ASP.NET MVC - OAuth 2.0 REST Web API Authorization Using Database First Approach

Can i have the source code for this demo.

Hi Asma , can you please share your source code.

Hi I have an issue with using this approach , e.g. my user already has auth token, and authorize to access information, meanwhile system administrator change the users password or disable user but still the user can access the information with previous token until the token expire. how can we handle the issue???

Hi Asma, thanks for sharing your experience in WebApi using OAuth 2.0 approach in this. I need to know what are the namespace we are using in AppOAuthProvider.cs" file. Thanks in advance and your effort is highly appreciated :)

Hi Asma, Loving your work, can I get the source to this? I am trying to use oAuth to secure my webapi and the first piece of code - config. is not defined - not sure what I am missing? The source would help.....

Hi there, this is a great article and I've learnt alot form it and from your blog. I have a problem now as I have multiple servers behind a load balancer, so I need to use distributed session state. What would be the best way to do this?

Hi. Is there any chance you could post the completed source code? I'm trying to work through the example (but admittedly using VS 2019, not 2015) and I'm not sure what I'm missing (or what may have changed between versions). Thanks!

Great Articel how i wanted . I am getting this error and i cant get this why this error come in backend. "error": "unsupported_grant_type" where i am doing mistake ?

Unsatisfactory,

Thank you so much for the article it's really helpful

Great articel, thanks, for newbies a life rescue...

Hello, how to configure grant_type=client credentials

Hello, DO you have an example where you consume the api not using postman, but using mvc web app

Hello,I am trying to create a web mvc client that will call api using oauth2 cwith client credentials. CAn you please share some example how to consume the api

This approach works for me, But when i am trying to extract the token using JWT, its saying invalid token. So how i can I extract and see the information inside the token. I am trying to copy/paste the token in this website(https://jwt.io/) to see the content from the token. but is not working. any idea how can we extract information from this token?

How can I implement this into my asp.net core 5.0 web api?

What if the user log out, does the token expires?

The article you have provided is very helpful. I was able to follow the steps and create it. I saw in many articles that the password grant type is deprecated. Is this correct. Could you please help me with an example on the grant type as Authorization code.

How do you create the entity deploy(AdoEntityModel.edmx). can you briefly explain?. cause im stuck at step 8 and the project wont build.

Hiya this is great explanation. Got it running almost but am getting the error - No OWIN authentication manager is associated with the request, couldn't find ways to resolve this. Can you help please?

The same issue as jagadeesan vengudusamy, 404 not found. how to resolve. Thanks

Hi Asma, thanks for this. I am very new to C# environment and still in the learning process. How may I convert his to become .net core web service?

Hi Asma, Thanks for this. When I get the token, how can I decipher it on the client side to extract claims please? I tried loading it into https://jwt.io but apparently it is encrypted but I cannot find the place in your code where you specify the key.

Hi Asma, It is possible change username and password parameters to Application/json ? Thanks!

Hey Asma Khalid, how can i add basic authentication when requesting for a token?

Hey Asma Khalid this is a great work! I seem have some missing. I got the error CS0246 C# The type or namespace name could not be found (are you missing a using directive or an assembly reference?). How to fix it? I'm newly of ASP.NET

How Long this token remains valid? Every time api call is done, they need to generate token?

Hi Asma, very helpful article, but I face one issue after deploy and open outside access, Access token not working, its still says "Authorization has been denied" can anyone had any issue ?

Hey Asma, Thank you for such a helpful article. It indeed is a great help. I have an asp.net website to which i would like to implement oAuth 2.0 authorize endpoint. Please guide.

A great article Asma. This worked fine for me but I have a little different requirement. Instead of grant_type 'password', I want to use 'Client_Credentials' where the scope parameter must be used. Could you please help me in that.

Hi Asma when i am using post method to generate token its shown 404 content not found. your code is everything is fine for me but i click send request showing error like this. Please help me out

What if i want to create an console application and try to consume any OAuth authentication based web service. What will be the code for that

Hi, Thanks for the article. Could you please let me know how to do Logout process (and expire/invalidate token)?

Very good explanation and well working demo. Much appreciated.

I don't want to use the Entity Framework?

You are awesome. What a post. executed everything properly in one attempt.

Hello, how did you manage to add more properties on the token result? From my result it only shows 3 properties "access_token, token_type, expires_in".

Hello Asama, Thank you very much. very nice article and its complete helpful me to implement oAuth 2 with my web API project. in response i m getting keys "access_token", , "token_type", "expires_in", "refresh_token",. can i add any extra key in response , i want return ID. if yes then how ?

ERROR:On clicking the Login link on the home page shows this: Server Error in '/' Application. The resource cannot be found. Description: HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable. Please review the following URL and make sure that it is spelled correctly. Requested URL: /Account/Login There is no AccountController at all...

Hi Asma, Great article. thank you so much. Can you guide me how can i pass the following parameters through header to get the token. Grant_type : Instead of password i have to use "client credentials" Client_Id :Instead of username i have to put this. Password will be same password. i have to pass these three parameters through header to get the token. is that possible? if yes please guide me.

When I try to run my project it gives me an error "No OWIN authentication manager is associated with the request". But it works fine if I try to run your source code. Some people pointed out that it is caused by the lines "config.SuppressDefaultHostAuthentication(); config.Filters.Add(new HostAuthenticationFilter(OAuthDefaults.AuthenticationType));" in the webAPiConfig.cs file but work fine in your source code. Could you please point out if am doing anything wrong P.S I didn't get the startup files autogenerated and thus had to create them using OWIN startup class option manually .

Thank You so much for this article... it helped me alot and i was about change my domain logic to WebApi domain preferences... thank god... God Bless

I am running the application and testing using Firefox plugin It gives error as output while requesting Token in route "http://localhost:3097/Token" as : {"error":"unsupported_grant_type"}

Hello. It's a great posts... I get stuck in Token Introspection Endpoint. How can the client know the endpoint of Token Introspection in Oauth2 Server? can you give me an example of that... thank you so much!

Hi. Can You post client sample for xamarin forms (Android) ?

Hi Asma. I downloaded your project. I am able to get the token but i cannot use the token to call the RESR Web Api. It still says authorization has been denied for this user. Am i missing something? Please help.

Hi Asma! What is the approach to renew token? Imagine I have an Android App and I don't want to force the user to re-login to continue using the App. Any idea?

Hello,I have bearer token (Bearer asassasasasasas) already.I don't need to generate new token key.How can I use it windows forms in c#? Could you please help me?

And we can implement sliding on it so that every time use access api method it reinitialize access time please guide?

How to get refresh token

I'm having many errors that don't have a visible solution. Like "UseExternalSignInCookie", i can't even import something to fix the error.

DOES THIS EXAMPLE HANDLE AUTHORIZATION AND AUTHENTICATION?

Hi, how do I use Azure active directory for authentication/token generating with this code?

Hello Asma, i downloaded your project, but i cant get step 10 in your project.

Or how would i implement token refresh

Hello Asma. Is there a way to make the token never expire?

Hello Asma. In a controller I can get the user name associated with a token like this: User.Identity.Name; How do I get the token value so I can store it in a database?

Hello Asma. I asked this question previously and passed your reply to a colleague. What do you think about this reply below? “The delete is for a user to logout of the app. I’m not sure what you read but it’s a very basic functionality of any service I know of. All you have to do on your end is either delete the token or flag it as such so that it can’t be used.”

Hi, thanks for this article, can this generated token be used in asp.net mvc controller to authorize action methods? ( not from javascript). Imagine we authenicate asp.net mvc with the api and get the token and save it in a cookie. Then how can we auhtorize action methods by using that token?

Thanks again this article has been extremely helpful. I’m not sure why but I have a spec that asks to delete the registration despite the timeout feature. Response should be “Registration is removed. The token is now invalid”. Do you know how this would be done?

Wow, this was awesome. I searched high and low for something like this: updated, simple, beautiful, full example. It was hard! Kudos to you!

How i can logout Specific user

Hi Asma nice tutorial. When i run code in VS it works but when i try to use it in IIS 7 I get folowinfg error:The controller for path "Token" was not found or does not implement IController

Yes I know but I need to call other methods that require username as a parameter. So how do I get the username that was used for the initial username and password login?

Hello Asma. Great article thank you. In the web api controller "Get" method how do I get the use's record id or user name?

Very nice article but I have downloaded the source code and trying it using postman but when requesting /Token it says : "error": "unsupported_grant_type". Any clarification please

Hi, I did as this article said but at the end I just get 500 internal error. I checked it twice everything is like what writer has been wrote. can any body help whats the problem?

Thanks for the information but updating the credential should not generated a new access token as you have mentioned in description.Please describe the point if I am missing something here.

Thanks for your comment Asma. I will check and come to you as soon as possible.

How to use with begin form ?

Hello Asma, Very nice article for the beginners.

I would like to you that , can i use the same token to access other browser without login ?

Nice and clean article! Good job.

Nice article, thank you for writing the article in detail.