oauth - .NET - Single Resource Server accepting bearer tokens from multiple Authorization Server -
scenario: exposing web api pre-registered applications. api publicly exposed, should available registered applications (clients). have chosen oauth2 authorization, , resource server accepts bearer tokens authorization server.
we using thinktecture identityserver v3 oauth purposes.
we have chosen oauth2 client credentials flow, , sharing secret server based applications. until good. have native ios mobile app needs access our protected api. read it's not idea share secret javascript/mobile apps.
also importantly ios mobile app has own identity provider (adfs). before requesting token authorization server, user must have logged in ios app.
considering scenario, please suggest how resource server can trust ios native app? thought of using implicit flow. because of fact ios mobile app has own authentication, authorization server needs way determine incoming request has been authenticated using external identity provider, , issue access token automatically ios app.
how make authorization server trust external identity provider , issue access token when request comes ios app, instead of redirecting user authorization server login page?
is single resource server able accept tokens multiple authorization servers? if not, why?
Comments
Post a Comment