authentication - c# webapi refresh_token don't delete when authenticating -


i have been following article, explaining how add token authentication application. have 3rd party wishes connect me , have set refresh tokens, etc. problem is, when authenticate token have given them, new refresh_token generated.

i know design, wish turn off.

currently, recieve method looks this:

public async task receiveasync(authenticationtokenreceivecontext context) {      // our allowed origin     var allowedorigin = context.owincontext.get<string>("as:clientallowedorigin");      // add our allowed origin our headers     context.owincontext.response.headers.add("access-control-allow-origin", new[] { allowedorigin });      // our hashed token     var hashedtokenid = _helper.encrypt(context.token);      // our refresh token     var refreshtoken = await _service.getasync(hashedtokenid);      // if have refresh token     if (refreshtoken != null)     {          // ticket         context.deserializeticket(refreshtoken.protectedticket);          // remove ticket         await deleteasync(hashedtokenid);          // save our changes         await _service.savechangesasync();     } }

the order of execution seems be

validateclientauthentication > receiveasync > grantrefreshtoken > createasync

i seem have no control on execution path. so, change code refresh token not created when using grant_type: refresh_token. know how can , also, affect security?


Comments

Post a Comment

Popular posts from this blog

ubuntu - PHP script to find files of certain extensions in a directory, returns populated array when run in browser, but empty array when run from terminal -

i running os ububtu 16.04. ultimate goal able run php script cron job every minute. here php script located @ /var/www/html/tests/test/index.php : <?php $directorypath = $_server['document_root']."/tests/test/data/"; echo "directorypath: $directorypath<br><br>";//check $imagefilepathsarray = glob($directorypath . "*.{png,gif}", glob_brace); echo "<br><br>imagefilepathsarray: "; print_r($imagefilepathsarray);//check ?> when open php script in browser visiting url my-ip-address/tests/test/index.php , get: directorypath: /var/www/html/tests/test/data/ imagefilepathsarray:array( [0] => /var/www/html/tests/test/data/pic.png [1] => /var/www/html/tests/test/data/pic.gif ) before writing cron job in crontab file, need check if can run anywhere using terminal . opened ubuntu terminal @ /home/ location, , executed in terminal: sudo php /var/www/html/tests/test/index.php i got following out...
Read more

php - How can i create a user dashboard -

today have questions you, want create user dashboard site, include (obviously), users data, example -email -username -and others stuff how can information, , print them in html page? if can, how can these information via php sessions? shuld use session? example, if user login, , start new session ( session_start() ), how can data print in dashboard? should use php "project"? in advice, have day , thank time!
Read more

javascript - How to detect toggling of the fullscreen-toolbar in jQuery Mobile? -

i have jquery mobile page fixed full-screen toolbar, data-tap-toggle enabled. straight under toolbar have positioned banner should slide upwards when toolbar hiding , slide downward when toolbar showing. jquery mobile toggles toolbar applying , removing ui-fixed-hidden class - sadly, can't find in documentation of toolbar widget toggle , hide or show event that. how can detect when toolbar toggled, reposition banner? .banner { position: fixed; background-color: darkseagreen; top: 46px; min-height: 48px; width: 100%; text-align: center; line-height: 48px; } <!doctype html> <html> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no"> <link rel="stylesheet" href="https://code.jquery.com/mobile/1.4.5/jquery.mobile-1.4.5.css"> <script src="https://code.jquery.com/jquery-1....
Read more