search

IdentityServer / IdentityServer4.AccessTokenValidation

IdentityServer Access Token Validation for ASP.NET Core
Apache License 2.0
544 stars 214 forks source link

Issuer = LOCAL AUTHORITY #47

Closed etrafiee closed 7 years ago

etrafiee commented 7 years ago

Hi, Since I switched to Reference tokens, the issuer field of claims does no longer have the actual value of my identity server URL, instead it has "LOCAL AUTHORITY" value.

Is there any setting that I am missing?

leastprivilege commented 7 years ago

That's true. What's the scenario - and why do you need it?

etrafiee commented 7 years ago

In my previous scenario - using Jwt tokens - I was checking the claim issuer as an extra security step. is it unnecessary?

leastprivilege commented 7 years ago

yes. The issuer gets already checked at token validation time.