IdentityServer / IdentityServer3.AccessTokenValidation

OWIN Middleware to validate access tokens from IdentityServer3
Apache License 2.0
90 stars 149 forks source link

Missing claims in access token #91

Closed manjhari closed 8 years ago

manjhari commented 8 years ago

Hi, I have implemented the Resource Owner Flow using a custom local user store implementing IUserService. I also have a custom user AuthenticatedUser() with a List. In the AuthenticateLocalAsync method, I retrieve all the users role claims and add to the users claims and return in the AuthenticateResult i.e.

context.AuthenticateResult = new AuthenticateResult(user.UserID.ToString(), user.DisplayName, user.Claims);

My understanding so far is that these claims should come through in the access token and should be accessible in my API, however they are not coming through. Is there something I am missing?

Thanks

John.

brockallen commented 8 years ago

Read the docs, please. That's how how you affect the claims in tokens.