oauth-2.0servicestackowinowin-security

OWIN OAuth2 Resource Server authentication using ServiceStack

I have created an OAuth 2.0 authorization service using OWIN OAuth 2.0 Authorization Server by following the steps at http://www.asp.net/aspnet/overview/owin-and-katana/owin-oauth-20-authorization-server

I am using the Resource Owner Credentials flow.

My client is an MVC app. I am able to get the access token, etc. from the OWIN Auth server.

However, the resource server is built using ServiceStack and now I am not sure how to authenticate the resource services using the OWIN Auth.

Edit I am using DotNetOpenAuth library in the resource server. However, it requires me to specify the certificate details for signing and encryption. However, I have not specified any certificates in the OWIN auth service. So I am not sure, what I need to do to have DotNetOpenAuth library not require certificates for decoding the access token.

Solution

  • To make this work, you need to get the certificate keys in base 64 format and put it in the config file.

    (Though, I opted to go with DotNetOpenAuth solution rather than OWIN)