AuthenticationTokenExtensions should have an UpdateToken

[brockallen]

Some API where we can update just one token (e.g. a refresh token or an access token) and the rest of what's in there is preserved.

This is what a client app must do now (which is requires too much internal knowledge): https://github.com/IdentityServer/IdentityServer4.Samples/blob/dev/Clients/src/MvcHybrid/Controllers/HomeController.cs#L46

[HaoK]

Something like this is what you are asking for? You probably are still left with doing your own copy into a subsequent properties/sign in to send down new tokens.

 public static Task UpdateTokenValueAsync(this AuthenticationProperties properties, string name, string newValue) {
   var tokens = await HttpContext.Authentication.GetTokensAsync().Where(t => t.Name == name);
   foreach (var tok in tokens) tok.Value = newValue;
 }

[brockallen]

Well, given that there's some logic to the access token expiration, I'd almost prefer slightly higher order APIs -- one for access token with optional expiration param, one for RT. All of course could be built on the above more general API.

[brockallen]

Thanks

-Brock

On Aug 1, 2016, at 6:14 PM, Hao Kung notifications@github.com wrote:

Closed #916 via #931.

—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub, or mute the thread.