OpenID Connect for ASP.NET Core

ComponentSpace.OpenID enables ASP.NET Core applications to participate in OpenID Connect (OIDC) authentication as the OpenID provider and authorization server.

It supports Blazor, ASP.NET Core and any other OIDC compliant client.

Supports:

• OIDC authentication as the OpenID provider
• OIDC Discovery
• Authentication and Logout
• JWT Access Tokens
• Refresh Tokens

Supported OpenID flows include:

• Authorization Code Flow
• Authorization Code Flow with Proof Key for Code Exchange (PKCE)
• Implicit Flow
• Hybrid Flow

Supported grant types include:

• authorization_code
• client_credentials
• password
• refresh_token

Supported response types include:

• code
• id_token
• id_token token
• code id_token
• code token
• code id_token token

Client authentication methods include:

• client_secret_basic
• client_secret_post
• client_secret_jwt
• private_key_jwt
• none

Licensing

ComponentSpace.OpenID is a commercial product that includes a free 30-day trial period.

Production use requires a commercial license.

Examples

Example ASP.NET Core projects are available that demonstrate the simple to use OpenID API and accompanying OpenID configuration.

Processing an OpenID Discovery Metadata Request

[Route(".well-known/openid-configuration")] [ResponseCache(Duration = 600, Location = ResponseCacheLocation.Any)] public async Task GetMetadataAsync() { // Return the OpenID provider's metadata. return await _openIDProvider.GetMetadataAsync(); }

Processing an OpenID Key Request

[Route("openid/keys")] [ResponseCache(Duration = 600, Location = ResponseCacheLocation.Any)] public async Task GetKeysAsync() { // Return the OpenID provider's keys. return await _openIDProvider.GetKeysAsync(); }

Processing an OpenID Connect Authentication Request

[Route("openid/authorize")] public async Task AuthorizeAsync() { // Receive and process the OpenID Connect authentication request. var authenticationRequest = await _openIDProvider.ReceiveAuthnRequestAsync(); }

Sending an OpenID Connect Authentication Response

[Route("openid/AuthenticationCompletion")] public async Task AuthenticationCompletionAsync() { // Create and send the OpenID Connect authentication response. return await _openIDProvider.SendAuthnResponseAsync(name, claims, accessToken); }

Links

• OpenID Connect for ASP.NET Core