This repository contains the code for implementing a standalone identity service using ASP.NET Core and OpenIddict. The identity service is designed to provide authorization and authentication capabilities for other applications through the OAuth 2.0 and OpenID Connect protocols.
- OpenID Connect and OAuth 2.0 Support
- Token Management
- Security Features
- Integration with External Identity Providers
- Authorization Flows
The Authorization Code Flow is recommended for new applications. It involves several steps, including initiating the authentication process, validating cookies, user authentication, and token exchange.
Scopes define the specific permissions or access levels requested by client applications during the authorization process. Common scopes include openid, profile, email, address, phone, and offline_access.
To set up the project:
- Clone this repository.
- Open it in Visual Studio.
- Configure PostgreSQL as the database.
- Install the required OpenIddict packages using NuGet.
- Configure OpenIddict in your ASP.NET Core application.
- Run both projects separately after the required configurations (connection string etc.)
- Authentication Endpoint: Implementation of the "/authorize" endpoint.
- Token Endpoint: Implementation of the "/token" endpoint.
- Logout Endpoint: Implementation of the logout functionality.
- Login With External Identity Provider: Configuration for external identity providers.
- Callback Endpoint: Implementation of the callback endpoint for external authentication.
Contributions are welcome! If you find any issues or have suggestions for improvements, feel free to open an issue or submit a pull request.