+
\ No newline at end of file
diff --git a/src/IdentityServer.New/Pages/Account/AccessDenied.cshtml.cs b/src/IdentityServer.New/Pages/Account/AccessDenied.cshtml.cs
new file mode 100644
index 00000000..acca4e14
--- /dev/null
+++ b/src/IdentityServer.New/Pages/Account/AccessDenied.cshtml.cs
@@ -0,0 +1,11 @@
+using Microsoft.AspNetCore.Mvc.RazorPages;
+
+namespace IdentityServer.New.Pages.Account
+{
+ public class AccessDeniedModel : PageModel
+ {
+ public void OnGet()
+ {
+ }
+ }
+}
\ No newline at end of file
diff --git a/src/IdentityServer.New/Pages/Account/Create/Index.cshtml b/src/IdentityServer.New/Pages/Account/Create/Index.cshtml
new file mode 100644
index 00000000..51b0ffab
--- /dev/null
+++ b/src/IdentityServer.New/Pages/Account/Create/Index.cshtml
@@ -0,0 +1,40 @@
+@page
+@model IdentityServer.New.Pages.Create.Index
+
+
+
+Access Denied
+You do not have permission to access that resource.
+
+
\ No newline at end of file
diff --git a/src/IdentityServer.New/Pages/Account/Create/Index.cshtml.cs b/src/IdentityServer.New/Pages/Account/Create/Index.cshtml.cs
new file mode 100644
index 00000000..037e4fba
--- /dev/null
+++ b/src/IdentityServer.New/Pages/Account/Create/Index.cshtml.cs
@@ -0,0 +1,121 @@
+using Duende.IdentityServer;
+using Duende.IdentityServer.Events;
+using Duende.IdentityServer.Models;
+using Duende.IdentityServer.Services;
+using Duende.IdentityServer.Stores;
+using Duende.IdentityServer.Test;
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+
+namespace IdentityServer.New.Pages.Create
+{
+ [SecurityHeaders]
+ [AllowAnonymous]
+ public class Index : PageModel
+ {
+ private readonly TestUserStore _users;
+ private readonly IIdentityServerInteractionService _interaction;
+
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ public Index(
+ IIdentityServerInteractionService interaction,
+ TestUserStore users = null)
+ {
+ // this is where you would plug in your own custom identity management library (e.g. ASP.NET Identity)
+ _users = users ?? throw new Exception("Please call 'AddTestUsers(TestUsers.Users)' on the IIdentityServerBuilder in Startup or remove the TestUserStore from the AccountController.");
+
+ _interaction = interaction;
+ }
+
+ public IActionResult OnGet(string returnUrl)
+ {
+ Input = new InputModel { ReturnUrl = returnUrl };
+ return Page();
+ }
+
+ public async Task
+
+
+ Create Account
+
+
+
+
+
+
+
+
@@ -10,7 +11,7 @@
}
- @if (!Model.EnableLocalLogin && !Model.VisibleExternalProviders.Any())
+ @if (!Model.View.EnableLocalLogin && !Model.View.VisibleExternalProviders.Any())
{
OnGet(string logoutId)
+ {
+ LogoutId = logoutId;
+
+ var showLogoutPrompt = LogoutOptions.ShowLogoutPrompt;
+
+ if (User?.Identity.IsAuthenticated != true)
+ {
+ // if the user is not authenticated, then just show logged out page
+ showLogoutPrompt = false;
+ }
+ else
+ {
+ var context = await _interaction.GetLogoutContextAsync(LogoutId);
+ if (context?.ShowSignoutPrompt == false)
+ {
+ // it's safe to automatically sign-out
+ showLogoutPrompt = false;
+ }
+ }
+
+ if (showLogoutPrompt == false)
+ {
+ // if the request for logout was properly authenticated from IdentityServer, then
+ // we don't need to show the prompt and can just log the user out directly.
+ return await OnPost();
+ }
+
+ return Page();
+ }
+
+ public async Task OnPost()
+ {
+ if (User?.Identity.IsAuthenticated == true)
+ {
+ // if there's no current logout context, we need to create one
+ // this captures necessary info from the current logged in user
+ // this can still return null if there is no context needed
+ LogoutId ??= await _interaction.CreateLogoutContextAsync();
+
+ // delete local authentication cookie
+ await HttpContext.SignOutAsync();
+
+ // raise the logout event
+ await _events.RaiseAsync(new UserLogoutSuccessEvent(User.GetSubjectId(), User.GetDisplayName()));
+
+ // see if we need to trigger federated logout
+ var idp = User.FindFirst(JwtClaimTypes.IdentityProvider)?.Value;
+
+ // if it's a local login we can ignore this workflow
+ if (idp != null && idp != Duende.IdentityServer.IdentityServerConstants.LocalIdentityProvider)
+ {
+ // we need to see if the provider supports external logout
+ if (await HttpContext.GetSchemeSupportsSignOutAsync(idp))
+ {
+ // build a return URL so the upstream provider will redirect back
+ // to us after the user has logged out. this allows us to then
+ // complete our single sign-out processing.
+ string url = Url.Page("/Account/Logout/Loggedout", new { logoutId = LogoutId });
+
+ // this triggers a redirect to the external provider for sign-out
+ return SignOut(new AuthenticationProperties { RedirectUri = url }, idp);
+ }
+ }
+ }
+
+ return RedirectToPage("/Account/Logout/LoggedOut", new { logoutId = LogoutId });
+ }
+ }
+}
\ No newline at end of file
diff --git a/src/IdentityServer.New/Pages/Account/Logout/LoggedOut.cshtml b/src/IdentityServer.New/Pages/Account/Logout/LoggedOut.cshtml
new file mode 100644
index 00000000..532e2086
--- /dev/null
+++ b/src/IdentityServer.New/Pages/Account/Logout/LoggedOut.cshtml
@@ -0,0 +1,30 @@
+@page
+@model IdentityServer.New.Pages.Logout.LoggedOut
+
+ Logins { get; set; }
+
+ [BindProperty, Required]
+ public string Id { get; set; }
+ [BindProperty, Required]
+ public string Button { get; set; }
+
+ private readonly IBackchannelAuthenticationInteractionService _backchannelAuthenticationInteraction;
+
+ public AllModel(IBackchannelAuthenticationInteractionService backchannelAuthenticationInteractionService)
+ {
+ _backchannelAuthenticationInteraction = backchannelAuthenticationInteractionService;
+ }
+
+ public async Task OnGet()
+ {
+ Logins = await _backchannelAuthenticationInteraction.GetPendingLoginRequestsForCurrentUserAsync();
+ }
+ }
+}
\ No newline at end of file
diff --git a/src/IdentityServer/Views/Device/UserCodeConfirmation.cshtml b/src/IdentityServer.New/Pages/Ciba/Consent.cshtml
similarity index 59%
rename from src/IdentityServer/Views/Device/UserCodeConfirmation.cshtml
rename to src/IdentityServer.New/Pages/Ciba/Consent.cshtml
index e1d3b196..c4fbe7c0 100644
--- a/src/IdentityServer/Views/Device/UserCodeConfirmation.cshtml
+++ b/src/IdentityServer.New/Pages/Ciba/Consent.cshtml
@@ -1,19 +1,21 @@
-@model DeviceAuthorizationViewModel
+@page
+@model IdentityServer.New.Pages.Ciba.Consent
+@{
+}
-
- @if (Model.EnableLocalLogin)
+ @if (Model.View.EnableLocalLogin)
{
}
- @if (Model.VisibleExternalProviders.Any())
+ @if (Model.View.VisibleExternalProviders.Any())
{
@@ -19,37 +20,39 @@
-
@@ -58,14 +61,13 @@
-
- @foreach (var provider in Model.VisibleExternalProviders)
+ @foreach (var provider in Model.View.VisibleExternalProviders)
{
- + asp-route-returnUrl="@Model.Input.ReturnUrl"> @provider.DisplayName @@ -76,7 +78,7 @@
Invalid login request
diff --git a/src/IdentityServer.New/Pages/Account/Login/Index.cshtml.cs b/src/IdentityServer.New/Pages/Account/Login/Index.cshtml.cs
new file mode 100644
index 00000000..80e58436
--- /dev/null
+++ b/src/IdentityServer.New/Pages/Account/Login/Index.cshtml.cs
@@ -0,0 +1,223 @@
+using Duende.IdentityServer;
+using Duende.IdentityServer.Events;
+using Duende.IdentityServer.Models;
+using Duende.IdentityServer.Services;
+using Duende.IdentityServer.Stores;
+using Duende.IdentityServer.Test;
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+
+namespace IdentityServer.New.Pages.Login
+{
+ [SecurityHeaders]
+ [AllowAnonymous]
+ public class Index : PageModel
+ {
+ private readonly TestUserStore _users;
+ private readonly IIdentityServerInteractionService _interaction;
+ private readonly IEventService _events;
+ private readonly IAuthenticationSchemeProvider _schemeProvider;
+ private readonly IIdentityProviderStore _identityProviderStore;
+
+ public ViewModel View { get; set; }
+
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ public Index(
+ IIdentityServerInteractionService interaction,
+ IAuthenticationSchemeProvider schemeProvider,
+ IIdentityProviderStore identityProviderStore,
+ IEventService events,
+ TestUserStore users = null)
+ {
+ // this is where you would plug in your own custom identity management library (e.g. ASP.NET Identity)
+ _users = users ?? throw new Exception("Please call 'AddTestUsers(TestUsers.Users)' on the IIdentityServerBuilder in Startup or remove the TestUserStore from the AccountController.");
+
+ _interaction = interaction;
+ _schemeProvider = schemeProvider;
+ _identityProviderStore = identityProviderStore;
+ _events = events;
+ }
+
+ public async Task OnGet(string returnUrl)
+ {
+ await BuildModelAsync(returnUrl);
+
+ if (View.IsExternalLoginOnly)
+ {
+ // we only have one option for logging in and it's an external provider
+ return RedirectToPage("/ExternalLogin/Challenge", new { scheme = View.ExternalLoginScheme, returnUrl });
+ }
+
+ return Page();
+ }
+
+ public async Task OnPost()
+ {
+ // check if we are in the context of an authorization request
+ var context = await _interaction.GetAuthorizationContextAsync(Input.ReturnUrl);
+
+ // the user clicked the "cancel" button
+ if (Input.Button != "login")
+ {
+ if (context != null)
+ {
+ // if the user cancels, send a result back into IdentityServer as if they
+ // denied the consent (even if this client does not require consent).
+ // this will send back an access denied OIDC error response to the client.
+ await _interaction.DenyAuthorizationAsync(context, AuthorizationError.AccessDenied);
+
+ // we can trust model.ReturnUrl since GetAuthorizationContextAsync returned non-null
+ if (context.IsNativeClient())
+ {
+ // The client is native, so this change in how to
+ // return the response is for better UX for the end user.
+ return this.LoadingPage(Input.ReturnUrl);
+ }
+
+ return Redirect(Input.ReturnUrl);
+ }
+ else
+ {
+ // since we don't have a valid context, then we just go back to the home page
+ return Redirect("~/");
+ }
+ }
+
+ if (ModelState.IsValid)
+ {
+ // validate username/password against in-memory store
+ if (_users.ValidateCredentials(Input.Username, Input.Password))
+ {
+ var user = _users.FindByUsername(Input.Username);
+ await _events.RaiseAsync(new UserLoginSuccessEvent(user.Username, user.SubjectId, user.Username, clientId: context?.Client.ClientId));
+
+ // only set explicit expiration here if user chooses "remember me".
+ // otherwise we rely upon expiration configured in cookie middleware.
+ AuthenticationProperties props = null;
+ if (LoginOptions.AllowRememberLogin && Input.RememberLogin)
+ {
+ props = new AuthenticationProperties
+ {
+ IsPersistent = true,
+ ExpiresUtc = DateTimeOffset.UtcNow.Add(LoginOptions.RememberMeLoginDuration)
+ };
+ };
+
+ // issue authentication cookie with subject ID and username
+ var isuser = new IdentityServerUser(user.SubjectId)
+ {
+ DisplayName = user.Username
+ };
+
+ await HttpContext.SignInAsync(isuser, props);
+
+ if (context != null)
+ {
+ if (context.IsNativeClient())
+ {
+ // The client is native, so this change in how to
+ // return the response is for better UX for the end user.
+ return this.LoadingPage(Input.ReturnUrl);
+ }
+
+ // we can trust model.ReturnUrl since GetAuthorizationContextAsync returned non-null
+ return Redirect(Input.ReturnUrl);
+ }
+
+ // request for a local page
+ if (Url.IsLocalUrl(Input.ReturnUrl))
+ {
+ return Redirect(Input.ReturnUrl);
+ }
+ else if (string.IsNullOrEmpty(Input.ReturnUrl))
+ {
+ return Redirect("~/");
+ }
+ else
+ {
+ // user might have clicked on a malicious link - should be logged
+ throw new Exception("invalid return URL");
+ }
+ }
+
+ await _events.RaiseAsync(new UserLoginFailureEvent(Input.Username, "invalid credentials", clientId: context?.Client.ClientId));
+ ModelState.AddModelError(string.Empty, LoginOptions.InvalidCredentialsErrorMessage);
+ }
+
+ // something went wrong, show form with error
+ await BuildModelAsync(Input.ReturnUrl);
+ return Page();
+ }
+
+ private async Task BuildModelAsync(string returnUrl)
+ {
+ Input = new InputModel
+ {
+ ReturnUrl = returnUrl
+ };
+
+ var context = await _interaction.GetAuthorizationContextAsync(returnUrl);
+ if (context?.IdP != null && await _schemeProvider.GetSchemeAsync(context.IdP) != null)
+ {
+ var local = context.IdP == Duende.IdentityServer.IdentityServerConstants.LocalIdentityProvider;
+
+ // this is meant to short circuit the UI and only trigger the one external IdP
+ View = new ViewModel
+ {
+ EnableLocalLogin = local,
+ };
+
+ Input.Username = context?.LoginHint;
+
+ if (!local)
+ {
+ View.ExternalProviders = new[] { new ViewModel.ExternalProvider { AuthenticationScheme = context.IdP } };
+ }
+
+ return;
+ }
+
+ var schemes = await _schemeProvider.GetAllSchemesAsync();
+
+ var providers = schemes
+ .Where(x => x.DisplayName != null)
+ .Select(x => new ViewModel.ExternalProvider
+ {
+ DisplayName = x.DisplayName ?? x.Name,
+ AuthenticationScheme = x.Name
+ }).ToList();
+
+ var dyanmicSchemes = (await _identityProviderStore.GetAllSchemeNamesAsync())
+ .Where(x => x.Enabled)
+ .Select(x => new ViewModel.ExternalProvider
+ {
+ AuthenticationScheme = x.Scheme,
+ DisplayName = x.DisplayName
+ });
+ providers.AddRange(dyanmicSchemes);
+
+
+ var allowLocal = true;
+ var client = context?.Client;
+ if (client != null)
+ {
+ allowLocal = client.EnableLocalLogin;
+ if (client.IdentityProviderRestrictions != null && client.IdentityProviderRestrictions.Any())
+ {
+ providers = providers.Where(provider => client.IdentityProviderRestrictions.Contains(provider.AuthenticationScheme)).ToList();
+ }
+ }
+
+ View = new ViewModel
+ {
+ AllowRememberLogin = LoginOptions.AllowRememberLogin,
+ EnableLocalLogin = allowLocal && LoginOptions.AllowLocalLogin,
+ ExternalProviders = providers.ToArray()
+ };
+ }
+ }
+}
\ No newline at end of file
diff --git a/src/IdentityServer/Quickstart/Account/LoginInputModel.cs b/src/IdentityServer.New/Pages/Account/Login/InputModel.cs
similarity index 77%
rename from src/IdentityServer/Quickstart/Account/LoginInputModel.cs
rename to src/IdentityServer.New/Pages/Account/Login/InputModel.cs
index fecc1ed2..25c3cb1c 100644
--- a/src/IdentityServer/Quickstart/Account/LoginInputModel.cs
+++ b/src/IdentityServer.New/Pages/Account/Login/InputModel.cs
@@ -4,15 +4,20 @@
using System.ComponentModel.DataAnnotations;
-namespace IdentityServerHost.Quickstart.UI
+namespace IdentityServer.New.Pages.Login
{
- public class LoginInputModel
+ public class InputModel
{
[Required]
public string Username { get; set; }
+
[Required]
public string Password { get; set; }
+
public bool RememberLogin { get; set; }
+
public string ReturnUrl { get; set; }
+
+ public string Button { get; set; }
}
}
\ No newline at end of file
diff --git a/src/IdentityServer.New/Pages/Account/Login/LoginOptions.cs b/src/IdentityServer.New/Pages/Account/Login/LoginOptions.cs
new file mode 100644
index 00000000..94ca31c1
--- /dev/null
+++ b/src/IdentityServer.New/Pages/Account/Login/LoginOptions.cs
@@ -0,0 +1,10 @@
+namespace IdentityServer.New.Pages.Login
+{
+ public class LoginOptions
+ {
+ public static bool AllowLocalLogin = true;
+ public static bool AllowRememberLogin = true;
+ public static TimeSpan RememberMeLoginDuration = TimeSpan.FromDays(30);
+ public static string InvalidCredentialsErrorMessage = "Invalid username or password";
+ }
+}
\ No newline at end of file
diff --git a/src/IdentityServer.New/Pages/Account/Login/ViewModel.cs b/src/IdentityServer.New/Pages/Account/Login/ViewModel.cs
new file mode 100644
index 00000000..ac96d824
--- /dev/null
+++ b/src/IdentityServer.New/Pages/Account/Login/ViewModel.cs
@@ -0,0 +1,23 @@
+// Copyright (c) Duende Software. All rights reserved.
+// See LICENSE in the project root for license information.
+
+namespace IdentityServer.New.Pages.Login
+{
+ public class ViewModel
+ {
+ public bool AllowRememberLogin { get; set; } = true;
+ public bool EnableLocalLogin { get; set; } = true;
+
+ public IEnumerable ExternalProviders { get; set; } = Enumerable.Empty();
+ public IEnumerable VisibleExternalProviders => ExternalProviders.Where(x => !String.IsNullOrWhiteSpace(x.DisplayName));
+
+ public bool IsExternalLoginOnly => EnableLocalLogin == false && ExternalProviders?.Count() == 1;
+ public string ExternalLoginScheme => IsExternalLoginOnly ? ExternalProviders?.SingleOrDefault()?.AuthenticationScheme : null;
+
+ public class ExternalProvider
+ {
+ public string DisplayName { get; set; }
+ public string AuthenticationScheme { get; set; }
+ }
+ }
+}
\ No newline at end of file
diff --git a/src/IdentityServer/Views/Account/Logout.cshtml b/src/IdentityServer.New/Pages/Account/Logout/Index.cshtml
similarity index 75%
rename from src/IdentityServer/Views/Account/Logout.cshtml
rename to src/IdentityServer.New/Pages/Account/Logout/Index.cshtml
index e709dd3e..914f78d0 100644
--- a/src/IdentityServer/Views/Account/Logout.cshtml
+++ b/src/IdentityServer.New/Pages/Account/Logout/Index.cshtml
@@ -1,4 +1,5 @@
-@model LogoutViewModel
+@page
+@model IdentityServer.New.Pages.Logout.Index
+
\ No newline at end of file
diff --git a/src/IdentityServer.New/Pages/Account/Logout/Index.cshtml.cs b/src/IdentityServer.New/Pages/Account/Logout/Index.cshtml.cs
new file mode 100644
index 00000000..2051c203
--- /dev/null
+++ b/src/IdentityServer.New/Pages/Account/Logout/Index.cshtml.cs
@@ -0,0 +1,97 @@
+using Duende.IdentityServer.Events;
+using Duende.IdentityServer.Extensions;
+using Duende.IdentityServer.Services;
+using IdentityModel;
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+
+namespace IdentityServer.New.Pages.Logout
+{
+ [SecurityHeaders]
+ [AllowAnonymous]
+ public class Index : PageModel
+ {
+ private readonly IIdentityServerInteractionService _interaction;
+ private readonly IEventService _events;
+
+ [BindProperty]
+ public string LogoutId { get; set; }
+
+ public Index(IIdentityServerInteractionService interaction, IEventService events)
+ {
+ _interaction = interaction;
+ _events = events;
+ }
+
+ public async Task
@@ -6,10 +7,11 @@
-
-Would you like to logout of IdentityServer?
+
+
+@section scripts
+{
+ @if (Model.View.AutomaticRedirectAfterSignOut)
+ {
+
+ }
+}
\ No newline at end of file
diff --git a/src/IdentityServer.New/Pages/Account/Logout/LoggedOut.cshtml.cs b/src/IdentityServer.New/Pages/Account/Logout/LoggedOut.cshtml.cs
new file mode 100644
index 00000000..eeaa80a5
--- /dev/null
+++ b/src/IdentityServer.New/Pages/Account/Logout/LoggedOut.cshtml.cs
@@ -0,0 +1,34 @@
+using Duende.IdentityServer.Services;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+
+namespace IdentityServer.New.Pages.Logout
+{
+ [SecurityHeaders]
+ [AllowAnonymous]
+ public class LoggedOut : PageModel
+ {
+ private readonly IIdentityServerInteractionService _interactionService;
+
+ public LoggedOutViewModel View { get; set; }
+
+ public LoggedOut(IIdentityServerInteractionService interactionService)
+ {
+ _interactionService = interactionService;
+ }
+
+ public async Task OnGet(string logoutId)
+ {
+ // get context information (client name, post logout redirect URI and iframe for federated signout)
+ var logout = await _interactionService.GetLogoutContextAsync(logoutId);
+
+ View = new LoggedOutViewModel
+ {
+ AutomaticRedirectAfterSignOut = LogoutOptions.AutomaticRedirectAfterSignOut,
+ PostLogoutRedirectUri = logout?.PostLogoutRedirectUri,
+ ClientName = String.IsNullOrEmpty(logout?.ClientName) ? logout?.ClientId : logout?.ClientName,
+ SignOutIframeUrl = logout?.SignOutIFrameUrl
+ };
+ }
+ }
+}
\ No newline at end of file
diff --git a/src/IdentityServer/Quickstart/Account/LoggedOutViewModel.cs b/src/IdentityServer.New/Pages/Account/Logout/LoggedOutViewModel.cs
similarity index 62%
rename from src/IdentityServer/Quickstart/Account/LoggedOutViewModel.cs
rename to src/IdentityServer.New/Pages/Account/Logout/LoggedOutViewModel.cs
index 8b2a7195..4761ed38 100644
--- a/src/IdentityServer/Quickstart/Account/LoggedOutViewModel.cs
+++ b/src/IdentityServer.New/Pages/Account/Logout/LoggedOutViewModel.cs
@@ -1,19 +1,15 @@
+
// Copyright (c) Duende Software. All rights reserved.
// See LICENSE in the project root for license information.
-namespace IdentityServerHost.Quickstart.UI
+namespace IdentityServer.New.Pages.Logout
{
public class LoggedOutViewModel
{
public string PostLogoutRedirectUri { get; set; }
public string ClientName { get; set; }
public string SignOutIframeUrl { get; set; }
-
public bool AutomaticRedirectAfterSignOut { get; set; }
-
- public string LogoutId { get; set; }
- public bool TriggerExternalSignout => ExternalAuthenticationScheme != null;
- public string ExternalAuthenticationScheme { get; set; }
}
}
\ No newline at end of file
diff --git a/src/IdentityServer.New/Pages/Account/Logout/LogoutOptions.cs b/src/IdentityServer.New/Pages/Account/Logout/LogoutOptions.cs
new file mode 100644
index 00000000..3a690ddb
--- /dev/null
+++ b/src/IdentityServer.New/Pages/Account/Logout/LogoutOptions.cs
@@ -0,0 +1,9 @@
+
+namespace IdentityServer.New.Pages.Logout
+{
+ public class LogoutOptions
+ {
+ public static bool ShowLogoutPrompt = true;
+ public static bool AutomaticRedirectAfterSignOut = false;
+ }
+}
\ No newline at end of file
diff --git a/src/IdentityServer.New/Pages/Ciba/All.cshtml b/src/IdentityServer.New/Pages/Ciba/All.cshtml
new file mode 100644
index 00000000..281393a2
--- /dev/null
+++ b/src/IdentityServer.New/Pages/Ciba/All.cshtml
@@ -0,0 +1,48 @@
+@page
+@model IdentityServer.New.Pages.Ciba.AllModel
+@{
+}
+
++ Logout + You are now logged out +
+ + @if (Model.View.PostLogoutRedirectUri != null) + { +
+ Click here to return to the
+ @Model.View.ClientName application.
+
+ }
+
+ @if (Model.View.SignOutIframeUrl != null)
+ {
+
+ }
+
+
\ No newline at end of file
diff --git a/src/IdentityServer.New/Pages/Ciba/All.cshtml.cs b/src/IdentityServer.New/Pages/Ciba/All.cshtml.cs
new file mode 100644
index 00000000..ed6a92fa
--- /dev/null
+++ b/src/IdentityServer.New/Pages/Ciba/All.cshtml.cs
@@ -0,0 +1,36 @@
+// Copyright (c) Duende Software. All rights reserved.
+// See LICENSE in the project root for license information.
+
+using Duende.IdentityServer.Models;
+using Duende.IdentityServer.Services;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using System.ComponentModel.DataAnnotations;
+
+namespace IdentityServer.New.Pages.Ciba
+{
+ [SecurityHeaders]
+ [Authorize]
+ public class AllModel : PageModel
+ {
+ public IEnumerable
+
+
+
+
+
+
+
+ Pending Backchannel Login Requests
+
+ @if (Model.Logins?.Any() == true)
+ {
+
+
+
+ }
+ else
+ {
+
+ | Id | +Client Id | +Binding Message | ++ |
|---|---|---|---|
| @login.InternalId | +@login.Client.ClientId | +@login.BindingMessage | ++ Process + | +
No Pending Login Requests
+ }
+
+
-
- @if (Model.ClientLogoUrl != null)
+ @if (Model.View.ClientLogoUrl != null)
{
- 
+ 
}
@@ -23,11 +25,11 @@
- @Model.ClientName + @Model.View.ClientName is requesting your permission
- @if (Model.ConfirmUserCode) - { -Please confirm that the authorization request quotes the code: @Model.UserCode.
- } + +Verify that this identifier matches what the client is displaying: @Model.View.BindingMessage
+Uncheck the permissions you do not wish to grant.