IdentityServer / IdentityServer3.AccessTokenValidation

OWIN Middleware to validate access tokens from IdentityServer3
Apache License 2.0
91 stars 149 forks source link

IIS hosting and Stage Markers #127

Closed snothub closed 7 years ago

snothub commented 7 years ago

For IIS hosted owin middleware, would it be advisable to do app.UseStageMarker(PipelineStage.Authenticate) after registering the token validation middleware to ensure it runs at the right stage in the owin pipeline? Are there any known issues with not doing so (which will have it run way later in PreHandlerExecute stage)?

Thanks

leastprivilege commented 7 years ago

Are you seeing any issues if you don't set the stage marker?

snothub commented 7 years ago

No, but I wanted to ask about any potentially known issues since I'm not convinced my tests are bullet-proof.

leastprivilege commented 7 years ago

You only need to set stage markers if you need to co-op with legacy HTTP modules that run at certain stages you you need a specific ordering.