These are the exercises for the Auth0 Workshop.

Create a new ASP.Net application and register it in Auth0. Follow the tutorial until step 4. Use the code snippet of the Step 4 to replace the login link functionality.

Add the Logout functionality as explained in the tutorial.

Make the About page secure with the [Authorize] attribute. Replace the content of loginForm in Login.cshtml and show the sign in widget there.

Hint: use container: 'loginForm' and chrome: true.

Use the state parameter to keep the URL the user wants to access.

Hint: add this option to the signin call state: '[email protected]["ReturnUrl"]' in the Login.cshtml.

Show every claim in the About page.

Add ViewBag.User = ClaimsPrincipal.Current.Claims and then in the About.cshtml:

<ul>
@foreach (var claim in ViewBag.User)
{
    <li>@claim.Type : @claim.Value</li>
}
</ul>

To extend the profile metadata create a new form in the About page asking for Telephone and POSTs the value to /Profile in your ASP.Net application. Using an instance of Auth0 client with the global client id and secret, update the current user's metadata. Verify next time the user logins has this new claim in the About page.

Hint: user_id is another claim. Hint: found global client_id and client_secret on API Explorer.

Create a new WCF Project and Service. Add a call to the new service from the ASP.Net application.

Follow the WCF Tutorial in order to secure your web service.

Create a new WCF application in Auth0. Change the Client ID and Secret in the WCF service with the new credentials. Lastly instead of attaching the original id_token, obtain a new delegation token using the original one.

// get JsonWebToken from logged in user
string token = ClaimsPrincipal.Current.FindFirst("id_token").Value;

// create an Auth0 client to call the /delegation endpoint using the client id and secret of the caller application
var auth0 = new Auth0.Client("... asp.net client id ...", "... asp.net client secret ...", "... namespace ...");
var result = auth0.GetDelegationToken(token, "...client id of the target WCF service...");