197 questions
0
votes
0
answers
49
views
Key was not found in the key ring System.Security.Cryptography.CryptographicException
Data Protection error on Azure App Service (2 instances): “The key {xxxxxxxxxxx} was not found in the key ring”
I’m seeing a lot of exceptions in Application Insights:
The key {xxxxxxxxxxx} was not ...
0
votes
1
answer
210
views
Client authentication with mTLS
So I'm thinking of utilizing mTLS authentication for a public client (mobile app), and need to clarify a few things.
As I understand, the flow could be something like follows:
the client (app) ...
0
votes
1
answer
134
views
Problem using a certificate with an ECDSA key to sign tokens with Duende IdentityServer
I am using Duende Identity server and trying to use a certificate with a ECDSA keys to sign the tokens. (I have it working as expected with the current RSA/RS256 keys).
I am adding the certificate to ...
0
votes
1
answer
103
views
Stuck on authentication/authorization setup
I would like to setup authentication and authorization for my project, I have a little experience with identity server as most of my clients use it but since it mostly is setup, I don't have ...
0
votes
1
answer
159
views
Duende BFF auth with node.js
I have implemented Duende BFF auth in .net already. But I wonder how I can achieve the same using node.js. I have a login site which uses Duende to recieve a cookie for all same-site domains, but my ...
0
votes
1
answer
128
views
Duende IdentityServer role based login for multiple clients
Currently I'm configuring Duende IdentityServer.
I've multiple clients (example mobileAppCustomer, mobileAppBusiness)
I got it working, that I add a role claim to the User accesstoken.
What I want to ...
0
votes
2
answers
85
views
IdentityServer token issuer claim missing port number in issued JWT token
I have a strange issue with tokens issued by my local development IdentityServer (happens both with IdentityServer4 and with Duende IdentityServer).
The IdentityServer on my local dev machine is ...
1
vote
0
answers
142
views
Standalone duende identityserver for multiple clients
Currently i'm setting up a project with an api and multiple clients that will connnect to this api (angular and .net maui). I want to use Duende identityserver for the authentication and autorization ...
0
votes
1
answer
249
views
How to use an RSA key for Duende Identity Server v7
My thought process was:
Create the RSA key in Azure Key Vault --> Keys
Retrieve the key using KeyClient
Pass the key to AddSigningCredential
Here is the C# code
string keyVaultUrl = Configuration....
1
vote
1
answer
724
views
HTTP 403 errors after update to .NET 8
I am maintaining an ASP.NET Core Web API project, which uses Duende Identity Server with Jwt bearer tokens, and role-based access to endpoints.
After moving the project to .NET 8 (upgrading the ...
0
votes
1
answer
268
views
Workflow displays successful deployment message, but the Azure Web App keeps saying that nothing was deployed
This is the pipeline for my Duende IdentityServer application. It's supposed to build then deploy to an Azure Web App:
name: Build and deploy .NET...
on:
workflow_dispatch
env:
AZURE_WEBAPP_NAME: ...
0
votes
1
answer
97
views
How to user authenticate using http in identity server?
Using usehttpsredirection user is authenticated properly. But when I comment out the usehttpsredirection and change security policy from CookieSecurePolicy.Always to CookieSecurePolicy.None, I am ...
0
votes
1
answer
113
views
Issue with Windows Authentication Type on IIS with Multiple Host Bindings
I'm facing an issue with Windows Authentication when deploying my Single Sign-On (SSO) application using Duende SSO on IIS. The application is secured using an SSL certificate with the following ...
0
votes
0
answers
162
views
Blazor Web App and Duende IdentityServer keeps getting logged out
I've set up the following,
Duende IdentityServer (IDP)
API
Blazor Web App (.Net 8)
The Web App consists of a Server and Client project.
When logging in I get authenticated and able to retrieve data ...
0
votes
1
answer
245
views
duende missing claims
I'm testing Duende Identity Server.
I used the sample named 6_JS_with_backend to test Google IDP. The initial sample is working fine.
I modified it to replace the in memory data by a database (using ...
1
vote
1
answer
144
views
How can run the IdentityServer for Macos?
I am developing a project, it is requested to use IdentityServer4. I install the project but I can't run it because it doesn't support .net 3.1 on Macos operating system.
I did some research, I found ...
1
vote
0
answers
70
views
How to deploy Duende Identity Framework in an existing application
So far I only saw docs about deploying Duende IDP as a dedicated Application.
How can we deploy in an existing Application, so that:
ISSUER will be something like https://localhost:5001/idp
The UI ...
0
votes
1
answer
195
views
I can't pass AntiforgeryToken to external project endpoint
I have the following structure:
Project A: Duende Identity Server with additional features
Project B: Web Client that uses Project A to authenticate
Both projects are using:
AuthorizeFilter to ...
0
votes
1
answer
92
views
External (Google, Microsoft) Login with ASP.NET Identity
When using Duende Identityserver with ASP.NET Identity there are 2 possibilities to add external logins :
via ASP .NET Identity
via Identityserver (AddOpenIdConnect)
What is the difference, what is ...
1
vote
0
answers
367
views
ASP.NET Core Authentication Cookie with custom ITicketStore return wrong user
We have issue in our production environment where user was authenticated as another user who had logged in previously (even if the other user already logged out).
We use custom ITicketStore which will ...
0
votes
0
answers
551
views
Error: "OnStarting cannot be set because the response has already started" at GetAuthorizationContextAsync(String returnUrl) (IdentityServer)
I get the error System.InvalidOperationException: OnStarting cannot be set because the response has already started. when calling GetAuthorizationContextAsync(String returnUrl) which is part of Duende....
0
votes
1
answer
469
views
Protecting an API with Duende Server
I am currently trying to develop an authentication system to log in a user and give permission to access an API.
The API only has a controller that returns all the claims the user has:
[Route("...
0
votes
0
answers
496
views
Communication between two Docker containers failing due to SSL Certificate
I have two asp web api, one for identity server and second for just web api. They are supposed to be run on docker containers.
I generated a self-signed certificate for SSL https connections between ...
0
votes
1
answer
376
views
Duende Identity Server v6 throwing "WindowsCryptographicException: Key does not exist"
I'm upgrading from identity server 4 to duende identity server 6.
When running locally I can reference a key up on Azure Key Vault no problems via "DefaultAzureCredential" and it sets it ...
0
votes
0
answers
368
views
Duende Identity Server 4 doesn't redirect back to the React client at the end of sign in workflow
I'm implementing authentication using Duende Identity Server based on CODE grant type.
I need Identity Server to issue tokens for my React Client App, I added react-oidc-context to the Client App as ...