Does this library support code flow and JWT based authentication instead of client secret?

aspnet / AspNetKatana

Microsoft's OWIN implementation, the Katana project

Apache License 2.0

966 stars 333 forks source link

Closed amitt0488 closed 3 years ago

amitt0488 commented 3 years ago

Can we send signed request through this library?

Tratcher commented 3 years ago

Are you talking about the OpenIdConnect provider? It requires a client secret for doing code redemption. However, you can hook into the AuthorizationCodeReceived notification and redeem the code yourself. https://github.com/aspnet/AspNetKatana/blob/fae38fae683bb0977bcaf7c3ffce244aced82135/src/Microsoft.Owin.Security.OpenIdConnect/OpenIdConnectAuthenticationNotifications.cs#L38

ghost commented 3 years ago

This issue has been resolved and has not had any activity for 1 day. It will be closed for housekeeping purposes.