{"action":"closed","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/2209","repository_url":"https://api.github.com/repos/IdentityServer/IdentityServer4","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/2209/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/2209/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/2209/events","html_url":"https://github.com/IdentityServer/IdentityServer4/issues/2209","id":311925670,"number":2209,"title":"\"identity server is requesting your permission...\"","user":{"login":"enemyofthedawn","id":3116731,"avatar_url":"https://avatars0.githubusercontent.com/u/3116731?v=4","gravatar_id":"","url":"https://api.github.com/users/enemyofthedawn","html_url":"https://github.com/enemyofthedawn","followers_url":"https://api.github.com/users/enemyofthedawn/followers","following_url":"https://api.github.com/users/enemyofthedawn/following{/other_user}","gists_url":"https://api.github.com/users/enemyofthedawn/gists{/gist_id}","starred_url":"https://api.github.com/users/enemyofthedawn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/enemyofthedawn/subscriptions","organizations_url":"https://api.github.com/users/enemyofthedawn/orgs","repos_url":"https://api.github.com/users/enemyofthedawn/repos","events_url":"https://api.github.com/users/enemyofthedawn/events{/privacy}","received_events_url":"https://api.github.com/users/enemyofthedawn/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-04-06T10:27:59Z","updated_at":"2018-04-06T12:35:41Z","closed_at":"2018-04-06T12:35:41Z","author_association":"NONE","body":"Sorry for confusion.\r\n\r\nI'm new to OpenID Connect and OAuth in general. I'm aware it is used when you want to give third party users access to your api, something like GraphAPI in FB. You get this message then: \"identity server is requesting your permission...\" \r\n\r\nQuestion is: can I use it for internal WebAPI that is not meant to be used by third party users but by my application? I found this: http://docs.identityserver.io/en/release/topics/consent.html I'm on the right path? What if I just want to implicitly authorize the user in m application. \r\n\r\nOr to put it simply: When shouldn't I use identity server?\r\n\r\nI want to make a WebAPI that can be accessed by various clients(desktop, web,mobile). I'm not sure if ASP.NET Identity without using identity server is enough. I want to base my architecture on microservices (project per feature/module). I'm not sure how to handle auth in microservices.\r\n\r\n"}}
{"actor":{"display_login":"brockallen"}}