Thanks. let me look around more.
At least now I can rule out openiddict and go in the right direction lol
I'm doing unsupported things...like using razor pages as my endpoints. I don't expect much support on it, but would you know why
return SignIn(principal, OpenIddictServerAspNetCoreDefaults.AuthenticationScheme); is returning the sign-in page html instead of a token or redirect to the token endpoint?
Now, why it does that, no idea.
Hmm...I wonder if it's the 'authorize' attribute. Lemme check.
Definitely that attribute. Sweet now a new problem that's probably also razor pages related lol
Lesson learned: Don't put [Authorize] on your token endpoint, and ensure you're not using antiforgery verification tokens on it either lol
OpenIddict handles device requests for you, but you’ll need to handle verification and token requests by providing custom actions.
Don’t hesitate to take a look at the MVC server sample.
it's a totally confusing string lol
Only thing I can't seem to find: On https://www.oauth.com/oauth2-servers/device-flow/token-request/ it says there's a polling interval. Where is that sent to me so I know when to poll next or how often?
Oh, i see. The spec says wait 5 seconds if none is provided.
Got it. I assume it's provided in the token endpoint response then
Before each new request,
the client MUST wait at least the number of seconds specified by
the "interval" parameter of the device authorization response (see
Section 3.2), or 5 seconds if none was provided, and respect any
increase in the polling interval required by the "slow_down"
error.
the client MUST wait at least the number of seconds specified by
the "interval" parameter of the device authorization response (see
Section 3.2), or 5 seconds if none was provided, and respect any
increase in the polling interval required by the "slow_down"
error.
does openiddict generate the interval or is that something I'd have to mod in to my app?
not that I need it, just curious
lol
@PinpointTownes https://gitlab.com/damccull/openiddict-razorpages/ here is the working example I have now using razorpages as endpoints. Why? Because it was easier than figuring out how to put MVC in there with razor pages. Plus I think it's cleaner if the rest of the site will be razorpages anyways :D
it was fast like 10 seconds ago
Also I left out the 'logout' page UI entirely by oops. So I'll fix that and reupload it too :D