Esempio n. 1
0
        public static void UseIdentityManager(this IAppBuilder app, IdentityManagerConfiguration config)
        {
            if (app == null)
            {
                throw new ArgumentNullException("app");
            }
            if (config == null)
            {
                throw new ArgumentNullException("config");
            }
            config.Validate();

            if (config.SecurityMode == SecurityMode.LocalMachine)
            {
                var local = new LocalAuthenticationOptions(config.AdminRoleName);
                app.Use <LocalAuthenticationMiddleware>(local);
            }
            else if (config.SecurityMode == SecurityMode.OAuth2)
            {
                if (config.OAuth2Configuration.SigningCert != null)
                {
                    app.UseJsonWebToken(config.OAuth2Configuration.Issuer,
                                        config.OAuth2Configuration.Audience,
                                        config.OAuth2Configuration.SigningCert);
                }
                else
                {
                    app.UseJsonWebToken(config.OAuth2Configuration.Issuer,
                                        config.OAuth2Configuration.Audience,
                                        config.OAuth2Configuration.SigningKey);
                }
                app.Use(async(ctx, next) =>
                {
                    await next();
                });
            }

            if (!config.DisableUserInterface)
            {
                app.UseFileServer(new FileServerOptions
                {
                    RequestPath = new PathString("/assets"),
                    FileSystem  = new EmbeddedResourceFileSystem(typeof(AppBuilderExtensions).Assembly, "Thinktecture.IdentityManager.Assets")
                });
                app.UseFileServer(new FileServerOptions
                {
                    RequestPath = new PathString("/assets/libs/fonts"),
                    FileSystem  = new EmbeddedResourceFileSystem(typeof(AppBuilderExtensions).Assembly, "Thinktecture.IdentityManager.Assets.Content.fonts")
                });
                app.UseStageMarker(PipelineStage.MapHandler);
            }

            SignatureConversions.AddConversions(app);

            var httpConfig = new HttpConfiguration();

            WebApiConfig.Configure(httpConfig, config);
            app.UseWebApi(httpConfig);
            app.UseStageMarker(PipelineStage.MapHandler);
        }
        public void Configuration(IAppBuilder app)
        {
            // validate JWT tokens from AuthorizationServer
            app.UseJsonWebToken(
                issuer: Constants.AS.IssuerName,
                audience: Constants.Audience,
                signingKey: Constants.AS.SigningKey);

            app.UseNancy();
        }
Esempio n. 3
0
        private static void ConfigureAuth(IAppBuilder app)
        {
            // validate JWT tokens from AuthorizationServer
            app.UseJsonWebToken(
                issuer: "AS",
                audience: "sparrow",
                signingKey: "OYGY0nAkQUZx1YrT6ler8CI6qbJHyn32tWbCDNuLL+M=");

            // claims transformation
            app.UseClaimsTransformation(new ClaimsTransformer());
        }
Esempio n. 4
0
        public void Configuration(IAppBuilder app)
        {
            JwtSecurityTokenHandler.InboundClaimTypeMap = ClaimMappings.None;

            app.UseJsonWebToken(
                issuer: "https://idsrv3.com",
                audience: "https://idsrv3.com/resources",
                signingKey: X509.LocalMachine.TrustedPeople.SubjectDistinguishedName.Find("CN=idsrv3test", false).First());

            app.UseWebApi(WebApiConfig.Register());
        }
Esempio n. 5
0
        public static void Configure(IAppBuilder app)
        {
            // no mapping of incoming claims to Microsoft types
            JwtSecurityTokenHandler.InboundClaimTypeMap = new Dictionary <string, string>();

            // validate JWT tokens from AuthorizationServer
            app.UseJsonWebToken(
                issuer:     Constants.AS.IssuerName,
                audience:   Constants.Audience,
                signingKey: Constants.AS.SigningKey);

            // claims transformation
            app.UseClaimsTransformation(new ClaimsTransformer());
        }
        public static void Configure(IAppBuilder app)
        {
            // no mapping of incoming claims to Microsoft types
            JwtSecurityTokenHandler.InboundClaimTypeMap = new Dictionary<string, string>();

            // validate JWT tokens from AuthorizationServer
            app.UseJsonWebToken(
                issuer:     Constants.AS.IssuerName,
                audience:   Constants.Audience,
                signingKey: Constants.AS.SigningKey);

            // claims transformation
            app.UseClaimsTransformation(new ClaimsTransformer());
        }
Esempio n. 7
0
        public static void UseAuthentication(this IAppBuilder app)
        {
            if (string.IsNullOrWhiteSpace(Settings.Auth.Issuer) ||
                string.IsNullOrWhiteSpace(Settings.Auth.Audience) ||
                string.IsNullOrWhiteSpace(Settings.Auth.IssuerCertThumbprint))
            {
                return;
            }

            app.UseJsonWebToken(
                issuer: Settings.Auth.Issuer,
                audience: Settings.Auth.Audience,
                signingKey: Settings.Auth.IssuerCertificate
                );
        }
        public void Configuration(IAppBuilder app)
        {
            JwtSecurityTokenHandler.InboundClaimTypeMap = ClaimMappings.None;

            app.UseJsonWebToken(
                issuer:    "https://idsrv3.com",
                audience:  "https://idsrv3.com/resources",
                signingKey: X509.LocalMachine.TrustedPeople.SubjectDistinguishedName.Find("CN=idsrv3test", false).First());

            app.UseIdentitiyServerReferenceTokens(new ReferenceTokenValidationOptions
                {
                    TokenValidationEndpoint = "http://localhost:3333/core/connect/accessTokenValidation"
                });

            app.UseWebApi(WebApiConfig.Register());
        }
Esempio n. 9
0
        public void Configuration(IAppBuilder app)
        {
            JwtSecurityTokenHandler.InboundClaimTypeMap = ClaimMappings.None;

            // for self contained tokens
            app.UseJsonWebToken(
                issuer:    "https://idsrv3.com",
                audience:  "https://idsrv3.com/resources",
                signingKey: X509.LocalMachine.TrustedPeople.SubjectDistinguishedName.Find("CN=idsrv3test", false).First());

            // for reference tokens
            app.UseIdentitiyServerReferenceTokens(new ReferenceTokenValidationOptions
            {
                TokenValidationEndpoint = "http://localhost:3333/core/connect/accessTokenValidation"
            });

            app.UseWebApi(WebApiConfig.Register());
        }
Esempio n. 10
0
        public void Configuration(IAppBuilder app)
        {
            // authorization manager
            ClaimsAuthorization.CustomAuthorizationManager = new AuthorizationManager();

            // no mapping of incoming claims to Microsoft types
            JwtSecurityTokenHandler.InboundClaimTypeMap = ClaimMappings.None;

            // validate JWT tokens from AuthorizationServer
            app.UseJsonWebToken(
                issuer: "AS",
                audience: "todoApi",
                signingKey: "1fTiS2clmPTUlNcpwYzd5i4AEFJ2DEsd8TcUsllmaKQ=");

            app.UseResourceAuthorization(new TodoAuthorization());

            app.UseWebApi(WebApiConfig.Configure());
        }
Esempio n. 11
0
        public void Configuration(IAppBuilder app)
        {
            // authorization manager
            ClaimsAuthorization.CustomAuthorizationManager = new AuthorizationManager();

            // no mapping of incoming claims to Microsoft types
            JwtSecurityTokenHandler.InboundClaimTypeMap = ClaimMappings.None;

            // validate JWT tokens from AuthorizationServer
            app.UseJsonWebToken(
                issuer: Constants.AS.IssuerName,
                audience: Constants.Audience,
                signingKey: Constants.AS.SigningKey);

            // claims transformation
            app.UseClaimsTransformation(new ClaimsTransformer().Transform);

            app.UseWebApi(WebApiConfig.Configure());
        }
Esempio n. 12
0
        public void Configuration(IAppBuilder app)
        {
            JwtSecurityTokenHandler.InboundClaimTypeMap = ClaimMappings.None;

            var cert = Thinktecture.IdentityModel.X509.LocalMachine.TrustedPeople.SubjectDistinguishedName.Find("CN=idsrv3test", false).First();

            app.UseJsonWebToken(
                "https://idsrv3.com",
                "https://idsrv3.com/resources",
                cert);

            var config = new HttpConfiguration();

            config.SuppressDefaultHostAuthentication();
            config.Filters.Add(new HostAuthenticationFilter("Bearer"));
            config.Filters.Add(new AuthorizeAttribute());

            config.MapHttpAttributeRoutes();
            config.Formatters.Remove(config.Formatters.XmlFormatter);
            config.Formatters.Remove(config.Formatters.FormUrlEncodedFormatter);
            config.Formatters.JsonFormatter.SerializerSettings.ContractResolver =
                new Newtonsoft.Json.Serialization.CamelCasePropertyNamesContractResolver();
            app.UseWebApi(config);
        }