Update data to AspNetCoreOData.Service directly from StsServerIdentity

[ugomonte]

Hi damienbod, first of all thank you for sharing this updated solution to the latest identityserver releases. I personally enjoyed it.

I have a problem and am asking you for a suggestion if possible.

I would like to be able to update the data managed by the odata service directly from the StsServerIdentity server.

Is it correct to add services.AddAuthentication in the StsServerIdentity setup similar to the service present in the web client?

Thanks for the directions.
Ugo

[damienbod]

Hi @ugomonte

Just saw this now :( Did you get it working? Do you want to use odata with your STS?

Greetings Damien

[ugomonte]

Hi thank you very much, Yes I confirm I need to access data via odata api in my STS.
My STS manages the registration of a new user and to do so it uses an administrator user. To be able to get the token (of the administrator user) to insert in the http odata header at the moment I have inserted the following code in my STS:

IN SETUP:
services.AddAuthentication(options =>
{
options.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
options.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme;

        })
        .AddCookie(options => { })
        .AddOpenIdConnect(options =>
        {
            options.SignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
            options.Authority = _configuration["serviceISUri"];   //my STS Uri
            options.RequireHttpsMetadata = true;

            options.ClientId = "mvc";
            options.ClientSecret = "secret";

            options.ResponseType = "code id_token";

            options.Scope.Add("ScopeAsportiamoApi");
            options.Scope.Add("profile");

            options.SaveTokens = true;
        })

CLASS to acquire the Token:
public async Task Get_Generic()
{
var client = new HttpClient();

        var disco = await client.GetDiscoveryDocumentAsync(_configuration["serviceISUri"]).ConfigureAwait(false);
        if (disco.IsError) throw new Exception(disco.Error);

        var tokenEndpoint = disco.TokenEndpoint;
        var keys = disco.KeySet.Keys;

        var response = await client.RequestPasswordTokenAsync(new PasswordTokenRequest
        {
            Address = disco.TokenEndpoint,
            ClientId = "ro.client",
            ClientSecret = "secret",

            UserName = "useradmin@test.com",
            Password = "mypasswordsample",
            Scope = "ScopeAsportiamoApi"
        }).ConfigureAwait(false);

        if (response.IsError)
        {
            ErrorMessage = "Errore - Acquisizione token Asportiamo.";
            _logger.LogError(ErrorMessage);
            return null;
        }
        return response.AccessToken;
    }

Thanks in advance. Bye.