Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion src/content/docs/accesstokenmanagement/advanced/DPoP.md
Original file line number Diff line number Diff line change
Expand Up @@ -57,7 +57,7 @@ services.AddClientCredentialsTokenManagement()
Once the key has been configured for the client, then the library will use it to produce a DPoP proof token when calling the token server (including token renewals if relevant).
There is nothing explicit needed on behalf of the developer using this library.

### `dpop_jkt` At The token Server's Authorize Endpoint
### `dpop_jkt` At The Token Server's Authorize Endpoint

When using DPoP and `AddOpenIdConnectAccessTokenManagement`, this library will also automatically include the `dpop_jkt` parameter to the authorize endpoint.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ Given that the access token has a finite lifetime, you typically want to

ASP.NET Core has built-in facilities that can help you with some of those tasks
(like caching or sessions), but there is still quite some work left to do.
[Duende.AccessTokenManagement](https://github.com/DuendeSoftware/Duende.AccessTokenManagement/wiki)
[Duende.AccessTokenManagement](/accesstokenmanagement)
can help. It provides abstractions for storing tokens, automatic refresh of expired tokens, etc.

## Requesting A Refresh Token
Expand Down
2 changes: 1 addition & 1 deletion src/content/docs/identityserver/samples/basics.md
Original file line number Diff line number Diff line change
Expand Up @@ -75,7 +75,7 @@ Key takeaways:
### MVC Client with automatic Access Token Management

This sample shows how to
use [Duende.AccessTokenManagement](https://github.com/DuendeSoftware/Duende.AccessTokenManagement/wiki) to automatically
use [Duende.AccessTokenManagement](/accesstokenmanagement) to automatically
manage access tokens.

The sample uses a special client in the sample IdentityServer with a short token lifetime (75 seconds). When repeating
Expand Down
2 changes: 1 addition & 1 deletion src/content/docs/identityserver/tokens/pop.md
Original file line number Diff line number Diff line change
Expand Up @@ -200,7 +200,7 @@ new Client
#### Enabling DPoP Support In Your Client

The easiest approach for supporting DPoP in your client is to use the DPoP support in the `Duende.AccessTokenManagement`
library ([docs available here](https://github.com/DuendeSoftware/Duende.AccessTokenManagement/wiki/DPoP)).
library ([docs available here](/accesstokenmanagement/advanced/dpop/)).
It provides DPoP client support for both client credentials and code flow style clients.
DPoP is enabled by assigning the `DPoPJsonWebKey` on the client configuration.

Expand Down
2 changes: 1 addition & 1 deletion src/content/docs/identityserver/tokens/refresh.md
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ var response = await client.RequestRefreshTokenAsync(new RefreshTokenRequest
});
```

The [Duende.AccessTokenManagement](https://github.com/DuendeSoftware/Duende.AccessTokenManagement/wiki) library can be
The [Duende.AccessTokenManagement](/accesstokenmanagement) library can be
used to automate refresh & access token lifetime management in ASP.NET Core.

## Binding Refresh Tokens
Expand Down
4 changes: 2 additions & 2 deletions src/content/docs/identityserver/tokens/requesting.md
Original file line number Diff line number Diff line change
Expand Up @@ -71,7 +71,7 @@ var response = await client.RequestClientCredentialsTokenAsync(new ClientCredent

### Automating Token Requests In ASP.NET Core And Worker Applications

The [Duende.AccessTokenManagement](https://github.com/DuendeSoftware/Duende.AccessTokenManagement/wiki) library can automate client credential request and token lifetime management for you.
The [Duende.AccessTokenManagement](/accesstokenmanagement) library can automate client credential request and token lifetime management for you.
Using this library, you can enable access token management for an HTTP client provided by `IHttpClientFactory`.

You can add the necessary services to ASP.NET Core's service provider by calling `AddClientCredentialsTokenManagement()`. One or more named client definitions need to be registered by calling `AddClient()`.
Expand Down Expand Up @@ -228,4 +228,4 @@ builder.Services.AddAuthentication(options =>
```

### Automating Token Management In ASP.NET Core
The [Duende.AccessTokenManagement](https://github.com/DuendeSoftware/Duende.AccessTokenManagement/wiki) library can also be used to automate token lifetime management in ASP.NET Core applications for you.
The [Duende.AccessTokenManagement](/accesstokenmanagement) library can also be used to automate token lifetime management in ASP.NET Core applications for you.
2 changes: 1 addition & 1 deletion src/content/docs/identityserver/ui/login/mfa.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ redirect_from:
- /identityserver/v7/ui/login/mfa/
---

Duende IdentityServer itself doesn't implement multi-factor authentication (MFA). MFA is part of the login process in the user interface which is the [responsibility of the hosting application](..). Microsoft provides some [general guidelines](https://learn.microsoft.com/en-us/aspnet/core/security/authentication/mfa) on how to enable MFA in ASP.NET Core.
Duende IdentityServer itself doesn't implement multi-factor authentication (MFA). MFA is part of the login process in the user interface which is the [responsibility of the hosting application](../index.md). Microsoft provides some [general guidelines](https://learn.microsoft.com/en-us/aspnet/core/security/authentication/mfa) on how to enable MFA in ASP.NET Core.

## MFA Hosted In IdentityServer

Expand Down