HamidMosalla

public static IEnumerable<Client> GetClients()
{
    return new List<Client>
    {
        new Client
        {
            ClientId = "mvc",
            ClientName = "MVC Client",
            AllowedGrantTypes = GrantTypes.HybridAndClientCredentials,

HamidMosalla

public static IEnumerable<IdentityResource> GetIdentityResources()
{
    return new List<IdentityResource>
    {
        new IdentityResources.OpenId(),
        new IdentityResources.Profile(),
    };
}

HamidMosalla

public static IEnumerable<ApiResource> GetApiResources()
{
    return new List<ApiResource>
    {
        new ApiResource("Api1", "Protected Api")
    };
}

HamidMosalla

public void ConfigureServices(IServiceCollection services)
{
    services.AddMvc();

    JwtSecurityTokenHandler.DefaultInboundClaimTypeMap.Clear();

    services.AddAuthentication(options =>
        {
            options.DefaultScheme = "Cookies";
            options.DefaultChallengeScheme = "oidc";

HamidMosalla

[Authorize("Founder")]
public IActionResult Secure()
{
    ViewData["Message"] = "Secure page.";

    return View();
}

HamidMosalla

[Produces("application/json")]
public class IdentityController : Controller
{
    [HttpGet]
    [Authorize("Founder")]
    [Route("api/resource-with-policy")]
    public IActionResult ResourceWithPolicy()
    {
        return new JsonResult(new { ApiName = "Api1", AuthorizationType = "With Policy" });
    }

HamidMosalla

public void ConfigureServices(IServiceCollection services)
{
    services.AddMvcCore()
        .AddAuthorization(options => options.AddPolicy("Founder", policy => policy.RequireClaim("Employee", "Mosalla")))
        .AddJsonFormatters();

    services.AddAuthentication("Bearer")
        .AddIdentityServerAuthentication(options =>
        {
            options.Authority = "http://localhost:5000";

HamidMosalla

public static async Task<string> RequestWithResourceOwnerPasswordWithPolicy()
{
    async Task<string> GetAccessToken()
    {
        var discoveryResponse = await DiscoveryClient.GetAsync("http://localhost:5000");
        // request token
        var tokenClient = new TokenClient(discoveryResponse.TokenEndpoint, "ro.client1", "123654");
        var accessToken = await tokenClient.RequestResourceOwnerPasswordAsync("mosalla", "password", "Api1");

        if (accessToken.IsError)

HamidMosalla

 public static async Task<string> RequestWithClientCredentialsWithPolicy()
{
    async Task<string> GetAccessToken()
    {
        var openIdConnectEndPoint = await DiscoveryClient.GetAsync("http://localhost:5000");
        var tokenClient = new TokenClient(openIdConnectEndPoint.TokenEndpoint, "client1", "123654");
        var accessToken = await tokenClient.RequestClientCredentialsAsync("Api1");

        if (accessToken.IsError)
        {

HamidMosalla

public class ProfileService : IProfileService
{
    public Task GetProfileDataAsync(ProfileDataRequestContext context)
    {
        context.IssuedClaims.AddRange(context.Subject.Claims);

        return Task.FromResult(0);
    }

    public Task IsActiveAsync(IsActiveContext context)