angularjs - Web Api OAuth authentication with validating a user -
i have mvc 5 + web api 2 + angular application. have managed implement oauth authentication using identity framework. when user submits log on form posting /token proper request , getting bearer token , good.
my problem want insert step during authentication process. authentication process calls token endpoint calls through identity framework, , calls data class retrieve user database , compares password. if checks out returns 200 client bearer token.
what want insert step performs additional check see if user has confirmed email address , not disabled , if either of checks fail want return 400.
i decompiled code usermanager class , iidentityvalidator executed on create or update. thought overriding find methods doesn't seem right me check should happen during log on.
the constraints imposed katana oauth2 implementation resource owner password flow imposed follow rfc oauth2. if want give user feedback on account or ui workflow, should consider oauth2 implicit flow.
Comments
Post a Comment