An ASP.NET Core 6.0 IdentityServer4 Identity Bootstrap 4 template with localization

Home Page: https://www.nuget.org/packages/IdentityServer4AspNetCoreIdentityTemplate/

License: MIT License

C# 44.27% JavaScript 4.90% CSS 31.71% HTML 19.11%

identityserver4 identity sts aspnet-core mvc bootstrap4 localization 2fa aspnetcore nuget

identityserver4aspnetcoreidentitytemplate's Introduction

An ASP.NET Core IdentityServer4 Identity Template with Bootstrap 4 and Localization

Change log

Features

ASP.NET Core 6
Latest ASP.NET Core Identity
Bootstrap 4 UI
Localization en-US, de-DE, it-IT, fr-FR, zh-Hans, es-MX, de-CH, ga-IE, gsw-CH
2FA
TOTP
FIDO2 MFA
Personal data, download, delete (part of Identity)
Azure AD, Cert, key vault deployments API
SendGrid Email API
npm with bundleconfig used for frontend packages
EF Core
Support for ui_locales using OIDC logins

some print screens:

it-IT

de-DE

en-US

fr-FR

zh-Hans

Using the template

install

From NuGet:

dotnet new -i IdentityServer4AspNetCoreIdentityTemplate

Locally built nupkg:

dotnet new -i IdentityServer4AspNetCoreIdentityTemplate.6.0.1.nupkg

Local folder:

dotnet new -i <PATH>

Where <PATH> is the path to the folder containing .template.config.

run

dotnet new sts -n YourCompany.Sts

Use the -n or --name parameter to change the name of the output created. This string is also used to substitute the namespace name in the .cs file for the project.

Setup, Using the application for your System

Change the EF Core code from SQLite to your required database
Change the ApplicationUser class as required, remove/add the properties
Add the migrations and create the database
Define the deployment URLs, create the certs, and use these in your application (Startup, config files)
Add the external providers for login as required, or remove
Remove the UI views which are not required
Add remove the resource file localizations and also in the Startup.
Add the client configuration to the Config.cs class (dev, test, staging, prod, or whatever)
Update the claims in the IdentityWithAdditionalClaimsProfileService
Add the security headers as required, CSP, IFrame, XSS, HSTS, ...
If you deploy in a multi instance environment, add the session data to a database using the IdentityServer4.EntityFramework NuGet package
Add "AZURE_TENANT_ID": "your-tenandId" to the launch settings to test in VS with Azure Key Vault certificates

uninstall

dotnet new -u IdentityServer4AspNetCoreIdentityTemplate

Development

build

https://docs.microsoft.com/en-us/dotnet/core/tutorials/create-custom-template

nuget pack content/IdentityServer4AspNetCoreIdentityTemplate.nuspec

dotnet Migrations

open the cmd in project folder:

dotnet restore

dotnet ef migrations add sts_init --context ApplicationDbContext --verbose

dotnet ef database update  --verbose

Using Powershell to create the self signed certs:

New-SelfSignedCertificate -DnsName "sts.dev.cert.com", "sts.dev.cert.com" -CertStoreLocation "cert:\LocalMachine\My"

$mypwd = ConvertTo-SecureString -String "1234" -Force -AsPlainText

Get-ChildItem -Path cert:\localMachine\my\"The thumbprint..." | Export-PfxCertificate -FilePath C:\git\sts_dev_cert.pfx -Password $mypwd

Credits, Used NuGet packages + ASP.NET Core 3.1 standard packages

IdentityServer4
IdentityServer4.AspNetIdentity
Azure.Security.KeyVault.Secrets
Microsoft.IdentityModel.Clients.ActiveDirectory
Sendgrid
NetEscapades.AspNetCore.SecurityHeaders
Serilog

Links

http://docs.identityserver.io/en/release/

https://github.com/IdentityServer/IdentityServer4

https://getbootstrap.com/

https://nodejs.org/en/

https://www.npmjs.com/

identityserver4aspnetcoreidentitytemplate's People

Contributors

Stargazers

Watchers

identityserver4aspnetcoreidentitytemplate's Issues

Add missing Swiss German translations

SharedResource.gsw-CH_ZH.resx Need a zurich person for this :) @manuelmeyer1

SharedResource.gsw-CH.resx

Verifyemail sends resetpassword link

Accountcontroller.cs -> SendVerificationEmail(...)

var callbackUrl = Url.Action("ResetPassword", "Account", new { userId = user.Id, code = code }, protocol: HttpContext.Request.Scheme);

Should be:
var callbackUrl = Url.Action("ConfirmEmail", "Account", new { userId = user.Id, code = code }, protocol: HttpContext.Request.Scheme);

Dotnet new template does not support namespace

It is currently not possible to specify the namespace when creating a new project from the template. The namespace and the project filename should use the project name.

See here for a working example: https://github.com/skoruba/IdentityServer4.Admin/tree/master/templates

Update to IdentityServer4 V4 release

new translations it-IT

https://github.com/damienbod/IdentityServer4AspNetCoreIdentityTemplate/blob/master/content/StsServerIdentity/Resources/SharedResource.it-IT.resx

Use branching model

Maybe it would be better, to use some sort of branching model :)

Improve Irish translation ga-IE

https://github.com/damienbod/IdentityServer4AspNetCoreIdentityTemplate/tree/master/content/StsServerIdentity/Resources
@ Niall Merrigan ‏

Add a list of credits to the used Nuget packages to the readme

IdentityServer4
ASP.NET Core Identity
...

Update to latest bootstrap 4, jquery bundles

Encode PasswordResetToken and EmailConfirmationToken to base64URL

Hi @damienbod

I've faced some issues that these codes were invalid, take a look at default MS Identity template:

https://github.com/dotnet/aspnetcore/blob/master/src/Identity/UI/src/Areas/Identity/Pages/V4/Account/ForgotPassword.cshtml.cs#L79

https://github.com/dotnet/aspnetcore/blob/master/src/Identity/UI/src/Areas/Identity/Pages/V4/Account/Register.cshtml.cs#L145

I use your code in my repository and I've fixed this issue in this commit: skoruba/IdentityServer4.Admin@b92895e

Thank you.

Improve cert handling for Azure deployments

@Eneuman Would you be interested in adding your code here?

Saw this issue: SigningKey Azure Key Vault Provider

I have some helpers for this, maybe your solution is better. I use this as a template or quick starter for creating STS servers, which can be deployed easily to Azure App Services or IIS

Greetings Damien

Add the security headers default config

https://github.com/damienbod/AspNetCoreHybridFlowWithApi/blob/master/StsServer/Startup.cs#L173

Add French localization

https://github.com/damienbod/IdentityServer4AspNetCoreIdentityTemplate/tree/master/content/StsServerIdentity/Resources

Add Same Site for Anti forgery cookie

new translations fr-FR

https://github.com/damienbod/IdentityServer4AspNetCoreIdentityTemplate/blob/master/content/StsServerIdentity/Resources/SharedResource.fr-FR.resx

Switch email service from SendGrid to MailKit

Language Cookie add Same Site + Secure

Should Logout post action be decorated with [AllowAnonymous]?

In template AccountController/Logout post action is decorated with [AllowAnonymous]. Should it?

Add Visual Studio 2017 template

Add OpenLDAP support

It would be awesome if OpenLDAP support is added to the Repo. There are already other projects out there (e.g. https://github.com/Nordes/IdentityServer4.LdapExtension or https://github.com/jusbuc2k/Justin.AspNetCore.LdapAuthentication) which did some work on that topic.

Example config settings

    "BindDn": "cn=adminuser,dc=damienbod,dc=com",
    "BindCredentials": "P@ss1W0Rd!",
    "SearchBase": "ou=users,DC=damienbod,dc=com",
    "SearchFilter": "(&(objectClass=person)(cn={0}))"

Advantages

The Project would serve an IdP with MFA support and LDAP Integration
Usage of existing UserStores via LDAP
Usage of On-Premises OpenLDAP instead of AzureAD

_StatusMessage partial cshtml is missing

_StatusMessage Partial cshtml is missing

External login

How to add the external login with google, twitter, facebook, etc.?

Test key vault handling, key management for IdentityServer4 V4.0.0 changes

Provide DB Dump and sample Migration Files

Adding the migrations from ConfigurationDbContext and PersistedGrantDbContext for sqlServer worked smoothly. Unfortunately, I keep encountering errors when adding the ApplicationDbContext migrations. Therefore it would be extremely helpful to have a sample database dump and see for example migrations under / Data / Migrations.

"damienbodserver.pfx"

I'm not 100% sure if the naming is a cool ad for your name, but maybe the dev certificate should be renamed to something neutral for this kind of template ;)