claims-authorization

What problem does it solve?

Mapping and controlling claims emitted by IdentityServer is complex and error-prone; this skill provides patterns and examples for IProfileService, IClaimsTransformation, and extension grants to ensure accurate, scope-aware claims loading, mapping, and filtering.

Core Features & Use Cases

• Dynamic claims loading: fetches and emits claims at token issuance based on user, client, and scope.
• Profile service patterns: demonstrates implementing IProfileService with GetProfileDataAsync and IsActiveAsync for robust token customization.
• Extension grants and external providers: shows how to propagate custom claims from token exchanges and map external provider claims into the local user profile.

Quick Start

Implement a custom profile service by extending DefaultProfileService and override GetProfileDataAsync to load dynamic claims from your data source.