damienbod / identityserver4aspnetcoreidentitytemplate Goto Github PK

Maybe it would be better, to use some sort of branching model :)

https://github.com/damienbod/IdentityServer4AspNetCoreIdentityTemplate/blob/master/content/StsServerIdentity/Resources/SharedResource.fr-FR.resx

• IdentityServer4
• ASP.NET Core Identity
• ...

In template AccountController/Logout post action is decorated with [AllowAnonymous]. Should it?

https://github.com/damienbod/IdentityServer4AspNetCoreIdentityTemplate/blob/master/content/StsServerIdentity/Resources/SharedResource.it-IT.resx

_StatusMessage Partial cshtml is missing

It would be awesome if OpenLDAP support is added to the Repo. There are already other projects out there (e.g. https://github.com/Nordes/IdentityServer4.LdapExtension or https://github.com/jusbuc2k/Justin.AspNetCore.LdapAuthentication) which did some work on that topic.

Example config settings

    "BindDn": "cn=adminuser,dc=damienbod,dc=com",
    "BindCredentials": "P@ss1W0Rd!",
    "SearchBase": "ou=users,DC=damienbod,dc=com",
    "SearchFilter": "(&(objectClass=person)(cn={0}))"

Advantages

• The Project would serve an IdP with MFA support and LDAP Integration
• Usage of existing UserStores via LDAP
• Usage of On-Premises OpenLDAP instead of AzureAD

https://github.com/damienbod/IdentityServer4AspNetCoreIdentityTemplate/blob/master/content/StsServerIdentity/Config.cs

https://github.com/damienbod/IdentityServer4AspNetCoreIdentityTemplate/tree/master/content/StsServerIdentity/Resources

"Access to your applications and resources, even when you are offline"

"Invalid selection"

"Offline Access"

"You must pick at least one permission"

"Recovery codes"

"CONSENT_CONFIRM_AUTH_REQUEST_QUOTES" en-US = Please confirm that the authorization request quotes the code:

"DEVICE_USER_CODE" en-US = User Code

"DEVICE_ENTER_CODE_DISPLAYED_ON_DEVICE" en-US = Please enter the code displayed on your device

"DEVICE_SUCCESS_AUTHORIZE" en-US = You have successfully authorized the device

"DEVICE_SUCCESS" en-US = Success

"Your user identifier"

"User profile"

"Your user profile information (first name, last name, etc.)"

"Your email address"

Hi @damienbod

I've faced some issues that these codes were invalid, take a look at default MS Identity template:

https://github.com/dotnet/aspnetcore/blob/master/src/Identity/UI/src/Areas/Identity/Pages/V4/Account/ForgotPassword.cshtml.cs#L79

https://github.com/dotnet/aspnetcore/blob/master/src/Identity/UI/src/Areas/Identity/Pages/V4/Account/Register.cshtml.cs#L145

I use your code in my repository and I've fixed this issue in this commit: skoruba/IdentityServer4.Admin@b92895e

Thank you.

Add Portuguese (pt-BR) localization # #

https://github.com/damienbod/AspNetCoreHybridFlowWithApi/blob/master/StsServer/Startup.cs#L173

It is currently not possible to specify the namespace when creating a new project from the template. The namespace and the project filename should use the project name.

See here for a working example: https://github.com/skoruba/IdentityServer4.Admin/tree/master/templates

SharedResource.gsw-CH_ZH.resx Need a zurich person for this :) @manuelmeyer1

SharedResource.gsw-CH.resx

GRANTS
Grants

GRANTS_API_GRANTS
API Grants

GRANTS_CLIENT_APP_ACCESS
Client Application Access

GRANTS_CREATED
Created

GRANTS_EXPIRES
Expires

GRANTS_IDENTITY_GRANTS
Identity Grants

GRANTS_INFO
Below is the list of applications you have given access to and the names of the resources they have access to.

GRANTS_NO_ACCESS
You have not given access to any applications

GRANTS_REVOKE_ACCESS
Revoke Access

ERROR_ENABLE_MFA
Enable MFA

ERROR_ENABLE_MFA_CLIENT_APP_REQUIRES_MFA
The client application requires you to have MFA enabled. Enable this and try to sign in again.

ERROR_ENABLE_MFA_ERROR_TITLE
Enable MFA Error

ERROR_ENABLE_MFA_YOU_CAN_ENABLE_HERE
You can enable MFA to login here:

https://github.com/damienbod/IdentityServer4AspNetCoreIdentityTemplate/tree/master/content/StsServerIdentity/Resources
@ Niall Merrigan ‏

@Eneuman Would you be interested in adding your code here?

Saw this issue: SigningKey Azure Key Vault Provider

I have some helpers for this, maybe your solution is better. I use this as a template or quick starter for creating STS servers, which can be deployed easily to Azure App Services or IIS

Greetings Damien

Adding the migrations from ConfigurationDbContext and PersistedGrantDbContext for sqlServer worked smoothly. Unfortunately, I keep encountering errors when adding the ApplicationDbContext migrations. Therefore it would be extremely helpful to have a sample database dump and see for example migrations under / Data / Migrations.

How to add the external login with google, twitter, facebook, etc.?

https://github.com/damienbod/IdentityServer4AspNetCoreIdentityTemplate/tree/master/content/StsServerIdentity/Resources

Is it possible to add easily into an existing identity server project. e.g a project which is based on Identity server QuickStart template?

Accountcontroller.cs -> SendVerificationEmail(...)

var callbackUrl = Url.Action("ResetPassword", "Account", new { userId = user.Id, code = code }, protocol: HttpContext.Request.Scheme);

Should be:
var callbackUrl = Url.Action("ConfirmEmail", "Account", new { userId = user.Id, code = code }, protocol: HttpContext.Request.Scheme);

I'm not 100% sure if the naming is a cool ad for your name, but maybe the dev certificate should be renamed to something neutral for this kind of template ;)

https://github.com/damienbod/IdentityServer4AspNetCoreIdentityTemplate/blob/master/content/StsServerIdentity/Resources/SharedResource.de-DE.resx

https://github.com/damienbod/IdentityServer4AspNetCoreIdentityTemplate/blob/master/content/StsServerIdentity/Resources/SharedResource.de-CH.resx