diff --git a/src/content/docs/accesstokenmanagement/advanced/DPoP.md b/src/content/docs/accesstokenmanagement/advanced/DPoP.md index 4450d0555..0e12b67c2 100644 --- a/src/content/docs/accesstokenmanagement/advanced/DPoP.md +++ b/src/content/docs/accesstokenmanagement/advanced/DPoP.md @@ -57,7 +57,7 @@ services.AddClientCredentialsTokenManagement() Once the key has been configured for the client, then the library will use it to produce a DPoP proof token when calling the token server (including token renewals if relevant). There is nothing explicit needed on behalf of the developer using this library. -### `dpop_jkt` At The token Server's Authorize Endpoint +### `dpop_jkt` At The Token Server's Authorize Endpoint When using DPoP and `AddOpenIdConnectAccessTokenManagement`, this library will also automatically include the `dpop_jkt` parameter to the authorize endpoint. diff --git a/src/content/docs/identityserver/quickstarts/3a-token-management.md b/src/content/docs/identityserver/quickstarts/3a-token-management.md index d54e2db6b..d7ead7007 100644 --- a/src/content/docs/identityserver/quickstarts/3a-token-management.md +++ b/src/content/docs/identityserver/quickstarts/3a-token-management.md @@ -29,7 +29,7 @@ Given that the access token has a finite lifetime, you typically want to ASP.NET Core has built-in facilities that can help you with some of those tasks (like caching or sessions), but there is still quite some work left to do. -[Duende.AccessTokenManagement](https://github.com/DuendeSoftware/Duende.AccessTokenManagement/wiki) +[Duende.AccessTokenManagement](/accesstokenmanagement) can help. It provides abstractions for storing tokens, automatic refresh of expired tokens, etc. ## Requesting A Refresh Token diff --git a/src/content/docs/identityserver/samples/basics.md b/src/content/docs/identityserver/samples/basics.md index ae1dd5703..fb7f1dc85 100644 --- a/src/content/docs/identityserver/samples/basics.md +++ b/src/content/docs/identityserver/samples/basics.md @@ -75,7 +75,7 @@ Key takeaways: ### MVC Client with automatic Access Token Management This sample shows how to -use [Duende.AccessTokenManagement](https://github.com/DuendeSoftware/Duende.AccessTokenManagement/wiki) to automatically +use [Duende.AccessTokenManagement](/accesstokenmanagement) to automatically manage access tokens. The sample uses a special client in the sample IdentityServer with a short token lifetime (75 seconds). When repeating diff --git a/src/content/docs/identityserver/tokens/pop.md b/src/content/docs/identityserver/tokens/pop.md index 01287eeec..0d8645c3b 100644 --- a/src/content/docs/identityserver/tokens/pop.md +++ b/src/content/docs/identityserver/tokens/pop.md @@ -200,7 +200,7 @@ new Client #### Enabling DPoP Support In Your Client The easiest approach for supporting DPoP in your client is to use the DPoP support in the `Duende.AccessTokenManagement` -library ([docs available here](https://github.com/DuendeSoftware/Duende.AccessTokenManagement/wiki/DPoP)). +library ([docs available here](/accesstokenmanagement/advanced/dpop/)). It provides DPoP client support for both client credentials and code flow style clients. DPoP is enabled by assigning the `DPoPJsonWebKey` on the client configuration. diff --git a/src/content/docs/identityserver/tokens/refresh.md b/src/content/docs/identityserver/tokens/refresh.md index 957cd65a0..f5b0ad5c8 100644 --- a/src/content/docs/identityserver/tokens/refresh.md +++ b/src/content/docs/identityserver/tokens/refresh.md @@ -63,7 +63,7 @@ var response = await client.RequestRefreshTokenAsync(new RefreshTokenRequest }); ``` -The [Duende.AccessTokenManagement](https://github.com/DuendeSoftware/Duende.AccessTokenManagement/wiki) library can be +The [Duende.AccessTokenManagement](/accesstokenmanagement) library can be used to automate refresh & access token lifetime management in ASP.NET Core. ## Binding Refresh Tokens diff --git a/src/content/docs/identityserver/tokens/requesting.md b/src/content/docs/identityserver/tokens/requesting.md index 58beb4f51..9f5d0e715 100644 --- a/src/content/docs/identityserver/tokens/requesting.md +++ b/src/content/docs/identityserver/tokens/requesting.md @@ -71,7 +71,7 @@ var response = await client.RequestClientCredentialsTokenAsync(new ClientCredent ### Automating Token Requests In ASP.NET Core And Worker Applications -The [Duende.AccessTokenManagement](https://github.com/DuendeSoftware/Duende.AccessTokenManagement/wiki) library can automate client credential request and token lifetime management for you. +The [Duende.AccessTokenManagement](/accesstokenmanagement) library can automate client credential request and token lifetime management for you. Using this library, you can enable access token management for an HTTP client provided by `IHttpClientFactory`. You can add the necessary services to ASP.NET Core's service provider by calling `AddClientCredentialsTokenManagement()`. One or more named client definitions need to be registered by calling `AddClient()`. @@ -228,4 +228,4 @@ builder.Services.AddAuthentication(options => ``` ### Automating Token Management In ASP.NET Core -The [Duende.AccessTokenManagement](https://github.com/DuendeSoftware/Duende.AccessTokenManagement/wiki) library can also be used to automate token lifetime management in ASP.NET Core applications for you. +The [Duende.AccessTokenManagement](/accesstokenmanagement) library can also be used to automate token lifetime management in ASP.NET Core applications for you. diff --git a/src/content/docs/identityserver/ui/login/mfa.md b/src/content/docs/identityserver/ui/login/mfa.md index 2c551d328..0a768656a 100644 --- a/src/content/docs/identityserver/ui/login/mfa.md +++ b/src/content/docs/identityserver/ui/login/mfa.md @@ -9,7 +9,7 @@ redirect_from: - /identityserver/v7/ui/login/mfa/ --- -Duende IdentityServer itself doesn't implement multi-factor authentication (MFA). MFA is part of the login process in the user interface which is the [responsibility of the hosting application](..). Microsoft provides some [general guidelines](https://learn.microsoft.com/en-us/aspnet/core/security/authentication/mfa) on how to enable MFA in ASP.NET Core. +Duende IdentityServer itself doesn't implement multi-factor authentication (MFA). MFA is part of the login process in the user interface which is the [responsibility of the hosting application](../index.md). Microsoft provides some [general guidelines](https://learn.microsoft.com/en-us/aspnet/core/security/authentication/mfa) on how to enable MFA in ASP.NET Core. ## MFA Hosted In IdentityServer