Generate access token with IdentityServer4 without password

by 
[HttpPost("loginas/{id}")]
[Authorize(Roles = "admin")]
public async Task<IActionResult> LoginAs(int id, [FromServices] ITokenService TS, 
    [FromServices] IUserClaimsPrincipalFactory<ApplicationUser> principalFactory,
    [FromServices] IdentityServerOptions options)
{
    var Request = new TokenCreationRequest();                        
    var User = await userManager.FindByIdAsync(id.ToString());
    var IdentityPricipal = await principalFactory.CreateAsync(User);
    var IdServerPrincipal = IdentityServerPrincipal.Create(User.Id.ToString(), User.UserName, IdentityPricipal.Claims.ToArray());

    Request.Subject = IdServerPrincipal;
    Request.IncludeAllIdentityClaims = true;
    Request.ValidatedRequest = new ValidatedRequest();
    Request.ValidatedRequest.Subject = Request.Subject;
    Request.ValidatedRequest.SetClient(Config.GetClients().First());
    Request.Resources = new Resources(Config.GetIdentityResources(), Config.GetApiResources());
    Request.ValidatedRequest.Options = options;
    Request.ValidatedRequest.ClientClaims = IdServerPrincipal.Claims.ToArray();

    var Token = await TS.CreateAccessTokenAsync(Request);
    Token.Issuer = "http://" + HttpContext.Request.Host.Value;

    var TokenValue = await TS.CreateSecurityTokenAsync(Token);
    return Ok(TokenValue);
}

For a newly released IdentityServer 2.0.0 the code needs some modifications:

[HttpPost("loginas/{id}")]
[Authorize(Roles = "admin")]
public async Task<IActionResult> LoginAs(int id, [FromServices] ITokenService TS, 
    [FromServices] IUserClaimsPrincipalFactory<ApplicationUser> principalFactory, 
    [FromServices] IdentityServerOptions options)
{
    var Request = new TokenCreationRequest();
    var User = await userManager.FindByIdAsync(id.ToString());
    var IdentityPricipal = await principalFactory.CreateAsync(User);
    var IdentityUser = new IdentityServerUser(User.Id.ToString());
    IdentityUser.AdditionalClaims = IdentityPricipal.Claims.ToArray();
    IdentityUser.DisplayName = User.UserName;
    IdentityUser.AuthenticationTime = System.DateTime.UtcNow;
    IdentityUser.IdentityProvider = IdentityServerConstants.LocalIdentityProvider;
    Request.Subject = IdentityUser.CreatePrincipal();
    Request.IncludeAllIdentityClaims = true;
    Request.ValidatedRequest = new ValidatedRequest();
    Request.ValidatedRequest.Subject = Request.Subject;
    Request.ValidatedRequest.SetClient(Config.GetClients().First());
    Request.Resources = new Resources(Config.GetIdentityResources(), Config.GetApiResources());
    Request.ValidatedRequest.Options = options;
    Request.ValidatedRequest.ClientClaims = IdentityUser.AdditionalClaims;
    var Token = await TS.CreateAccessTokenAsync(Request);
    Token.Issuer = HttpContext.Request.Scheme + "://" + HttpContext.Request.Host.Value;
    var TokenValue = await TS.CreateSecurityTokenAsync(Token);
    return Ok(TokenValue);
}

More Related Contents:

  1. IdentityServer4 Role Based Authorization for Web API with ASP.NET Core Identity
  2. IdentityServer4 register UserService and get users from database in asp.net core
  3. How do I get the contents of a JSON file I added in the StartUp method to use it in one of my actions?
  4. How to enable CORS in ASP.net Core WebAPI
  5. Configure the authorization server endpoint
  6. How to get a list of all routes in ASP.NET Core?
  7. Render Razor View to string in ASP.NET Core
  8. JsonSerializerSettings and Asp.Net Core
  9. How to seed an Admin user in EF Core 2.1.0?
  10. How to use npm with ASP.NET Core
  11. How to get the Development/Staging/production Hosting Environment in ConfigureServices
  12. EF CORE 2.1 HasConversion on all properties of type datetime
  13. Cannot resolve scoped service from root provider .Net Core 2
  14. Still logged in MVC site, but can’t call web API
  15. Dependency Injection error: Unable to resolve service for type while attempting to activate, while class is registered
  16. Inject service into Action Filter
  17. Get all registered routes in ASP.NET Core
  18. How to get user Browser name ( user-agent ) in Asp.net Core?
  19. How to set json serializer settings in asp.net core 3?
  20. JSON serialization/deserialization in ASP.Net Core
  21. Add migration with different assembly
  22. .NET Core include folder in publish
  23. Serilog DI in ASP.NET Core, which ILogger interface to inject?
  24. Using a Scoped service in a Singleton in an Asp.Net Core app
  25. Blazor – How to create Components dynamically
  26. How to load navigation properties on an IdentityUser with UserManager
  27. How can I ensure that appsettings.dev.json gets copied to the output folder?
  28. How to Upload File from Angular to ASP.NET Core Web API
  29. Implementing recursive property loading in EF Core
  30. How to resolve .net core build error NETDSDK1061 and warning MSB3277

Leave a Comment