Search code examples
angularapiidentityserver4webapi

Identityserver4 protect/access api from/for outside users

I want to give webapi access for the outside users(I mean, users not belongs to my organization). This API is already protected using identityserver4.

Our internal applications also using this API. Outside users want to access this API (same API for 2 applications) from their Angular application and .Net windows application. How do I give access for this?

API Resource --> APISample API Scopes --> api.read, api.write

Kindly advise on this?

Solution

  • Basically what you need is a way for the outside users to register their "client-applications" with IdentityServer and agree on what scopes/claims should be present in the ID/access-token. Alternatively, you have to register the clients and give out the login details.

    You can have this database driven, so its just a matter of adding the necessary records in the database. The code for this portal you have to do your self.