identityserver-token-lifecycle
Guide for implementing token types, refresh token management, token exchange (RFC 8693), extension grants, IProfileService claims customization, and token lifetime best practices in Duende IdentityServer.
Install
With your agent
Install OMGSkills skill "duendesoftware/duende-skills:skills/identityserver-token-lifecycle" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/DuendeSoftware/duende-skills /tmp/duende-skills && ln -s /tmp/duende-skills/skills/identityserver-token-lifecycle ~/.claude/skills/identityserver-token-lifecycleFrom README
IdentityServer Token Types, Refresh Tokens, and Token Exchange When to Use This Skill Choosing between JWT and reference access tokens for a client Configuring refresh token rotation, sliding expiration, or replay detection Implementing token exchange (RFC 8693) for impersonation or delegation Building an extension grant validator (IExtensionGrantValidator) Customizing which claims appear in identity tokens, access tokens, or userinfo responses via IProfileService Setting token lifetime policies for access tokens and refresh tokens Issuing internal tokens from extensibility code via IIdentityServerTools Understanding identity tokens vs access tokens and their intended audiences Docs: https://docs.duendesoftware.com/identityserver/tokens Token Types Overview Duende IdentityServer issues three primary token types: | Token Type | Purpose | Audience | Format | | -------------- | -------------------------------------------------- | ------------------------------------- |...
More from this repo
aspnetcore-authentication
ASP.NET Core authentication middleware configuration including OpenID Connect, JWT Bearer, cookie authentication,...
aspnetcore-authorization
ASP.NET Core authorization patterns including policy-based authorization, IAuthorizationHandler implementations,...
claims-authorization
Claims transformation and profile service patterns for Duende IdentityServer — IProfileService, IClaimsTransformation,...