identityserver4 - identity server 4 get email claim without using Profile -


how can configure identity server core pass user email, in hybrid flow, without including "profile" identity resource?

i want server know least information possible user, require user emails users create account. consent asking user authorize id , email both required.

i using entity framework stores persist data + asp.net core identity user management. populate db config shown below.

this have done far, not receiving user claim user email. receiving "sid" though.

public class config {     // scopes define resources in system     public static ienumerable<identityresource> getidentityresources()     {          return new list<identityresource>         {             new identityresources.openid(),             new identityresources.email             {                 required = true             }         };     }       // clients want access resources (aka scopes)     public static ienumerable<client> getclients()     {              new client             {                 clientid = "myclient",                 clientname = "myclient",                 allowedgranttypes = granttypes.hybridandclientcredentials,                  requireconsent = true,                  clientsecrets =                 {                     new secret("secret".sha256())                 },                  redirecturis = { "http://localhost:27919/signin-oidc" },                 postlogoutredirecturis = { "http://localhost:27919" },                  allowedscopes =                 {                     identityserverconstants.standardscopes.openid,                     identityserverconstants.standardscopes.email                 },                 allowofflineaccess = true             }            };     } }

on client side doing:

// middleware external openid connect authentication         var options = new openidconnectoptions         {             signinscheme = "identity.external",             signoutscheme = "identity",              displayname = "myclient",             authority = constants.authserver.baseurl,              clientid = "myclient",             clientsecret = "secret",              responsetype = "code id_token",              //scopes entered below, outside constructor              getclaimsfromuserinfoendpoint = true,               requirehttpsmetadata = false   //todo: make true, false development           };         //adding scopes         options.scope.clear();         options.scope.add("openid");         options.scope.add("email");         app.useopenidconnectauthentication(options);

i figured out in account controller corresponding asp.net identity email claim must created when user created, add:

 user.claims.add(new identityuserclaim<string>             {                 claimtype = "email",                 claimvalue = model.email             });

following each user creation:

var user = new applicationuser { username = model.email, email = model.email };

Comments

Post a Comment

Popular posts from this blog

android - InAppBilling registering BroadcastReceiver in AndroidManifest -

i'm implementing inapp billing in android app. works well, however, i'm trying decouple broadcast receiver activity manifest. suggestion in android's trivialdrive sample: // important: dynamically register broadcast messages updated purchases. // register receiver here instead of <receiver> in manifest // because call getpurchases() @ startup, therefore can ignore // broadcasts sent while app isn't running. // note: registering listener in activity bad idea, done here // because sample. regardless, receiver must registered after // iabhelper setup, before first call getpurchases(). currently there's class extends broadcastreceiver : public class iabbroadcastreceiver extends broadcastreceiver { /** * intent action receiver should filter for. */ public static final string action = "com.android.vending.billing.purchases_updated"; private final iabbroadcastlistener mlistener; public iabbroadcastreceiver(iabbroadcastlistener listener) { m...
Read more

python Tkinter Capturing keyboard events save as one single string -

is possible store keyboard events 1 string? code below stores 1 char , prints it. card reader or bar code reader, contains collection of character/ string not 1 character @ time. goal save char pressed text variable. from tkinter import * root = tk() def key(event): text= event.char text+= event.char print ("pressed", text) def callback(event): frame.focus_set() print ("clicked at", event.x, event.y) frame = frame(root, width=100, height=100) frame.bind("<key>", key) frame.bind("<button-1>", callback) frame.pack() root.mainloop() currently, creating text variable , everytime key() function gets called, , text stores last character typed. you can define text module level variable , , use module level text inside key function - text = '' def key(event): global text text+= event.char print("pressed", text)
Read more

sql server - Why does Linq-to-SQL add unnecessary COUNT()? -

here tables: create table customer ( cid int primary key, name varchar(32) ) create table ord ( oid int primary key, cid int foreign key references customer, address varchar(20) ) here's linq-to-sql statement: var aaa = c in db.customer select new { c, o = c.ord.tolist() }; and here's inexplicable query generated linq-to-sql: select [t0].[cid] [cid], [t0].[name] [name], [t1].[oid] [oid], [t1].[cid] [cid2], [t1].[address] [address], (select count(*) [dbo].[ord] [t2] [t2].[cid] = [t0].[cid]) [value] [dbo].[customer] [t0] left outer join [dbo].[ord] [t1] on [t1].[cid] = [t0].[cid] order [t0].[cid], [t1].[oid] i want understand how rid of count(*) part. it's entirely uncalled for! linq needs count(*) in order determine number of entries returned o = c.ord.tolist() .
Read more