identityserver-api-protection
Protecting APIs with Duende IdentityServer: JWT bearer authentication, reference token introspection, scope-based authorization, DPoP/mTLS proof-of-possession validation, local API authentication, and multi-audience scenarios.
Install
With your agent
Install OMGSkills skill "duendesoftware/duende-skills:skills/identityserver-api-protection" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/DuendeSoftware/duende-skills /tmp/duende-skills && ln -s /tmp/duende-skills/skills/identityserver-api-protection ~/.claude/skills/identityserver-api-protectionFrom README
Protecting APIs with IdentityServer When to Use This Skill Configuring JWT bearer authentication in an ASP.NET Core API to validate tokens from IdentityServer Setting up reference token introspection with AddOAuth2Introspection Handling both JWT and reference tokens in the same API using ForwardReferenceToken Implementing scope-based authorization policies Validating Proof-of-Possession tokens (DPoP and mTLS cnf claim) Protecting APIs hosted in the same application as IdentityServer (local API authentication) Securing multi-audience API deployments Docs: https://docs.duendesoftware.com/identityserver/apis/ Core Concepts APIs are the resources that IdentityServer protects. Clients obtain access tokens from IdentityServer, then present those tokens to APIs. The API must validate the token and enforce authorization based on the token's claims (scopes, audience, subject, etc.).
More from this repo
aspnetcore-authentication
ASP.NET Core authentication middleware configuration including OpenID Connect, JWT Bearer, cookie authentication,...
aspnetcore-authorization
ASP.NET Core authorization patterns including policy-based authorization, IAuthorizationHandler implementations,...
claims-authorization
Claims transformation and profile service patterns for Duende IdentityServer — IProfileService, IClaimsTransformation,...