Identity Server 4 with Angular and ASP.NET Core

on YouTube ↗01h 03m

" summary

Shows a working production setup that uses IdentityServer4 + ASP.NET Core + Entity Framework with ASP.NET Identity to issue JWTs signed by a real certificate, an Angular SPA hosted inside MVC, and an API that validates tokens and enforces a MerchantAPIKeys scope. Implements multiple EF Core DbContexts and migrations, a custom client store and profile service, server-side refresh handling (refresh token never sent to client) and uses refresh token reuse to avoid race conditions — it works end-to-end.

AI-written summary · about

" chapters (17)

1. 0:00Introduction and overview
2. 2:57Startup architecture
3. 4:37Why ASP.NET Core
4. 7:36Security and identity
5. 12:37System demonstration
6. 16:30Configuring ASP.NET Identity
7. 19:25Setting up IdentityServer
8. 22:13Certificates and databases
9. 24:49Defining resources
10. 30:20Client configuration
11. 35:50Protecting the API
12. 38:46Angular 2 setup
13. 44:05SPA authentication flow
14. 47:22Settings and data binding
15. 50:06Token refresh mechanism
16. 55:53SDK and consent flow
17. 59:19Final thoughts and Q&A

" related talks

• 59mBuilding APIs for developers with Identity Server 4Ben Cull · NDC Sydney 2018
• 01h 00mIdentityServer4: New & Improved for ASP.NET CoreDominick Baier · NDC Mini Copenhagen 2017
• 58mIdentityServer4: New & Improved for ASP.NET CoreDominick Baier, Brock Allen · NDC London 2017
• 55mIdentityServer for ASP.NET Core 2Dominick Baier, Brock Allen · NDC London 2018
• 54mOpenID Connect In DepthKevin Dockx · .NET Fest 2019
• 54mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0Dominick Baier · NDC London 2019
• 51mAuthentication and Authorization in ASP.NET Core 2Roland Guijt · Update Conference Prague 2018
• 01h 04mImplementing Authentication and Authorization with ASP.NET Core 2Chris Klug · NDC Oslo 2018