search

IdentityServer / IdentityServer2

[deprecated] Thinktecture IdentityServer is a light-weight security token service built with .NET 4.5, MVC 4, Web API and WCF.
Other
410 stars 291 forks source link

ActAs impersonation #817

Closed Bosken85 closed 9 years ago

Bosken85 commented 9 years ago

Hello,

I have a question on how to enable some sort of impersonation with identityServer V2. I extended it with some custom registration forms. In these forms i need to call a webapi action located somewhere else. But the function i want to call needs to be protected by an internal rol and system user. The webapi uses the identity server for authentication.

How do u impersonate that systemuser for a single request?

brockallen commented 9 years ago

So what would be ideal is to have IdSvr2 support the assertion flow, where you pass one token into the token endpoint and another token comes out. This is not currently supported. You would have to extend IdSvr2 in the OAuth2TokenController to support hat additional flow. You can look at AuthorizationServer as an example.