New in IdentityServer4: Resource Owner Password Validation

Not completely new, but re-designed.

In IdentityServer3, we used the user service for both interactive as well as non-interactive authentication. In IdentityServer4, the interactive authentication is done by the UI.

OAuth 2 resource owner password validation is disabled by default – but you can add support for it by implementing and registering the IResourceOwnerPasswordValidator interface.

This gives you more flexibility as in IdentityServer3 since you get access to the raw request and you have more control over the token response via the new GrantValidationResult.

This entry was posted in ASP.NET, IdentityServer, OAuth, WebAPI. Bookmark the permalink.

5 Responses to New in IdentityServer4: Resource Owner Password Validation

  1. phuong says:

    Does IdentityServer4 support custom user/password with hybrid mode ?

  2. chauchauvn says:

    Oh…
    I see it, tks so much

Leave a comment