We think AS is now at a point where it can be used by “normal people” (meaning without having to modify database rows manually etc..)
The repo contains a number of samples demonstrating the various flows, e.g.:
- Client Credentials Flow
- Implicit Flow (using Windows 8)
- Implicit Flow (using JavaScript)
- Resource Owner Password Credential Flow
- Authorization Code Flow
The wiki compiles all blog posts written so far as well as two introductory videos to get you started.
Have fun and gives us feedback!
Not sure if this is the right place to leave feedback, but an extensibility point to refresh claims from a source (e.g. refresh role memberships from an AD) when a new access token is issued based on a refresh token would be most useful (in CreateTokenResponseFromRefreshToken).
This would be only possible if AS and IdP are the same entity. In our design they are not.