angularidentityserver3thinktecture-ident-serveridentityserver4openid-connect

Identity Server: Getting Token using APIs and avoiding Identity Login


I am using Identity Server 4 and trying to connect users logging from angular app (using Implicit Flow) to allow them to access other apis. I am trying to avoid getting users landed in ID Sever login page.

I need to place the login form in the angular app and communicate with identity server through endpoints (skipping step 2 below)

The is flow of communication now:

  1. User requests to login: I will call the Authorize Endpoint with needed params
  2. Then Identity Server renders the login form and asks for credentials
  3. After credentials validation the user is directed back to angular app

I am trying to communicate with connect\token endpoint directly (passing all required params including username and password) to get a token, however it seems it needs a secret which is not applicable in Implicit Flow case.


Solution

  • I am trying to avoid getting users landed in ID Sever login page.

    By definition the implicit flow contradicts this requirement.