c# - Is there any way to pass custom state or context from the client through identityserver3 to a custom IdP? -


i working on spike following architecture:

[asp.net mvc client] --> [identity server 3 custom middleware] --> [custom idp]

the spike prove out more open, standards-based approach better yet bespoke solution serves 1 purpose.

the functionality flow require such that:

  1. the client perform user search , retrieve customer id
  2. the user requested restricted resource providing customer id
  3. the openid connect pipeline redirects them through custom idp
  4. the custom idp presents page of secret questions user must answered in order them authenticated
  5. authentication occurs , passes user through idsvr3 client upon can access restricted resource.

my question - achievable? state encrypted on client , should considered unencryptable. have access source code client, idsvr3 instance, custom middleware , custom idp, magic tricks can think of should achievable.

i'm using latest nuget package openidconnect in mvc client.

i managed by:

  1. intercepting response within global.asax.cs application_endrequest , appending identifier
  2. reading identifier in request authorize endpoint in idsvr3
  3. padding parameter through calls until custom auth middleware called
  4. appending parameter onto redirect url

Comments

Popular posts from this blog

Fail to load namespace Spring Security http://www.springframework.org/security/tags -

sql - MySQL query optimization using coalesce -

unity3d - Unity local avoidance in user created world -