Monthly Archives: August 2016

Why does my Authorize Attribute not work?

Posted on August 21, 2016 by Dominick Baier

Sad title, isn’t it? The alternative would have been “The complicated relationship between claim types, ClaimsPrincipal, the JWT security token handler and the Authorize attribute role checks” – but that wasn’t very catchy. But the reality is, that many people are struggling … Continue reading →

Posted in .NET Security, OAuth, OpenID Connect, WebAPI | 11 Comments

Trying IdentityServer

Posted on August 17, 2016 by Dominick Baier

We have a demo instance of IdentityServer3 on https://demo.identityserver.io. I already used this for various samples (e.g. the OpenID Connect native clients) – and it makes it easy to try IdentityServer with your clients without having to deploy and configure … Continue reading →

Posted in ASP.NET, IdentityServer, OpenID Connect, OWIN, Uncategorized, WebAPI | 2 Comments

Commercial Support Options for IdentityServer

Posted on August 16, 2016 by Dominick Baier

Many customers have asked us for production support for IdentityServer. While this is something we would love to provide, Brock and I can’t do that on our own because we can’t guarantee the response times. I am happy to announce that … Continue reading →

Posted in ASP.NET, IdentityServer, OAuth, OpenID Connect, WebAPI | 1 Comment