IdentityServer4: New & Improved for ASP.NET Core

on YouTube ↗58m

" summary

IdentityServer4 ports IdentityServer3 onto ASP.NET Core, replacing the old Katana hosting with Kestrel/self-hosted console apps and swapping the custom factory for built-in DI so a single AddIdentityServer call registers services. Scopes become clearer as API resource vs identity resource, clients can omit secrets or use multiple flows (startup validates unsafe mixes), and helpers include a temporary signing credential for dev. UI is removed from core and supplied as an UI Quickstart (MVC views), external providers use standard middleware with a temp cookie, and the project is on GitHub and certifiable against OpenID Connect.

AI-written summary · about

" chapters (7)

1. 0:00Start
2. 17:56load an x 509 certificate
3. 19:41create a random key pair at startup time
4. 21:43load your configuration
5. 35:01start with the standard mvc template with the login page
6. 56:17deploy the dotnet framework
7. 56:59write the ui as a single page

" related talks

• 01h 00mIdentityServer4: New & Improved for ASP.NET CoreDominick Baier · NDC Mini Copenhagen 2017
• 55mIdentityServer for ASP.NET Core 2Dominick Baier, Brock Allen · NDC London 2018
• 01h 03mIdentity Server 4 with Angular and ASP.NET CoreBen Cull · NDC Oslo 2017
• 54mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0Dominick Baier · NDC London 2019
• 01h 01mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0Dominick Baier · NDC Security Oslo 2019
• 58mSecurity in ASP.NET Core 2.0Barry Dorrans · NDC Oslo 2017
• 59mBuilding APIs for developers with Identity Server 4Ben Cull · NDC Sydney 2018
• 51mAuthentication and Authorization in ASP.NET Core 2Roland Guijt · Update Conference Prague 2018