如何将IdentityServer3添加到现有的基于ASP.Net Identity的项目中？

Question

I'm looking to add IdentityServer3 to a web app that currently uses a standard Entity Framework, SQL Server, Code First based approach to managing users and roles.

I would like to add IdentityServer3 for securing a new Web API endpoint with Basic Auth, JWT and OAuth2. They key point would be to leave the existing user experience (login urls, cookies etc) undisturbed.

I'd like to leave the ASP.Net identity code alone as much as possible.

My question is, what are the key steps I need to perform and are there are relevant samples?

There seems to be plenty of documentation but it's fairly involved and I can't find a sample for this exact scenario.

Answer 1

Besides the usual Identity Server setup, if you have an existing ASP.NET Identity code base that you would like it to use, you will need to implement the UserService feature of Identity Server. This service allows Identity Server to use your user store to authenticate users.

You can find a provided ASP.NET Identity User Service here for inspiration. This includes a sample host in the source.

For getting started with Identity Server this walkthrough in the official documentation would be the best place for you to start .

I also have a couple of articles for getting started with Identity Server and about the default ASP.NET Identity User Service that you may find useful after having a look at the official documentation.