dcinzona
commented
9 years ago Startup.cs
using System.Collections.Generic;
using System.Linq;
using Custom.Web.Module.IdentityServer.Config;
using Custom.Web.Module.IdentityServer.Services.IdentityServer;
using Orchard;
using Orchard.Logging;
using Orchard.Owin;
using Owin;
using Thinktecture.IdentityServer.Core.Configuration;
using Thinktecture.IdentityServer.Core.Logging;
using Thinktecture.IdentityServer.Core.Models;
using Thinktecture.IdentityServer.Core.Services;
using Thinktecture.IdentityServer.EntityFramework;
using Thinktecture.IdentityServer.WsFederation.Configuration;
using Thinktecture.IdentityServer.WsFederation.Models;
using Thinktecture.IdentityServer.WsFederation.Services;
namespace Custom.Web.Module.IdentityServer
{
public class Startup : IOwinMiddlewareProvider
{
private readonly IWorkContextAccessor _wca;
public ILogger Logger { get; set; }
public Startup(
IWorkContextAccessor wca)
{
_wca = wca;
Logger = NullLogger.Instance;
}
public IEnumerable<OwinMiddlewareRegistration> GetOwinMiddlewares() {
var middleWare = new List<OwinMiddlewareRegistration> {
new OwinMiddlewareRegistration {
Priority = "100",
Configure = app => app.Map("/identity", coreApp => {
var efConfig = new EntityFrameworkServiceOptions
{
ConnectionString = "Website",
Schema = "IdentityServer"
};
// Copy InMememory Clients to EF
ConfigureClients(Clients.Get(), efConfig);
ConfigureScopes(Scopes.Get(), efConfig);
var factory = new IdentityServerServiceFactory();
// Will log to trace provider for Debugging IdentityServer
LogProvider.SetCurrentLogProvider(new DiagnosticsTraceLogProvider());
// Register Orchard User UserService, pass in IWorkContextAccessor so it can access Orchard Pipeline
var userService = new UserService(_wca);
factory.UserService = new Registration<IUserService>(resolver => userService);
// Entity Framework Stores
factory.RegisterOperationalServices(efConfig);
factory.RegisterClientStore(efConfig);
factory.RegisterScopeStore(efConfig);
// Custom View service to override front-end
factory.ViewService = new Registration<IViewService>(typeof(ViewService));
// Set options and register Identity Server with OWIN
var options = new IdentityServerOptions {
SiteName = "Website Single Sign-On",
EnableWelcomePage = false,
SigningCertificate = Certificate.Get(),
Factory = factory,
PluginConfiguration = ConfigurePlugins, // WS-Fed
CorsPolicy = CorsPolicy.AllowAll,
AuthenticationOptions = new AuthenticationOptions
{
IdentityProviders = ConfigureIdentityProviders,
EnableSignOutPrompt = true
}
};
coreApp.UseIdentityServer(options);
})
}
};
return middleWare;
}
public static void ConfigureIdentityProviders(IAppBuilder app, string signInAsType)
{
// TODO: Add Staff config here when WS-Federation enpoint is available
// https://identityserver.github.io/Documentation/docs/configuration/identityProviders.html
}
private void ConfigurePlugins(IAppBuilder pluginApp, IdentityServerOptions options)
{
var wsFedOptions = new WsFederationPluginOptions(options);
// data sources for in-memory services
wsFedOptions.Factory.Register(new Registration<IEnumerable<RelyingParty>>(RelyingParties.Get()));
wsFedOptions.Factory.RelyingPartyService = new Registration<IRelyingPartyService>(typeof(InMemoryRelyingPartyService));
pluginApp.UseWsFederationPlugin(wsFedOptions);
}
public static void ConfigureClients(IEnumerable<Client> clients, EntityFrameworkServiceOptions options)
{
using (var db = new ClientConfigurationDbContext(options.ConnectionString, options.Schema))
{
if (!db.Clients.Any())
{
foreach (var c in clients)
{
var e = c.ToEntity();
db.Clients.Add(e);
}
db.SaveChanges();
}
}
}
public static void ConfigureScopes(IEnumerable<Scope> scopes, EntityFrameworkServiceOptions options)
{
using (var db = new ScopeConfigurationDbContext(options.ConnectionString, options.Schema))
{
if (!db.Scopes.Any())
{
foreach (var s in scopes)
{
var e = s.ToEntity();
db.Scopes.Add(e);
}
db.SaveChanges();
}
}
}
}
}
brockallen
I submitted this question to the gitter forum, but it might be better suited here. We are having an issue where we are unable to maintain a logged in session on multiple page refreshes and can manually trigger a log out by switching between azure web app instances (this is done by changing the value of the ARRAFFINITY cookie to the ID of the other instance. We have the machine key configured under
<system.web>and have an entry for specifying Identity Model use the machine key:Our machine key entry (cleared for security):
Errors I'm seeing:
and