Question

I made a Security Token Service that connects to my identity store and returns an OAuth2 token with claims if valid. I’m using the Thinktecture.IdentityServer for this. Now I can pass the token to my API, but how do I use this token in my web services to make sure that it returns data that is filtered on the basis of the appropriate claims in the token?

I think some samples might exist here: https://github.com/thinktecture/Thinktecture.IdentityModel.45/tree/master/Samples/Web%20API but I’m not certain I understand what is happening here. Can someone please write a GET that parses identity claims from the jwt token and returns a set of the claims?

Answer 1

I think the answer can be found here, but these integration tests were much more helpful.