Create an OAuth 2.0 service provider using DotNetOpenAuth

oauth-2.0 asp.net-web-api oauth-provider
marcus picture marcus · Jul 11, 2012 · Viewed 15.5k times · Source

I'm building a web app which will have an api and an authorization service using DotNetOpenAuth. I found this example on how you can authorize using a service provider that already exists but I would like an example on how to implement a service provider that can create tokens, persist them and do evaluation. Is there any great articles or sample providers that I can download?

Answer

Mark Jones picture Mark Jones · Jul 25, 2012

Update

DotNetOpenAuth has moved on since this was initially posted. I strongly suggest you follow Ashish's advise and take a look at the samples. It contains code to write Authorization Servers, Resource Servers and Clients for all the major flows.

If you wanted a pre built solution, with opensource code

Thinktecture Identity Server is an Open Source .NET security token service. It supports a number of endpoints for authentication including OAuth 2.0 Bearer tokens.

Update this Thinktecture Identity Server is now on version 2 and supports these OAuth 2.0 flows

  1. Resource Owner Password Credential Flow
  2. Implict Flow & JavaScript
  3. Authorization Code Flow

again take a look at the code to see how it was all done and there are samples here to show how to plumb it in.

I hope this helps - these library's and examples have hugely helped us over the past few months.

Update

There is also another example warning, it looks dated of a simple OAuth provider for MVC here Sample code here

Related questions

Error :Request header field Content-Type is not allowed by Access-Control-Allow-Headers

I created an mvc4 web api project using vS2012. I used following tutorial to solve the Cross-Origin Resource Sharing, "http://blogs.msdn.com/b/carlosfigueira/archive/2012/07/02/cors-support-in-asp-net-web-api-rc-version.aspx". It is working successfully, and i post data from client side to …

Read More
OWIN Security - How to Implement OAuth2 Refresh Tokens

I am using the Web Api 2 template that comes with Visual Studio 2013 has some OWIN middleware to do User Authentication and the likes of. In the OAuthAuthorizationServerOptions I noticed that the OAuth2 Server is setup to hand out tokens that …

Read More
Getting "error": "unsupported_grant_type" when trying to get a JWT by calling an OWIN OAuth secured Web Api via Postman

I have followed this article to implement an OAuth Authorization server. However when I use post man to get a token, I get an error in the response: "error": "unsupported_grant_type" I read somewhere that the data in Postman …

Read More