config-persistance-claims-refreshing-imolicit-flow

IdentityServer/Configuration.cs

@@ -60,13 +60,19 @@ namespace IdentityServer
                   new Client
                 {
                      ClientId="client_id_js",
+
                      AllowedGrantTypes = GrantTypes.Implicit,
+
                      RedirectUris={ "https://localhost:44387/Home/signin" },
                      AllowedCorsOrigins={ "https://localhost:44387" }, 
+
                       AllowedScopes={
                          IdentityServerConstants.StandardScopes.OpenId,
                          "ApiOne",
+                         "ApiTwo" ,
+                         "rc.scope",
                      },
+                      AccessTokenLifetime=1,
                       AllowAccessTokensViaBrowser=true,
                       RequireConsent=false
 

IdentityServer/Program.cs

@@ -21,11 +21,12 @@ namespace IdentityServer
             {
                 var userManager = scope.ServiceProvider.
                     GetRequiredService<UserManager<IdentityUser>>();
-                var user = new IdentityUser("alan");
+                var user = new IdentityUser("bob");
                 userManager.CreateAsync(user, "password").GetAwaiter().GetResult();
                 userManager.AddClaimAsync(user, new Claim("rc.garndma", "big.cookie"))
                     .GetAwaiter().GetResult();
-                userManager.AddClaimAsync(user, new Claim("rc.api.garndma", "big..api.cookie"))
+                userManager.AddClaimAsync(user,
+                    new Claim("rc.api.garndma", "big.api.cookie"))
                     .GetAwaiter().GetResult();
             }
                 host.Run();

JavascriptClient/Views/Home/SignIn.cshtml

 <script src="https://cdnjs.cloudflare.com/ajax/libs/oidc-client/1.9.1/oidc-client.min.js"></script>
 
 <script>
-    var userManger = new Oidc.UserManager();
-    //var userManger = new Oidc.UserManager({
-    //    userStore: new Oidc.WebStorageStateStore({ store: window.localStorage }),
-    //    response_mode: "query"
-    //});
+    //var userManger = new Oidc.UserManager();
+    var userManger = new Oidc.UserManager({userStore: new Oidc.WebStorageStateStore({ store: window.localStorage })    });
 
     userManger.signinCallback().then(res => {
         console.log(res);

JavascriptClient/wwwroot/main.js

 var config = {
-    //userStore: new Oidc.WebStorageStateStore({ store: window.localStorage }),
+    userStore: new Oidc.WebStorageStateStore({ store: window.localStorage }),
     authority: "https://localhost:44325/",
     client_id: "client_id_js",
     redirect_uri: "https://localhost:44387/Home/SignIn",
     //post_logout_redirect_uri: "https://localhost:44345/Home/Index",
     response_type: "id_token token",
-    scope: "openid ApiOne"
+    scope: "openid rc.scope ApiOne ApiTwo"
 };
 
 var userManager = new Oidc.UserManager(config);
@@ -18,7 +18,7 @@ var signIn = function () {
 //    userManager.signoutRedirect();
 //};
 
-userManager.getUser().then(user => { 
+userManager.getUser().then(user => {
     console.log("user:", user);
     if (user) {
         axios.defaults.headers.common["Authorization"] = "Bearer " + user.access_token;
@@ -34,33 +34,32 @@ var callApi = function () {
 
 //var refreshing = false;
 
-//axios.interceptors.response.use(
-//    function (response) { return response; },
-//    function (error) {
-//        console.log("axios error:", error.response);
+var axiosConfig = error.response.config;
 
-//        var axiosConfig = error.response.config;
+axios.interceptors.response.use(
+    function (response) { return response; },
+    function (error) {
+        console.log("axios error:", error.response);
+        return Promise.reject(error);
+        var axiosConfig = error.response.config;
+        //if error response is 401 try to refresh token
+        if (error.response.status === 401) {
 
-//        //if error response is 401 try to refresh token
-//        if (error.response.status === 401) {
-//            console.log("axios error 401");
+            console.log("axios error 401");
+            if (!refreshing) {
+                refreshing = true;
 
-//            // if already refreshing don't make another request
-//            if (!refreshing) {
-//                console.log("starting token refresh");
-//                refreshing = true;
+                //do the refresh
+                return userManager.signinSilent().then(user => {
+                    console.log("new user:", user);
+                    //update the http request and client
+                    axios.defaults.headers.common["Authorization"] = "Bearer " + user.access_token;
+                    axiosConfig.headers["Authorization"] = "Bearer " + user.access_token;
+                    //retry the http request
+                    return axios(axiosConfig);
+                });
+            }
 
-//                // do the refresh
-//                return userManager.signinSilent().then(user => {
-//                    console.log("new user:", user);
-//                    //update the http request and client
-//                    axios.defaults.headers.common["Authorization"] = "Bearer " + user.access_token;
-//                    axiosConfig.headers["Authorization"] = "Bearer " + user.access_token;
-//                    //retry the http request
-//                    return axios(axiosConfig);
-//                });
-//            }
-//        }
-
-//        return Promise.reject(error);
-//    });
\ No newline at end of file
+        }
+        return Promise.reject(error);
+    });