{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/3164","repository_url":"https://api.github.com/repos/IdentityServer/IdentityServer3","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/3164/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/3164/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/3164/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/3164","id":173098585,"number":3164,"title":"Cookie for a JWT Using Implicit Flow? ","user":{"login":"acalbazana","id":1592171,"avatar_url":"https://avatars.githubusercontent.com/u/1592171?v=3","gravatar_id":"","url":"https://api.github.com/users/acalbazana","html_url":"https://github.com/acalbazana","followers_url":"https://api.github.com/users/acalbazana/followers","following_url":"https://api.github.com/users/acalbazana/following{/other_user}","gists_url":"https://api.github.com/users/acalbazana/gists{/gist_id}","starred_url":"https://api.github.com/users/acalbazana/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/acalbazana/subscriptions","organizations_url":"https://api.github.com/users/acalbazana/orgs","repos_url":"https://api.github.com/users/acalbazana/repos","events_url":"https://api.github.com/users/acalbazana/events{/privacy}","received_events_url":"https://api.github.com/users/acalbazana/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-08-25T02:07:52Z","updated_at":"2016-08-25T05:42:22Z","closed_at":"2016-08-25T05:42:22Z","body":"Hello,\r\n\r\nI have a situation where I'd like to exchange a cookie (issued from an SSO provider) for a JWT (issued by IdentityServer3) from a browser based (Angular) client.  \r\n\r\nOriginally, I was considering a custom grant type, but this seems to require client credentials which doesn't buy me anything.  An implicit grant flow seems to make more sense for this client.\r\n\r\nIs there a way to bypass the IdentityServer's login screen using the implicit grant type so that I can just hit the UserService to perform validation against the incoming cookie and have it authenticate a user?  Ultimately, I'd like to have IdentityServer send a new token to my redirect_url.\r\n\r\nI've tried overriding the PreAuthenticateAsync from UserService, but I'm not clear how to authenticate a user  to satisfy the flow.  Setting a new AuthenticateResult with a subject and name doesn't get me anywhere.\r\n\r\nIs there another approach that I should be looking at here?  Any guidance would be greatly appreciated!\r\n\r\nThanks,\r\n\r\nAlejandro \r\n"},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/comments/242286280","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/3164#issuecomment-242286280","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/3164","id":242286280,"user":{"login":"leastprivilege","id":1454075,"avatar_url":"https://avatars.githubusercontent.com/u/1454075?v=3","gravatar_id":"","url":"https://api.github.com/users/leastprivilege","html_url":"https://github.com/leastprivilege","followers_url":"https://api.github.com/users/leastprivilege/followers","following_url":"https://api.github.com/users/leastprivilege/following{/other_user}","gists_url":"https://api.github.com/users/leastprivilege/gists{/gist_id}","starred_url":"https://api.github.com/users/leastprivilege/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/leastprivilege/subscriptions","organizations_url":"https://api.github.com/users/leastprivilege/orgs","repos_url":"https://api.github.com/users/leastprivilege/repos","events_url":"https://api.github.com/users/leastprivilege/events{/privacy}","received_events_url":"https://api.github.com/users/leastprivilege/received_events","type":"User","site_admin":false},"created_at":"2016-08-25T05:42:22Z","updated_at":"2016-08-25T05:42:22Z","body":"To improve discoverability of frequently asked and/or more general questions, we decided to move those questions to StackOverflow:\r\n\r\nhttps://stackoverflow.com/questions/tagged/?tagnames=identityserver3&sort=newest\r\n\r\nWe actively monitor SO as well but hope to create a community there so questions can get answered faster when we are not available."}}
{"actor":{"display_login":"leastprivilege"}}