This repo is out of date and is archived. Check out an updated tutorial on using FusionAuth with Angular or the updated GitHub repository.

An ASP.NET Core web application using FusionAuth as the identity server. This application will use an OAuth Authorization Code workflow and the PKCE extension to log users in.

PKCE stands for Proof Key for Code Exchange, and is often pronounced "pixie". The feature is enabled by default by the netcore oauth library.

You need to have dotnetcore installed to run this code. Please note that this application uses netcore 5.0.

See the blog post for more details about setting up FusionAuth: Securing an ASP.NET Core Razor Pages app with OAuth. That blog post was written for dotnet3.1, but the FusionAuth setup is identical.

To deploy and run on Windows, assuming you have the dotnetcore 5.0 runtime installed:

• Open up a terminal (these instructions assume a cmd window)
• cd SampleApp
• Update appsettings.json with the FusionAuth application ClientId and the Authority as necessary.
• Export the client secret as an environment variable: set SampleApp__ClientSecret="..."
• Publish the binary: dotnet publish -r win-x64
• Run the application: bin\Debug\netcoreapp5.0\win-x64\publish\SampleApp.exe

Visit the local webserver at http://localhost:5000/ and sign in.

See the blog post for more details about setting up FusionAuth: Securing an ASP.NET Core Razor Pages app with OAuth. Note that the blog post was written with netcore3.1 in mind, but the FusionAuth setup won't differ.

If you are using a mac, use this command brew install dotnet, to setup the development environment.

• Open up a terminal (these instructions assume a cmd window)
• cd SampleApp
• Update appsettings.json with the FusionAuth application ClientId and the Authority as necessary.
• export SampleApp__ClientSecret="..."
• dotnet publish -r osx.10.14-x64
• bin/Debug/netcoreapp5.0/osx.10.14-x64/publish/SampleApp

Visit the local webserver at http://localhost:5000/ and sign in.

You need to add policies to check claims.

https://docs.microsoft.com/en-us/aspnet/core/security/authorization/policies?view=aspnetcore-6.0 has more details about checking policies.

See more deployment options: https://docs.microsoft.com/en-us/dotnet/core/deploying/

We also have a dotnetcore3.1 example application.

You can see additional configuration to retrieve the roles in this forum post