Category Archives: AuthorizationServer

NDC Oslo 2013 Slides and Videos

Posted on June 27, 2013 by Dominick Baier

The NDC videos are online now! Web API Security (includes first public demo ever of AuthorizationServer)Video: https://vimeo.com/68327244Slides: https://speakerdeck.com/leastprivilege/securing-asp-dot-net-web-api-ndc-oslo-2013 OAuth2 – The good, the bad and the uglyVideo: https://vimeo.com/68331687Slides: https://speakerdeck.com/leastprivilege/oauth2-the-good-the-bad-and-the-ugly-ndc-oslo-2013 Enjoy!

Posted in .NET Security, AuthorizationServer, IdentityModel, IdentityServer, OAuth, WebAPI | Leave a comment

Authentication in AuthorizationServer

Posted on June 18, 2013 by Dominick Baier

AS does not do its own authentication – that’s by design. When you download from the repo, AS is set up to be a WS-Federation relying party. In the configuration folder of the WebHost project you’ll find two config files: … Continue reading →

Posted in AuthorizationServer, IdentityModel, IdentityServer, OAuth, WebAPI | 3 Comments

What’s in an AuthorizationServer Access Token?

Posted on June 17, 2013 by Dominick Baier

The main job of AS is to produce access tokens in the JWT format. The client and the user provide the following input information for that process: Clientapplication (via the endpoint URL), client identifier, scopes Useridentity, consent to the requested … Continue reading →

Posted in AuthorizationServer, IdentityModel, OAuth, WebAPI | 4 Comments