for IdentityServer to manage users, claims, clients and resources? I know IdentityServer has a paid one but I am more interested in building one myself. Keep up the good work!

[@RawCoding]

Thank. You and no I didn't

[@CihanGullu]

Hi. You can check github.com/skoruba/IdentityServer4.Admin project for AdminUI. Its under MIT license.

[@ameendadude]

Hi, I would recommend anybody this tutorial as it is so easy to learn about IdentityServer4 mainly because of the way you teach core concepts. Could you please release another video of how to use IdentityServer with WsFederation and how to integrate IdentityServer4 to an old MVC project without OWIN.

[@RawCoding]

Thank you, could do an old mvc project, don't think I know what wsfederation is

[@ameendadude]

@@RawCoding Thanks, man. You can find more details about WsFederation here github.com/IdentityServer/IdentityServer4.WsFederation identityserver4.readthedocs.io/en/3.1.0/intro/big_picture.html#authentication

[@brucewang783]

thanks man

[@RawCoding]

Ty for watching!

[@YousefMMS89]

I just finished this playlist, and want to say thank you for this amazing effort you put in there to do this! I really enjoyed and learned a lot of new stuff, thank you! I have a question, I see IdentintyServer is very powerful very customizable, do you know if there a javascript alternative for IdentityServer?

[@RawCoding]

Thank you :) Looks like nothing too popular in terms of auth servers in nodejs. stackoverflow.com/questions/6822840/is-there-a-node-oauth-server-implementation

[@GiampaoloRebuzzi]

Thank you for your videos about Identity Server 4, they are awesome. Have you ever succeded making an old MVC client based on .net framework 4.x work with Identity Server 4? I tried to adapt the Identity Server 3 examples with owin, but I had some problems with packages versions and I didn't find any complete working example/configuration.

[@RawCoding]

You need to find an oidc client for .net framework

[@spuppett]

These have been great videos, thank you! Any thoughts on making something for a multi-tenet scenario? I haven't seen much online that's terribly useful. My situation is that I'd like 1 IdS that multiple clients can log into, AND each login should be branded per client. Thanks again for a great series.

[@RawCoding]

I'll take a look, haven't done multi tenancy

[@noura1427]

Excellent tutorial much appreciated, what happens when the token expires how to request new token for the JS client since there is no refresh token shall the user login again?

[@RawCoding]

Watch my new authentication series. You have to roll a backend with your front end.

[@RealmOfCode]

Nice...thank you very much for this playlist! Would it be possible, in a near future, to add an episode on mapping claims to AspNetUsers fields? In my case, I extended IdentityUser with my own User class, which includes the fields: FirstName, Nickname, LastName, Birthdate, etc...The Users table is being constructed and the basic fields (Id & UserName) are being filled after seeding, but after adding some of the profile claims to "Bob" (given_name, family_name, nickname), these don't get mapped on initial seeding (I've deleted the DB before re-trying, so it gets re--generated). I'm surely missing something. The field names obviously don't match, so I'm left with a lagoon when it comes to mapping. Thanks!

[@RawCoding]

Try the ClaimsTransformation, I cover it in episode 4. Also check this out: adrientorris.github.io/aspnet-core/identity/extend-user-model.html

[@RealmOfCode]

@@RawCoding Cool, I'll check it out, Thanks!

[@sltop1651]

Hi.I finished your awesome tutorials and can't wait to start using my knowlege.I was thinking of a scenario but not sure if its achievable.Can same api be hosted on two different servers.For example two client companies has their own servers, sql databases and api.Can mobile app know which api to use depending on logged user?

[@RawCoding]

Thank you, and yes that is possible!

[@sltop1651]

@@RawCoding Tnx.I assumed its possible but what not sure what mechanism to use to tell client "your api is on url xxxx".It has to be dynamic somehow.Can I put it in a claim?And use that url to create base for my api calls?

[@RawCoding]

Yes you can store that in a claim, then it's depending on your identity server. You could poll some other service that would return the value and you store that on the device, then you need some kind of initialization process in the app, but they usually have one anyway. It's a creative process there are many solutions here, have a think or if you are completely lost just try to implement it.

[@ognjenzivic8674]

Hi do you have any plans of creating video how to enable MFA with Microsoft or Google authentication app?

[@RawCoding]

Nope

[@sumitneg1984]

Hi , your tutorials have helped me a lot can you pl , also cover Mutual TSL implementation in identityserver4

[@RawCoding]

Thank you, and no I have no clue what that is.

[@sumitneg1984]

@@RawCoding docs.identityserver.io/en/latest/topics/mtls.html is the documentation page. I have successfully implemented mutual TLS in one of my application wherein client also presents his certificate to server and the TLS handshake happens only after the presented certificate is found correct by client and server respectively. But since there are redirects happening in identity server , i am finding it difficult to execute . Your help if provided would be highly appreciated

[@sumitneg1984]

Thanks .... i did it ... guys like you and many more are real asset to open source community

[@RawCoding]

@@sumitneg1984 well done and thanks for sharing the docs

[@vivekgowda1576]

Hi sir , when i'm calling api from js client using identity Getting error like this IDX20804: Unable to retrieve document from: 'localhost:44336/.well-known/openid-configuration'. Inner Exception is The SSL connection could not be established, see inner exception. Please help out

[@RawCoding]

Check the configuration of the addresses on your client, api and server.

[@iam_zain]

HOw the flow is Implicit if we are using Grant Type code @4:08

[@dragosraduc]

hi, do you offer any paid consultancy for designing a custom IdP solution? Thanks!

[@RawCoding]

I have a student section on patreon, 3 hrs / month for $70 if you’d like something else reach out to me on discord

[@amanjain6354]

Thank you for the great tutorial..can you help me to implement this according to my requirement ? I have created Identity Server as you created in tutorial and mvc client is authenticated with this Idenity server and returned the id_token and access_token. now mvc client will call multiple APIs and these APIs will further call multiple API. I have my own authorization module where roles and api access permission is stored in DB. My question is how can we only authenticate multiple microservices ? can we pass openid token while calling api ? and api can validate token with identity server ? or what is best way to authenticate microservices (nested microservices) ?

[@RawCoding]

Use client credentials

[@amanjain6354]

@@RawCoding I have thousands micro-services interacting with each other. how Identity server/ Oauth can help here ? do we need to register all microservices with the user (in a Identity resource) ?

[@RawCoding]

If you can afford to have 1000 micro services you should hire a professional and not ask questions in KZbin comments. if you are exposing all you microservices to the user through your api it’s bad design already. Use cloud infrastructure support to delegate access between your components this shouldn’t concern your identity server. If you have communication between 2 different public apis use client credentials.

[@vivekgowda1576]

where you configure the identity url in java script client ? like how js client come to know exactly hit to auth/Login ?

[@vivekgowda1576]

i'm using database to get the client value in identity server

[@RawCoding]

There well known endpoint, you configure your backend and the is client will find out through the well known endpoint

[@vivekgowda1576]

I'm bit confusing... please let me know where exactly configur end points in backend

[@vivekgowda1576]

i mean in config.cs file should i configure ?

[@RawCoding]

Full implementation is described here: openid.net/specs/openid-connect-core-1_0.html This episode is meant to teach about the flow in a lax manner, identity server will take care of implementing these endpoints for you.

[@carlosjosejimenezbermudez9255]

how do you refresh the token with PKCE?

[@RawCoding]

Same way you do it for other flows.

[@abuaws4922]

Thank you so much for these piece of art series on identity server 4 Like share and subscribe is not enough, youtube needs to introduce a new way to appreciate your effort I need you opinion in what is the best way to follow in implementing this pure restful API. 1) About .net core microservices. (one of which is for Identity [authentication] , one also for permission) 2) API gateway microservice which acts like the public interface to end user 3) The front end is angular app. 4) I am also using RabbitMQ which one of the flaws suit me best? and if you do have any other recommendations since they mention in the identity server official documentation not to use resource owner password flaw. again that you so much for these series and i wish you a life full of prosperity and joy

[@RawCoding]

Thank you, you want to use auth code with pkce as I’ve showed with the oidc client