Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.
Awesome Lists | Featured Topics | Projects
https://github.com/skoruba/duende.identityserver.admin

The administration for the Duende IdentityServer and Asp.Net Core Identity ⚡
https://github.com/skoruba/duende.identityserver.admin
admin adminui duende duende-identityserver duende-identityserver-admin identityserver identityserver-admin ui
Last synced: 3 days ago
JSON representation
The administration for the Duende IdentityServer and Asp.Net Core Identity ⚡
Host: GitHub
URL: https://github.com/skoruba/duende.identityserver.admin
Owner: skoruba
License: apache-2.0
Created: 2020-12-23T21:05:22.000Z (almost 4 years ago)
Default Branch: main
Last Pushed: 2024-10-24T10:42:05.000Z (about 2 months ago)
Last Synced: 2024-12-12T07:01:18.665Z (10 days ago)
Topics: admin, adminui, duende, duende-identityserver, duende-identityserver-admin, identityserver, identityserver-admin, ui
Language: C#
Homepage:
Size: 11 MB
Stars: 589
Watchers: 24
Forks: 200
Open Issues: 104
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE
Awesome Lists containing this project

README

        ![Logo](docs/Images/Skoruba.Duende.IdentityServer.Admin-Logo-ReadMe.png)

# Skoruba.Duende.IdentityServer.Admin ⚡

> The administration for the Duende IdentityServer and Asp.Net Core Identity

## Project Status

[![Build status](https://ci.appveyor.com/api/projects/status/563ug5gcxk904m6g/branch/main?svg=true)](https://ci.appveyor.com/project/JanSkoruba/duende-identityserver-admin/branch/main)

[![Build status](https://img.shields.io/badge/Discord-Skoruba-%235865F2)](https://discord.gg/qTqQCSKWkX)

The application is written in the **Asp.Net Core MVC - using .NET 8.0**

## Requirements

- [Install](https://www.microsoft.com/net/download/windows#/current) the latest .NET 8 SDK (using older versions may lead to 502.5 errors when hosted on IIS or application exiting immediately after starting when self-hosted)

## Installation via dotnet new template

- Install the dotnet new template:

- 🔒 **NOTE:** The project uses the default database migrations which affect your database, therefore double check the migrations according to your database provider and create a database backup

```sh

dotnet new install Skoruba.Duende.IdentityServer.Admin.Templates::2.5.0

```

### Create new project:

```sh

dotnet new skoruba.duende.isadmin --name MyProject --title MyProject --adminemail "[email protected]" --adminpassword "Pa$$word123" --adminrole MyRole --adminclientid MyClientId --adminclientsecret MyClientSecret --dockersupport true

```

Project template options:

```

--name: [string value] for project name

--adminpassword: [string value] admin password

--adminemail: [string value] admin email

--title: [string value] for title and footer of the administration in UI

--adminrole: [string value] for name of admin role, that is used to authorize the administration

--adminclientid: [string value] for client name, that is used in the Duende IdentityServer configuration for admin client

--adminclientsecret: [string value] for client secret, that is used in the Duende IdentityServer configuration for admin client

--dockersupport: [boolean value] include docker support

```

## How to configure the Administration - Duende IdentityServer and Asp.Net Core Identity

- [Follow these steps for setup project to use existing Duende IdentityServer and Asp.Net Core Identity](docs/Configure-Administration.md)

### Template uses following list of nuget packages

- [Available nuget packages](https://www.nuget.org/profiles/skoruba)

### Running in Visual Studio

- Set Startup projects:

  - Skoruba.Duende.IdentityServer.Admin

  - Skoruba.Duende.IdentityServer.Admin.Api

  - Skoruba.Duende.IdentityServer.STS.Identity

## Configuration of Administration for Deployment

- [Configuration of Admin for deploy on Azure](docs/Configure-Azure-Deploy.md)

- [Configuration of Admin on Ubuntu with PostgreSQL database](docs/Configure-Ubuntu-PostgreSQL-Tutorial.md)

## Administration UI preview

- This administration uses bootstrap 4

### Admin UI - Light mode 🌞

![Admin-preview](docs/Images/App/Skoruba-Home-Preview.PNG)

### Admin UI - Dark mode 🌙

![Admin-preview](docs/Images/App/Skoruba-Home-Preview-Dark.PNG)

### Security token service (STS)

![Admin-preview](docs/Images/App/Skoruba-STS-Home-Preview.PNG)

### Forms:

![Admin-preview-form](docs/Images/App/Skoruba-Forms-Preview.PNG)

## Cloning

```sh

git clone https://github.com/skoruba/Duende.IdentityServer.Admin

```

## Running via Docker

- It is possible to run Admin UI through the docker.

### Docker setup

### DNS

We need some resolving capabilities in order for the project to work. The domain `skoruba.local` is used here to represent the domain this setup is hosted on. The domain-name needs to be FQDN (fully qualified domain name).

Thus first, we need the domain `skoruba.local` to resolve to the docker-host machine. If you want this to work on your local machine only, use the first option.

#### DNS on docker-host machine only

Edit your hosts file:

- On Linux: `\etc\hosts`

- On Windows: `C:\Windows\system32\drivers\etc\hosts`

and add the following entries:

```custom

127.0.0.1 skoruba.local sts.skoruba.local admin.skoruba.local admin-api.skoruba.local

```

This way your host machine resolves `skoruba.local` and its subdomains to itself.

### Certificates

We also need certificates in order to serve on HTTPS. We'll make our own self-signed certificates with [mkcert](https://github.com/FiloSottile/mkcert).

> If the domain is publicly available through DNS, you can use [Let's Encypt](https://letsencrypt.org/). Nginx-proxy has support for that, which is left out in this setup.

#### MkCert

##### Create the root certificate

Use [mkcert](https://github.com/FiloSottile/mkcert) to generate local self-signed certificates.

On windows `mkcert -install` must be executed under elevated Administrator privileges. Then copy over the CA Root certificate over to the project as we want to mount this in later into the containers without using an environment variable. Use PowerShell to run the commands.

```bash

cd shared/nginx/certs

mkcert --install

copy $env:LOCALAPPDATA\mkcert\rootCA-key.pem ./cacerts.pem

copy $env:LOCALAPPDATA\mkcert\rootCA.pem ./cacerts.crt

```

##### Create the `skoruba.local` certificates

Generate a certificate for `skoruba.local` with wildcards for the subdomains. The name of the certificate files need to match with actual domain-names in order for the nginx-proxy to pick them up correctly. We want both the crt-key and the pfx version.

```bash

cd shared/nginx/certs

mkcert -cert-file skoruba.local.crt -key-file skoruba.local.key skoruba.local *.skoruba.local

mkcert -pkcs12 skoruba.local.pfx skoruba.local *.skoruba.local

```

##### This docker setup is come from this [repository](https://github.com/bravecobra/identityserver-ui) - thanks to [bravecobra](https://github.com/bravecobra). 😊

### Run docker-compose

- Project contains the `docker-compose.vs.debug.yml` and `docker-compose.override.yml` to enable debugging with a seeded environment.

- The following possibility to get a running seeded and debug-able (in VS) environment:

```

docker-compose build

docker-compose up -d

```

> It is also possible to set as startup project the project called `docker-compose` in Visual Studio.

### Docker images

- Docker images will be available also in [docker hub](https://hub.docker.com/u/skoruba)

### Publish Docker images to Docker hub

- Check the script in `build/publish-docker-images.ps1` - change the profile name according to your requirements.

## Installation of the Client Libraries

```sh

cd src/Skoruba.Duende.IdentityServer.Admin

npm install

cd src/Skoruba.Duende.IdentityServer.STS.Identity

npm install

```

## Bundling and Minification

The following Gulp commands are available:

- `gulp fonts` - copy fonts to the `dist` folder

- `gulp styles` - minify CSS, compile SASS to CSS

- `gulp scripts` - bundle and minify JS

- `gulp clean` - remove the `dist` folder

- `gulp build` - run the `styles` and `scripts` tasks

- `gulp watch` - watch all changes in all sass files

## EF Core & Data Access

- The solution uses these `DbContexts`:

  - `AdminIdentityDbContext`: for Asp.Net Core Identity

  - `AdminLogDbContext`: for logging

  - `IdentityServerConfigurationDbContext`: for IdentityServer configuration store

  - `IdentityServerPersistedGrantDbContext`: for IdentityServer operational store

  - `AuditLoggingDbContext`: for Audit Logging

  - `IdentityServerDataProtectionDbContext`: for dataprotection

### Run entity framework migrations:

> NOTE: Initial migrations are a part of the repository.

- It is possible to use powershell script in folder `build/add-migrations.ps1`.

- This script take two arguments:

  - --migration (migration name)

  - --migrationProviderName (provider type - available choices: All, SqlServer, MySql, PostgreSQL)

- For example:

  `.\add-migrations.ps1 -migration DbInit -migrationProviderName SqlServer`

### Available database providers:

- SqlServer

- MySql

- PostgreSQL

> It is possible to switch the database provider via `appsettings.json`:

```

"DatabaseProviderConfiguration": {

        "ProviderType": "SqlServer"

    }

```

### Connection strings samples for available db providers:

**PostgreSQL**:

> Server=localhost;Port=5432;Database=DuendeIdentityServerAdmin;User Id=sa;Password=#;

**MySql:**

> server=localhost;database=DuendeIdentityServerAdmin;user=root;password=#

### We suggest to use seed data:

- In `Program.cs` -> `Main`, uncomment `DbMigrationHelpers.EnsureSeedData(host)` or use dotnet CLI `dotnet run /seed` or via `SeedConfiguration` in `appsettings.json`

- The `Clients` and `Resources` files in `identityserverdata.json` (section called: IdentityServerData) - are the initial data, based on a sample from Duende IdentityServer

- The `Users` file in `identitydata.json` (section called: IdentityData) contains the default admin username and password for the first login

## Authentication and Authorization

- Change the specific URLs and names for the IdentityServer and Authentication settings in `appsettings.json`

- In the controllers is used the policy which name is stored in - `AuthorizationConsts.AdministrationPolicy`. In the policy - `AuthorizationConsts.AdministrationPolicy` is defined required role stored in - `appsettings.json` - `AdministrationRole`.

- With the default configuration, it is necessary to configure and run instance of Duende IdentityServer. It is possible to use initial migration for creating the client as it mentioned above

## Azure Key Vault

- It is possible to use Azure Key Vault and configure it in the `appsettings.json` with following configuration:

```

"AzureKeyVaultConfiguration": {

    "AzureKeyVaultEndpoint": "",

    "ClientId": "",

    "ClientSecret": "",

    "UseClientCredentials": true

  }

```

If your application is running in `Azure App Service`, you can specify `AzureKeyVaultEndpoint`. For applications which are running outside of Azure environment it is possible to use the client credentials flow - so it is necesarry to go to Azure portal, register new application and connect this application to Azure Key Vault and setup the client secret.

- It is possible to use Azure Key Vault for following parts of application:

### Application Secrets and Database Connection Strings:

- It is necesarry to configure the connection to Azure Key Vault and allow following settings:

```

"AzureKeyVaultConfiguration": {

    "ReadConfigurationFromKeyVault": true

  }

```

### Dataprotection:

Enable Azure Key Vault for dataprotection with following configuration:

```

"DataProtectionConfiguration": {

    "ProtectKeysWithAzureKeyVault": false

  }

```

The you need specify the key identifier in configuration:

```

"AzureKeyVaultConfiguration": {

    "DataProtectionKeyIdentifier": ""

  }

```

### IdentityServer certificate for signing tokens:

- It is possible to go to Azure Key Vault - generate new certificate and use this certificate name below:

```

"AzureKeyVaultConfiguration": {

    "IdentityServerCertificateName": ""

  }

```

## Logging

- We are using `Serilog` with pre-definded following Sinks - white are available in `serilog.json`:

  - Console

  - File

  - MSSqlServer

  - Seq

```json

{

  "Serilog": {

    "MinimumLevel": {

      "Default": "Error",

      "Override": {

        "Skoruba": "Information"

      }

    },

    "WriteTo": [

      {

        "Name": "Console"

      },

      {

        "Name": "File",

        "Args": {

          "path": "log.txt",

          "rollingInterval": "Day"

        }

      },

      {

        "Name": "MSSqlServer",

        "Args": {

          "connectionString": "...",

          "tableName": "Log",

          "columnOptionsSection": {

            "addStandardColumns": ["LogEvent"],

            "removeStandardColumns": ["Properties"]

          }

        }

      }

    ]

  }

}

```

## Audit Logging

- This solution uses audit logging via - https://github.com/skoruba/AuditLogging (check this link for more detal about this implementation :blush:)

- In the Admin UI project is following setup:

```cs

services.AddAuditLogging(options => { options.Source = auditLoggingConfiguration.Source; })

                .AddDefaultHttpEventData(subjectOptions =>

                    {

                        subjectOptions.SubjectIdentifierClaim = auditLoggingConfiguration.SubjectIdentifierClaim;

                        subjectOptions.SubjectNameClaim = auditLoggingConfiguration.SubjectNameClaim;

                    },

                    actionOptions =>

                    {

                        actionOptions.IncludeFormVariables = auditLoggingConfiguration.IncludeFormVariables;

                    })

                .AddAuditSinks>();

            // repository for library

            services.AddTransient, AuditLoggingRepository>();

            // repository and service for admin

            services.AddTransient, AuditLogRepository>();

            services.AddTransient>();

```

### Admin Configuration

Admin and STS can be customized without editing code in `appsettings.json` under AdminConfiguration section

#### Themes

UI can be customized using themes integrated from [bootswatch](https://bootswatch.com).

It's possible to change theme from UI. 🎈

By default, configuration value is null to use default theme. If you want to use a theme, just fill the lowercase theme name as configuration value of `Theme` key.

You can also use your custom theme by integrating it in your project or hosting css on your place to pass the url in `CustomThemeCss` key. (Note that custom theme override standard theme)

- Important Note: Theme can use external ressources which caused errors due to CSP. If you get errors, please make sure that you configured correctly CSP section in your `appsettings.json` with thrusted domains for ressources.

```json

  "AdminConfiguration": {

    "PageTitle": "Skoruba Duende IdentityServer",

    "HomePageLogoUri": "~/images/skoruba-icon.png",

    "FaviconUri": "~/favicon.ico",

    "Theme": "united",

    "CustomThemeCss": null,

    ...

  },

```

### Audit Logging Configuration

In `appsettings.json` is following configuration:

```json

"AuditLoggingConfiguration": {

    "Source": "IdentityServer.Admin.Web",

    "SubjectIdentifierClaim": "sub",

    "SubjectNameClaim": "name",

    "IncludeFormVariables": false

  }

```

The `Skoruba.Duende.IdentityServer.Admin.BusinessLogic` layer contains folder called `Events` for audit logging. In each method in Services is called function `LogEventAsync` like this:

```

await AuditEventLogger.LogEventAsync(new ClientDeletedEvent(client));

```

Final audit log is available in the table `dbo.AuditLog`.

### Login Configuration

- In `Skoruba.Duende.IdentityServer.STS.Identity` - in `appsettings.json` is possible to specify which column will be used for login (`Username` or `Email`):

```

  "LoginConfiguration": {

    "ResolutionPolicy": "Username"

  }

```

or using `Email`:

```

  "LoginConfiguration": {

    "ResolutionPolicy": "Email"

  }

```

### Register Configuration

- In `Skoruba.Duende.IdentityServer.STS.Identity` - in `appsettings.json` is possible to disable user registration (`default: true`):

```

 "RegisterConfiguration": {

    "Enabled": false

  }

```

## How to configure API & Swagger

- For development is running on url - `https://localhost:44302` and swagger UI is available on url - `https://localhost:44302/swagger`

- For swagger UI is configured a client and an API in STS:

```

"AdminApiConfiguration": {

  "IdentityServerBaseUrl": "https://localhost:44310",

  "OidcSwaggerUIClientId": "skoruba_identity_admin_api_swaggerui",

  "OidcApiName": "skoruba_identity_admin_api"

}

```

- Swagger UI contains following endpoints:

![SwaggerUI-preview](docs/Images/Admin-Swagger-UI.PNG)

## How to configure an external provider in STS

- In `Skoruba.Duende.IdentityServer.STS.Identity/Helpers/StartupHelpers.cs` - is method called `AddExternalProviders` which contains the example with `GitHub`, `AzureAD` configured in `appsettings.json`:

```

"ExternalProvidersConfiguration": {

        "UseGitHubProvider": false,

        "GitHubClientId": "",

        "GitHubClientSecret": "",

        "UseAzureAdProvider": false,

        "AzureAdClientId": "",

        "AzureAdTenantId": "",

        "AzureInstance": "",

        "AzureAdSecret": "",

        "AzureAdCallbackPath": "",

        "AzureDomain": ""

}

```

- It is possible to extend `ExternalProvidersConfiguration` with another configuration properties.

- If you use DockerHub built image, you can use appsettings to configure these providers without changing the code

  - GitHub

  - AzureAD

### List of external providers for ASP.NET Core:

- https://github.com/aspnet-contrib/AspNet.Security.OAuth.Providers

- https://docs.microsoft.com/en-us/aspnet/core/security/authentication/social/

### Azure AD

- Great article how to set up Azure AD:

  - https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-v2-aspnet-core-webapp

## Email service

- It is possible to set up emails via:

### SendGrid

In STS project - in `appsettings.json`:

```

"SendgridConfiguration": {

        "ApiKey": "",

        "SourceEmail": "",

        "SourceName": ""

    }

```

### SMTP

```

"SmtpConfiguration": {

        "From": "",

        "Host": "",

        "Login": "",

        "Password": ""

    }

```

## CSP - Content Security Policy

- If you want to use favicon or logo not included/hosted on the same place, you need to declare trusted domain where ressources are hosted in appsettings.json.

```

  "CspTrustedDomains": [

    "google.com",

    "mydomain.com"

  ],

```

## Health checks

- AdminUI, AdminUI Api and STS contain endpoint `health`, which check databases and IdentityServer.

## Localizations - labels, messages

- The project has following translations:

  - English

  - Chinese

  - Russian

  - Persian

  - Swedish

  - Danish

  - Spanish

  - French

  - Finish

  - German

  - Portuguese

#### Feel free to send a PR with your translation. :blush:

- All labels and messages are stored in the resources `.resx` - locatated in `/Resources`

  - Client label descriptions from - http://docs.identityserver.io/en/latest/reference/client.html

  - Api Resource label descriptions from - http://docs.identityserver.io/en/latest/reference/api_resource.html

  - Identity Resource label descriptions from - http://docs.identityserver.io/en/latest/reference/identity_resource.html

## Tests

- The solution contains unit and integration tests.

Integration tests use StartupTest class which is pre-configured with:

- `DbContext` contains setup for InMemory database

- `Authentication` is setup for `CookieAuthentication` - with fake login url for testing purpose only

- `AuthenticatedTestRequestMiddleware` - middleware for testing of authentication.

## Overview

### Solution structure:

- STS:

  - `Skoruba.Duende.IdentityServer.STS.Identity` - project that contains the instance of Duende.IdentityServer and combine these samples - [Quickstart UI for the Duende.IdentityServer with Asp.Net Core Identitye](https://github.com/DuendeSoftware/IdentityServer/tree/main/hosts/AspNetIdentity) and [Quickstart UI for the Duende.IdentityServer with EF Core storage](https://github.com/DuendeSoftware/IdentityServer/tree/main/hosts/EntityFramework) and [damienbod - IdentityServer4 and Identity template](https://github.com/damienbod/IdentityServer4AspNetCoreIdentityTemplate)

- Admin UI Api:

  - `Skoruba.Duende.IdentityServer.Admin.Api` - project with Api for managing data of Duende.IdentityServer and Asp.Net Core Identity, with swagger support as well

- Admin UI:

  - `Skoruba.Duende.IdentityServer.Admin.UI` - ASP.NET Core MVC application that contains Admin UI

  - `Skoruba.Duende.IdentityServer.Admin` - ASP.NET Core MVC application that uses Admin UI package and it's only for application bootstrap

  - `Skoruba.Duende.IdentityServer.Admin.BusinessLogic` - project that contains Dtos, Repositories, Services and Mappers for the Duende.IdentityServer

  - `Skoruba.Duende.IdentityServer.Admin.BusinessLogic.Identity` - project that contains Dtos, Repositories, Services and Mappers for the Asp.Net Core Identity

  - `Skoruba.Duende.IdentityServer.Admin.BusinessLogic.Shared` - project that contains shared Dtos and ExceptionHandling for the Business Logic layer of the Duende.IdentityServer and Asp.Net Core Identity

  - `Skoruba.Duende.IdentityServer.Shared` - Shared common Identity DTOS for Admin UI, Admin UI Api and STS

  - `Skoruba.Duende.IdentityServer.Shared.Configuration` - Shared common layer for Admin UI, Admin UI Api and STS

  - `Skoruba.Duende.IdentityServer.Admin.EntityFramework` - EF Core data layer that contains Entities for the Duende.IdentityServer

  - `Skoruba.Duende.IdentityServer.Admin.EntityFramework.Configuration` - EF Core data layer that contains configurations

  - `Skoruba.Duende.IdentityServer.Admin.EntityFramework.Identity` - EF Core data layer that contains Repositories for the Asp.Net Core Identity

  - `Skoruba.Duende.IdentityServer.Admin.EntityFramework.Extensions` - project that contains extensions related to EntityFramework

  - `Skoruba.Duende.IdentityServer.Admin.EntityFramework.Shared` - project that contains DbContexts for the Duende.IdentityServer, Logging and Asp.Net Core Identity, inluding shared Identity entities

  - `Skoruba.Duende.IdentityServer.Admin.EntityFramework.SqlServer` - project that contains migrations for SqlServer

  - `Skoruba.Duende.IdentityServer.Admin.EntityFramework.MySql` - project that contains migrations for MySql

  - `Skoruba.Duende.IdentityServer.Admin.EntityFramework.PostgreSQL` - project that contains migrations for PostgreSQL

- Tests:

  - `Skoruba.Duende.IdentityServer.Admin.IntegrationTests` - xUnit project that contains the integration tests for AdminUI

  - `Skoruba.Duende.IdentityServer.Admin.Api.IntegrationTests` - xUnit project that contains the integration tests for AdminUI Api

  - `Skoruba.Duende.IdentityServer.Admin.UnitTests` - xUnit project that contains the unit tests for AdminUI

  - `Skoruba.Duende.IdentityServer.STS.IntegrationTests` - xUnit project that contains the integration tests for STS

### The admininistration contains the following sections:

![Skoruba.Duende.IdentityServer.Admin App](docs/Images/Skoruba.Duende.IdentityServer.Admin-Solution.png)

## Duende.IdentityServer

**Clients**

It is possible to define the configuration according the client type - by default the client types are used:

- Empty

- Web Application - Server side - Authorization Code Flow with PKCE

- Single Page Application - Javascript - Authorization Code Flow with PKCE

- Native Application - Mobile/Desktop - Hybrid flow

- Machine/Robot - Client Credentials flow

- TV and Limited-Input Device Application - Device flow

- Actions: Add, Update, Clone, Remove

- Entities:

  - Client Cors Origins

  - Client Grant Types

  - Client IdP Restrictions

  - Client Post Logout Redirect Uris

  - Client Properties

  - Client Redirect Uris

  - Client Scopes

  - Client Secrets

**API Resources**

- Actions: Add, Update, Remove

- Entities:

  - Api Claims

  - Api Scopes

  - Api Scope Claims

  - Api Secrets

  - Api Properties

**Identity Resources**

- Actions: Add, Update, Remove

- Entities:

  - Identity Claims

  - Identity Properties

## Asp.Net Core Identity

**Users**

- Actions: Add, Update, Delete

- Entities:

  - User Roles

  - User Logins

  - User Claims

**Roles**

- Actions: Add, Update, Delete

- Entities:

  - Role Claims

## Application Diagram

![Skoruba.Duende.IdentityServer.Admin Diagram](docs/Images/Skoruba.Duende.IdentityServer.Admin-App-Diagram.png)

## Roadmap & Vision

### 1.0.0:

- [x] Create the Business Logic & EF layers - available as a nuget package

- [x] Create a project template using dotnet CLI - `dotnet new template`

  - [x] First template: The administration of the Duende.IdentityServer and Asp.Net Core Identity

- [x] Add logging into

  - [x] Database

  - [x] File

  - [x] Seq

- [x] Add localization for other languages

  - [x] English

  - [x] Chinese

  - [x] Russian

  - [x] Persian

  - [x] Swedish

  - [x] Danish

  - [x] Spanish

  - [x] French

  - [x] Finish

- [x] Manage profile

- [x] Password reset

- [x] Link account to an external provider (example with Github)

- [x] Two-Factor Authentication (2FA)

- [x] User registration

- [x] Email service

  - [x] SendGrid

- [x] Add API

  - [x] Duende.IdentityServer

  - [x] Asp.Net Core Identity

  - [x] Add swagger support

- [x] Add audit logs to track changes ([#61](https://github.com/skoruba/IdentityServer4.Admin/issues/61))

- [x] Docker support ([#121](https://github.com/skoruba/IdentityServer4.Admin/issues/121))

- [x] Health Checks (Databases and IdentityServer)

- [x] Support for multiple database providers (SqlServer, Mysql, PostgreSQL)

- [x] Simplify Admin Identity middleware ([#430](https://github.com/skoruba/IdentityServer4.Admin/issues/430))

- [x] Add support for loading signing key from Azure Key Vault ([#533](https://github.com/skoruba/IdentityServer4.Admin/issues/533))

- [x] Protect keys for dataprotection from Azure Key Vault ([#715](https://github.com/skoruba/IdentityServer4.Admin/pull/715))

- [x] Update to Duende.IdentityServer version 4 ([#633](https://github.com/skoruba/IdentityServer4.Admin/issues/633))

- [x] Add support for themes ([#725](https://github.com/skoruba/IdentityServer4.Admin/issues/725))

- [x] Extract UI part into nuget package ([#770](https://github.com/skoruba/IdentityServer4.Admin/issues/770), [#409](https://github.com/skoruba/IdentityServer4.Admin/issues/409), [#55](https://github.com/skoruba/IdentityServer4.Admin/issues/55), [#322](https://github.com/skoruba/IdentityServer4.Admin/issues/322), [#28](https://github.com/skoruba/IdentityServer4.Admin/issues/28), [#133](https://github.com/skoruba/IdentityServer4.Admin/issues/133))

### 1.1.0

- [x] Update to .NET 6

- [x] Update to Duende IdentityServer v6

### 1.2.0

- [x] Update to Duende IdentityServer 6.2.1

- [x] Add support for Dynamic Identity Providers

### 2.0.0

- [x] Update to .NET 8 ([#180](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/180))

- [x] Update to IdentityServer v7 ([#181](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/181))

### 2.1.0

- [x] Role users pagination ([#169](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/169))

- [x] Add secure secret generation with 'secret\_' prefix ([#153](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/153))

- [x] Increase client name prominence ([#154](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/154))

- [x] Added support for generation typescript client definition for API endpoints ([#215](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/215))

- [x] Add new endpoints to API for client, api resource, api scopes validations and lists ([#213](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/213))

- [x] Use named arguments in .AddIdentityServer() healthchecks ([#201](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/201))

- [x] Change the AdminIdentityDbContext tablenames to be derived from appsettings ([#196](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/196))

- [x] Raise UserLoginSuccessEvent when logging in with 2fa or recovery code ([#202](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/202))

### 2.2.2

- [x] Create a New Project `Skoruba.Duende.IdentityServer.Admin.UI.Api` to be Shipped as a NuGet Package

- [x] Fix DockerFile for All Projects for Multiplatform Builds `(linux/amd64, linux/arm64)` ([#194](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/194))

- [x] Add a New API Endpoint for Dashboard View

- [x] Fix Import of dayjs for NSwag TypeScript Definition

### 2.3.0

- [x] Fix Dashboard endpoint for getting Identity data

- [x] Update solution to the latest version of all nuget packages, including `Duende.IdentityServer` version `7.0.5`

### 2.4.0

- [x] Method CanInsert..Property of the controllers always return true ([#235](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/235))

- [x] Skoruba.Duende.IdentityServer.Shared.Configuration - replace deprecated Microsoft.Extensions.Configuration.AzureKeyVault package with Azure.Extensions.AspNetCore.Configuration.Secrets ([#234](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/234))

- [x] Can't update client because "Client Id _clientId_ already exists" ([#227](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/227))

- [x] Migrate from Microsoft.Azure.KeyVault to the new Azure Key Vault API ([#224](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/224))

- [x] Docker Compose NGINX targeting wrong port ([#222](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/222))

- [x] Update all nuget packages to the latest versions, including Duende IdentityServer version 7.0.7. (fixed [CVE-2024-39694](https://github.com/advisories/GHSA-ff4q-64jc-gx98)) - ([#236](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/236))

### 2.5.0

- [x] Delete user from admin panel of admin app returns an error ([#214](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/214))

### 3.0.0

- [ ] New UI in React and Typescript ([#182](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/182))

- [ ] Add wizard for client registration ([#18](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/18))

### 3.1.0

- [ ] Add management for claims ([#22](https://github.com/skoruba/Duende.IdentityServer.Admin/issues/22))

### Future:

- Multitenancy support

## Licence

This repository is licensed under the terms of the [**Apache License 2.0**](LICENSE).

### Duende.IdentityServer License 🔑

**Duende.IdentityServer** is available under both a **FOSS (RPL) and a commercial** license.

For the production environment is necessary to get the specific license. For more information about licensing of Duende.IdentityServer - please check [this link](https://duendesoftware.com/products/identityserver#pricing).

This repository uses the source code from https://github.com/DuendeSoftware/IdentityServer.Quickstart.UI which is under the terms of the following

[**license**](https://github.com/DuendeSoftware/IdentityServer.Quickstart.UI/blob/main/LICENSE).

## Acknowledgements

This web application is based on these projects:

- ASP.NET Core

- Duende.IdentityServer.EntityFramework

- ASP.NET Core Identity

- XUnit

- Fluent Assertions

- Bogus

- AutoMapper

- Serilog

Thanks to [Tomáš Hübelbauer](https://github.com/TomasHubelbauer) for the initial code review.

Thanks to [Dominick Baier](https://github.com/leastprivilege) and [Brock Allen](https://github.com/brockallen) - the creators of Duende.IdentityServer.

## Contributors

Thanks goes to these wonderful people ([emoji key](https://github.com/kentcdodds/all-contributors#emoji-key)):

| [
_{Jan Škoruba}](https://github.com/skoruba) 
 💻 💬 📖 💡 🤔 | [
_{Tomáš Hübelbauer}](https://github.com/TomasHubelbauer) 
 💻 👀 📖  🤔 | [
_{Michał Drzał}](https://github.com/xmichaelx) 
💻 👀 📖 💡 🤔 | [
_cerginio](https://github.com/cerginio) 
 💻 🐛 💡 🤔 | [
_{Sven Dummis}](https://github.com/svendu) 
 📖| [
_Seaear](https://github.com/Seaear) 
💻 🌍|

| :---: | :---: | :---: | :---: | :---: | :---: |

|[
_{Rune Antonsen}](https://github.com/ruant) 
🐛|[
_{Sindre Njøsen}](https://github.com/Sindrenj) 
💻|[
_{Alevtina Brown}](https://github.com/alev7ina) 
🌍|[
_Brice](https://github.com/Brice-xCIT) 
💻|[
_{TheEvilPenguin}](https://github.com/TheEvilPenguin) 
💻|[
_{Saeed Rahmani}](https://github.com/saeedrahmo) 
🌍|

|[
_{Andy Yu}](https://github.com/Zyxious) 
🌍|[
_ChrisSzabo](https://github.com/ChrisSzabo) 
💻|[
_aiscrim](https://github.com/aiscrim) 
💻 💡 🤔|[
_HrDahl](https://github.com/HrDahl) 
🌍|[
_{Andrew Godfroy}](https://github.com/killerrin) 
📖|[
_bravecobra](https://github.com/bravecobra) 
💻|

|[
_{Sabit Igde}](https://github.com/sabitertan) 
💻|[
_{Rico Herlt}](https://github.com/rherlt) 
💻|[
_b0](https://github.com/b0) 
💻|[
_{DrQwertySilence}](https://github.com/DrQwertySilence) 
🌍|[
_{Carl Quirion}](https://github.com/nlz242) 
💻|[
_Aegide](https://github.com/Aegide) 
🌍|

|[
_{LobsterBandit}](https://github.com/LobsterBandit) 
💻|[
_{Mehmet Perk}](https://github.com/mperk) 
💻|[
_tapmui](https://github.com/tapmui) 
🌍|[
_{Saeed Rahimi}](https://github.com/saeedrahimi) 
💻|[
_{Joshua Williams}](https://github.com/jwilliamsnephos) 
💻|[
_{Shengjie Yan}](https://github.com/sheng-jie) 
💻

|[
_Anatoliy](https://github.com/UspAN) 
💻|[
_{Nicholas Peterson}](https://github.com/nickelbob) 
💻|[
_{Alec Papierniak}](https://github.com/AlecPapierniak) 
💻|[
_{Carl Reid}](https://github.com/carlreid) 
💻|[
_ViRuSTriNiTy](https://github.com/ViRuSTriNiTy) 
💻|[
_{J. Arturo}](https://github.com/zinkpad) 
💻

|[
_{Weihan Li}](https://github.com/WeihanLi) 
💻|[
_{Saša Tančev}](https://github.com/tancevsasa) 
💻|[
_cuibty](https://github.com/cuibty) 
💻|[
_{Simo Paasisalo}](https://github.com/spaasis) 
💻|[
_klyse](https://github.com/klyse) 
💻|[
_{Martinus Suherman}](https://github.com/martinussuherman) 
💻

|[
_{Pavel Usachev}](https://github.com/pavel-usachev) 
💻|[
_{LabTrans - STIGeo}](https://github.com/labtrans-ufsc) 
🌍|[
_{Valentin LECERF}](https://github.com/ioxFR) 
💻|[
_{Thomas Aunvik}](https://github.com/ThomasAunvik) 
🐛|[
_{Sebastian Gebhardt}](https://github.com/sgebhardt) 
🐛

This project follows the [all-contributors](https://github.com/kentcdodds/all-contributors) specification.

Contributions of any kind are welcome!

## Contact and Suggestion

I am happy to share my attempt of the implementation of the administration for Duende.IdentityServer and ASP.NET Core Identity.

Any feedback is welcome - feel free to create an issue or send me an email - [[email protected]](mailto:[email protected]). Thank you :blush:

## Support and Donation 🕊️

If you like my work, you can support me by donation. 👍

### Paypal

https://www.paypal.me/skoruba

### Patreon

https://www.patreon.com/skoruba