-
Notifications
You must be signed in to change notification settings - Fork 25.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ASP.NET Core OpenID Connect: Configure OIDC web authentication #33908
ASP.NET Core OpenID Connect: Configure OIDC web authentication #33908
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks! This will be really nice to have
aspnetcore/security/authentication/configure-oidc-web-authentication.md
Outdated
Show resolved
Hide resolved
aspnetcore/security/authentication/configure-oidc-web-authentication.md
Outdated
Show resolved
Hide resolved
aspnetcore/security/authentication/configure-oidc-web-authentication.md
Outdated
Show resolved
Hide resolved
aspnetcore/security/authentication/configure-oidc-web-authentication.md
Outdated
Show resolved
Hide resolved
aspnetcore/security/authentication/configure-oidc-web-authentication.md
Outdated
Show resolved
Hide resolved
aspnetcore/security/authentication/configure-oidc-web-authentication.md
Outdated
Show resolved
Hide resolved
@if (Context.User.Identity!.IsAuthenticated) | ||
{ | ||
<li class="nav-item"> | ||
<a class="nav-link text-dark" asp-area="" asp-page="/Logout">Logout</a> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@blowdart Do we care about protecting logout endpoints with anti-csrf tokens?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you!
PR for part 1 of this issue: #33877
fixes #30647
FYI: @blowdart @JeremyLikness @kevinchalet @halter73 @guardrex @mikekistler @jennyf19
@Rick-Anderson A lot of information in this and I left out some bits like how OAuth PAR works, the refresh flow implementation and just linked some of the other docs instead of direct doc.
image is a drawio png.
what do you think?
Greetings Damien
Internal previews