Updated api to use bear token security

Controllers/EmployeeController.cs

@@ -3,10 +3,14 @@
 using System.Linq;
 using CoreApi.Models;
 using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Authorization;
+using IdentityServer4.AccessTokenValidation;
 
 namespace CoreApi.Controllers {
     [Route ("api/employee")]
     [ApiController]
+
+    [Authorize (AuthenticationSchemes = IdentityServerAuthenticationDefaults.AuthenticationScheme)]
     public class EmployeeController : Controller {
         private readonly CoreApiContext _context;
 

Controllers/IdentityController.cs

@@ -0,0 +1,17 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Authorization;
+using IdentityServer4.AccessTokenValidation;
+
+[Route ("api/identity")]
+[ApiController]
+
+[Authorize (AuthenticationSchemes = IdentityServerAuthenticationDefaults.AuthenticationScheme)]
+public class IdentityController : ControllerBase {
+    [HttpGet]
+    public IActionResult Get () {
+        return new JsonResult (User.Claims.Select (c => new { c.Type, c.Value }));
+    }
+}

Program.cs

@@ -20,6 +20,7 @@ public static void Main(string[] args)
         public static IWebHost BuildWebHost(string[] args) =>
             WebHost.CreateDefaultBuilder(args)
                 .UseStartup<Startup>()
+                .UseUrls("http://localhost:5002/")
                 .Build();
     }
 }

Startup.cs

@@ -24,7 +24,14 @@ public Startup (IConfiguration configuration) {
         public void ConfigureServices (IServiceCollection services) {
 
             services.AddDbContext<CoreApiContext> (opt => opt.UseInMemoryDatabase ("Employee"));
-            services.AddMvc ();
+            services.AddMvcCore().AddApiExplorer().AddAuthorization().AddJsonFormatters();
+
+            services.AddAuthentication("Bearer")
+            .AddIdentityServerAuthentication(options => {
+                options.Authority = "http://localhost:5000";
+                options.RequireHttpsMetadata = false;
+                options.ApiName = "api1";
+            });
 
             // Register the Swagger generator, defining one or more Swagger documents
             services.AddSwaggerGen (c => {
@@ -46,6 +53,7 @@ public void Configure (IApplicationBuilder app, IHostingEnvironment env) {
                 c.SwaggerEndpoint ("/swagger/v1/swagger.json", "My API V1");
             });
 
+            app.UseAuthentication();
             app.UseMvc ();
         }
     }

core-api.csproj

@@ -1,19 +1,20 @@
-<Project Sdk="Microsoft.NET.Sdk.Web">
-
-  <PropertyGroup>
-   <TargetFramework>netcoreapp2.1</TargetFramework>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <Folder Include="wwwroot\" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.App" Version="2.1.0-preview2-final" />
-    <PackageReference Include="Microsoft.EntityFrameworkCore" Version="2.1.0-preview2-final" />
-    <PackageReference Include="Microsoft.VisualStudio.Web.CodeGeneration.Design" Version="2.1.0-preview2-final" />
-    <PackageReference Include="Swashbuckle.AspNetCore" Version="2.4.0" />
-  </ItemGroup>
-
-
-</Project>
+<Project Sdk="Microsoft.NET.Sdk.Web">
+
+  <PropertyGroup>
+   <TargetFramework>netcoreapp2.1</TargetFramework>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <Folder Include="wwwroot\" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="IdentityServer4.AccessTokenValidation" Version="2.6.0" />
+    <PackageReference Include="Microsoft.AspNetCore.App" Version="2.1.0-preview2-final" />
+    <PackageReference Include="Microsoft.EntityFrameworkCore" Version="2.1.0-preview2-final" />
+    <PackageReference Include="Microsoft.VisualStudio.Web.CodeGeneration.Design" Version="2.1.0-preview2-final" />
+    <PackageReference Include="Swashbuckle.AspNetCore" Version="2.4.0" />
+  </ItemGroup>
+
+
+</Project>