Automated OAuth Access Token Management for .NET Workers and ASP.NET Web Applications

Management of OAuth access tokens is a requirement for every client application in an OAuth-based system.

Since .NET / ASP.NET doesn't help you with that, we published a library that takes care of this for both daemon-style as well as interactive web applications.

This video demos the main features.

[mattmarkus]

This is terrific material. A huge thank you for the effort.

[danielmarcelcamenzind]

Very handy library - thanks a lot for sharing.
But, machine-to-machine does not necessarilly mean Client Credentials. "Resource Owner Grant" includes another pair of user/password - the one for the resource owner.
Do you have a library that also support this?

[spasternak]

How to modify it to use BearerToken to get authorisation token?

[PawelKolektor]

What happens when the refresh token is also expired? The library just challenge a user?

[aj_]

what's a situation where you wouldn't just use in-memory cache? seems like there's no real reason to persist these tokens outside the service instance itself, unless you're trying to avoid having multiple instances of the service all pinging the identity-server, for some reason