IdentityServer / IdentityServer2

[deprecated] Thinktecture IdentityServer is a light-weight security token service built with .NET 4.5, MVC 4, Web API and WCF.
Other
410 stars 291 forks source link

redirecting to public facing pages #855

Closed ntaylor95 closed 9 years ago

ntaylor95 commented 9 years ago

I am taking over this code from the original architect. All I want to do is add a "reset password" to the Thinktecture login screen that would redirect the user to a public facing page on my website. I guess because the whole domain is behind this SSO, it does not matter if my pages are setup to be public facing or private facing. So, my question is... can I add exceptions to the relying parties... like this url would need to be accessed outside the SSO... http://localhost/Public... but the relying party setup is http://localhost

brockallen commented 9 years ago

Why not just have a page (like the login page) in the IdentityServer host project that allow anonymous access?

ntaylor95 commented 9 years ago

Great idea. This is my duh moment! Will work on it now 😄 thanks so much.

On Saturday, August 1, 2015, Brock Allen notifications@github.com wrote:

Why not just have a page (like the login page) in the HdentityServer host project that allow anonymous access?

— Reply to this email directly or view it on GitHub https://github.com/IdentityServer/IdentityServer2/issues/855#issuecomment-126938389 .

ntaylor95 commented 9 years ago

I reset my password from my website using the API call: api/Password/reset/{guid}... I now have this public facing page on the Identity Server but all the API call are stored in the API project and I cannot call to the API becuase I am not an authorized user. I need the same exact behavior as with the API call: api/Password/reset/{guid}... anyway I can get that inside IdentityServer as an unauthenticated user who only knows their email address??????

ntaylor95 commented 9 years ago

I found the public facing call in the API api/Password/reset/{email} = this returns a valid response, no email is being sent though.