PowerServer 2021: Using a Single Sign-On Solution for PowerServer and Other Apps
summary
Enables the built-in OAuth server in PowerServer, configures PowerBuilder to POST client_id/secret and username/password for an access token, and sets begin session by code so session starts after successful auth. Implements a timer to refresh tokens before expiry (clock skew) and stores expires_in (~3600s). Updates Web API C# to use either default or database user store, sets the shared client secret, and adds allowed CORS origins so a React Native web client can POST, receive the token, and successfully call protected APIs.
AI-written summary · about
related talks
39mSecuring your apps with OAuth2 and OpenID Connect
50m.NET Rocks Live
59mSecuring Web APIs from JavaScript/SPA Applications
20mOAuth 2: A closer look
01h 00mBuilding Clients for OpenID Connect/OAuth 2-based Systems
01h 00mOAuth – the good Parts
55mSupercharging OAuth 2.0 security
01h 00mSupercharging OAuth 2.0 Security