Repository files navigation

OpenIddict aims at providing aversatile solution to implementOpenID Connect client, server and token validation support in .NET applications.

OpenIddict fully supports thecode/implicit/hybrid flows,theclient credentials/resource owner password grants,thedevice authorization flow and thetoken exchange grant.

OpenIddict natively supportsEntity Framework Core,Entity Framework 6 andMongoDBout-of-the-box and custom stores can be implemented to support other providers.

To implement a custom OpenID Connect server using OpenIddict, readGetting started.

Samples demonstrating how to use OpenIddict with the different OAuth 2.0/OpenID Connect flowscan be found in thededicated repository.

Developers looking for a simple and turnkey solution are strongly encouraged to evaluateVolo.OpenIddict.Pro,which is based on OpenIddict, supports all the common OAuth 2.0/OpenID Connect flows and offers a powerful applications/scopes management GUI.

Unlike many other identity providers,OpenIddict is not a turnkey solution but a framework that requires writing custom codeto be operational (typically, at least an authorization controller), making it a poor candidate for the certification program.

While a reference implementation could be submitted as-is,this wouldn't guarantee that implementations deployed by OpenIddict users would be standard-compliant.

Instead,developers are encouraged to execute the conformance tests against their own deployment once they've implemented their own logic.

Looking for additional resources to help you get started with OpenIddict? Don't miss these interesting blog posts:

• OpenIddict 7.0 is out byKévin Chalet
• OpenIddict on AWS Serverless: adding interactive login byAnton Ganhammar
• OpenIddict on AWS Serverless: flexible OAuth 2.0/OIDC provider byAnton Ganhammar
• Transparent authentication gateway byAlex Klaus
• Introducing system integration support for the OpenIddict client byKévin Chalet
• Getting started with the OpenIddict web providers byKévin Chalet
• Introducing the OpenIddict-powered providers byKévin Chalet
• Introducing the OpenIddict client byKévin Chalet
• Secure a Blazor WASM ASP.NET Core hosted app using BFF and OpenIddict byDamien Bowden
• Setting up an Authorization Server with OpenIddict byRobin van der Knaap
• Adding OpenIddict 3.0 to an OWIN application byKévin Chalet
• Creating an OpenID Connect server proxy with OpenIddict 3.0's degraded mode byKévin Chalet

OpenIddict-based projects maintained by third parties:

• ABP Framework OpenIddict module: full-stack Web application framework for .NET
• OpenIddict.AmazonDynamoDB byganhammar: Amazon DynamoDB stores for OpenIddict
• OpenIddict UI byThomas Duft: headless UI for managing client applications and scopes
• OrchardCore OpenID module: turnkey OpenID Connect server and token validation solution, built with multitenancy in mind
• P41.OpenIddict.CouchDB byPanos Athanasiou: CouchDB stores for OpenIddict
• pixel-identity byNishant Singh: Ready to host OpenID Connect service using OpenIddict and ASP.NET Identity with a Blazor-based UI for managing users, roles, applications and scopes with support for multiple databases.
• SharpGrip.OpenIddict.Api bySharpGrip: SharpGrip OpenIddict API is an extension of the OpenIddict library exposing the OpenIddict entities through a RESTful API.

Security issues and bugs should be reported privately by emailingsecurity@openiddict.com.You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your original message.

If you need support, please first make sure you'responsoring the project or are a regular contributor:GitHub tickets opened by users who haven't contributed to the project or don't actively sponsor it will be automatically closed.

Support is only offered for the latest stable version of OpenIddict. There are, however, two exceptions to this policy:

• ABP Framework users receive patches for OpenIddict for as long as ABP Framework itself is supported by Volosoft(typically a year following the release of a major ABP version), whether they have a commercial ABP license or just use the free packages:

• OpenIddict sponsors are offered extended support depending on the selected sponsorship tier:
  • Tier 6 sponsors get full support for the previous version 1 month following the release of a new major version.
  • Tier 7 sponsors get full support for the previous version 6 months following the release of a new major version.
  • Tier 8 sponsors get full support for the previous version 12 months following the release of a new major version.
  • Tier 9 sponsors get full support for the previous version 24 months following the release of a new major version.

If you want to try out the latest features and bug fixes, there is a MyGet feed with nightly builds of OpenIddict.To reference the OpenIddict MyGet feed,create aNuGet.config file (at the root of your solution):

<?xml version="1.0" encoding="utf-8"?><configuration>  <packageSources>    <addkey="nuget"value="https://api.nuget.org/v3/index.json" />    <addkey="openiddict"value="https://www.myget.org/F/openiddict/api/v3/index.json" />  </packageSources></configuration>

OpenIddict is actively maintained byKévin Chalet. Contributions are welcome and can be submitted using pull requests.

Special thanks toour sponsors for their incredible support:

This project is licensed under theApache License. This means that you can use, modify and distribute it freely.Seehttp://www.apache.org/licenses/LICENSE-2.0.html for more details.