Search code examples
asp.net-coreopenid-connectopeniddict

Accessing authentication ticket information when using openiddict

Is there any way I can access the auth ticket info set on the auth server when it is separate from the resource server?

On the auth server I can access all the ticket properties I set using 

var authInfo = await Request.HttpContext.Authentication.GetAuthenticateInfoAsync(OAuthValidationDefaults.AuthenticationScheme);

    var myProperty= authInfo.Properties.Items.FirstOrDefault(p => p.Key.Equals("property_name"));

However, when I try this while on the resource server, I am unable to see the same properties.

Solution

  • To be able to access the authentication properties stored in an access token, you must use the default access token AND the validation middleware.

    When using the introspection middleware, you can't flow these properties. Instead, store them as claims to be able to expose them to your resource servers.