skoruba / identityserver4.admin Goto Github PK

Dear @skoruba ,
Thanks for this work here,
Can you consider writing a blog or do a YouTube on integrating it.

I am still thinking how to customize it and make it fit well with a new solution or existing solutions.

Thanks in anticipations.

Chris

A modest suggestion. By default Admin uses SqlServer which has to be separately installed for anyone who doesn't use Visual Studio daily.

Required changes would be pretty small:

UseSqlServer -> UseSqlite in StartupHelpers.cs and adding SQLite provider package for EntityFramework.Core.

I myself use PostgreSQL (works great), but for demonstration purposes I think SQLite would the best choice. This would also make checking out the Admin so much easier for Linux/MacOS folks.

Api Resources work like a client work
and other manageable areas

Log paging shows all existing links - NOK

Hello, I am very glad that you have developed this system. I think it is perfect to improve it here

change

<picker id="AllowedScopesItems" multiple-select="true" min-search-text="2"
        selected-items="@Model.AllowedScopes" url="/Configuration/SearchScopes?scope"
        search-input-placeholder="Enter 2 and more characters" selected-items-title="Selected: ">
</picker>

to

<picker id="AllowedScopesItems" multiple-select="true" min-search-text="2"
        selected-items="@Model.AllowedScopes" url="@Url.Action("SearchScopes","Configuration")?scope"
        search-input-placeholder="Enter 2 and more characters" selected-items-title="Selected: ">
</picker>

NOT PERFECT: url="/Configuration/SearchScopes?scope"
PERFECT: url="@Url.Action("SearchScopes","Configuration")?scope"

There are a few other places I didn't list

For people having identity server running already, any plans on making a guide on how to get this awesome Admin UI to work?

Maybe there has to be some work done with exposing setup options like naming, using existing dbcontexts etc.

Hi again :)
I have long redirectUri and logoutUri. I don't edit the texts. Only I can remove it and add again.
Can you make the texts is editable?

I try to add multiple scopes to a client but I can only add one:

Any suggestions?

ScopeClaim support

Hello,

the project looks really great. How should I do that the service is hosted in Azure?

Yours sincerely
Frank

Consider:

• How to create a documentation - what document format to use

• Use Github or some external tool

Any suggestions?

Hi @skoruba ,

How to use Multiple DbContexts with multiple Databases ? I want to use :

• 1 database for Clients, ApiScopes, ApiResources, PersistedGrants ...
• 1 database for Users, Roles, UserClaims ...

I have created a new DbContext (AuthDbContext) but i'm confused how to get it work :/

Any idea ? ^_^

https://docs.microsoft.com/en-us/dotnet/core/tools/custom-templates

Some information changes in environments.
For example;

    public const string IdentityAdminCookieName = "IdentityServerAdmin";        
    public const string IdentityAdminRedirectUri = "http://localhost:9000/signin-oidc";
    public const string IdentityServerBaseUrl = "https://devauth.thyteknik.com.tr";
    public const string IdentityAdminBaseUrl = "http://localhost:9000";

The application can take this changing information from the setting.json file.
If you check the issue, I can do it.

Warning MVC1000: Use of IHtmlHelper.Partial may result in application deadlocks. Consider using Tag Helper or IHtmlHelper.PartialAsync.

Recommendation for this issue: https://docs.microsoft.com/en-us/aspnet/core/test/troubleshoot?view=aspnetcore-2.1#use-of-ihtmlhelperpartial-may-result-in-application-deadlocks

Hi,

ran into a bug, when saving user settings from /Identity/UserProfile/X - password of a user is set to NULL (PasswordHash field in dbo.Users). Everything else saves normally.
Maybe some mapping issue?

Best regards.

Hi

First off - great project...

.. but there's a but... We'd prefer to use MySql for the backend database, however the use of the 'xml' column type in the model annotations forces the use of an underlying database engine that supports that specific column type.

For now i've got around this by overriding the AdminDbContext with my own which replaces the xml column type with one compatible with MySql in the ModelBuilder (OnModelCreating) (see below)

using IdentityServer4.EntityFramework.Entities;
using IdentityServer4.EntityFramework.Extensions;
using IdentityServer4.EntityFramework.Options;
using Microsoft.AspNetCore.Identity.EntityFrameworkCore;
using Microsoft.EntityFrameworkCore;
using Skoruba.IdentityServer4.Admin.EntityFramework.Identity.Constants;
using Skoruba.IdentityServer4.Admin.EntityFramework.Entities;
using Skoruba.IdentityServer4.Admin.EntityFramework.Identity.Entities.Identity;
using Skoruba.IdentityServer4.Admin.EntityFramework.Identity.Interfaces;
using Skoruba.IdentityServer4.Admin.EntityFramework.Interfaces;
using System.Threading.Tasks;
using TableConst = Skoruba.IdentityServer4.Admin.EntityFramework.Constants;

namespace Identity.Server.EntityFramework
{
    public class AdminDbContext : IdentityDbContext<UserIdentity, UserIdentityRole, int, UserIdentityUserClaim, UserIdentityUserRole, UserIdentityUserLogin, UserIdentityRoleClaim, UserIdentityUserToken>,
        IAdminConfigurationDbContext, IAdminLogDbContext, IAdminPersistedGrantDbContext, IAdminPersistedGrantIdentityDbContext
    {
        private readonly ConfigurationStoreOptions _storeOptions;
        private readonly OperationalStoreOptions _operationalOptions;

        public AdminDbContext(DbContextOptions<AdminDbContext> options,
            ConfigurationStoreOptions storeOptions,
                OperationalStoreOptions operationalOptions)
            : base(options)
        {
            _storeOptions = storeOptions;
            _operationalOptions = operationalOptions;
        }

        public DbSet<ApiResource> ApiResources { get; set; }

        public DbSet<IdentityResource> IdentityResources { get; set; }

        public DbSet<ApiSecret> ApiSecrets { get; set; }

        public DbSet<ApiScope> ApiScopes { get; set; }

        public DbSet<ApiScopeClaim> ApiScopeClaims { get; set; }

        public DbSet<IdentityClaim> IdentityClaims { get; set; }

        public DbSet<ApiResourceClaim> ApiResourceClaims { get; set; }

        public DbSet<Client> Clients { get; set; }

        public DbSet<ClientGrantType> ClientGrantTypes { get; set; }

        public DbSet<ClientScope> ClientScopes { get; set; }

        public DbSet<ClientSecret> ClientSecrets { get; set; }

        public DbSet<ClientPostLogoutRedirectUri> ClientPostLogoutRedirectUris { get; set; }

        public DbSet<ClientCorsOrigin> ClientCorsOrigins { get; set; }

        public DbSet<ClientIdPRestriction> ClientIdPRestrictions { get; set; }

        public DbSet<ClientRedirectUri> ClientRedirectUris { get; set; }

        public DbSet<ClientClaim> ClientClaims { get; set; }

        public DbSet<ClientProperty> ClientProperties { get; set; }

        public DbSet<PersistedGrant> PersistedGrants { get; set; }

        public DbSet<Log> Logs { get; set; }

        public Task<int> SaveChangesAsync()
        {
            return base.SaveChangesAsync();
        }

        protected override void OnModelCreating(ModelBuilder builder)
        {
            base.OnModelCreating(builder);

            ConfigureIdentityContext(builder);
            ConfigureLogContext(builder);
            builder.ConfigureClientContext(_storeOptions);
            builder.ConfigureResourcesContext(_storeOptions);
            builder.ConfigurePersistedGrantContext(_operationalOptions);
        }

        private void ConfigureLogContext(ModelBuilder builder)
        {
            builder.Entity<Log>(log =>
            {
                log.ToTable(TableConst.TableConsts.Logging);
                log.HasKey(x => x.Id);
                log.Property(x => x.Properties).HasColumnType("longtext");
                log.Property(x => x.Level).HasMaxLength(128);
            });
        }

        private void ConfigureIdentityContext(ModelBuilder builder)
        {
            builder.Entity<UserIdentityRole>().ToTable(TableConsts.IdentityRoles);
            builder.Entity<UserIdentityRoleClaim>().ToTable(TableConsts.IdentityRoleClaims);
            builder.Entity<UserIdentityUserRole>().ToTable(TableConsts.IdentityUserRoles);

            builder.Entity<UserIdentity>().ToTable(TableConsts.IdentityUsers);
            builder.Entity<UserIdentityUserLogin>().ToTable(TableConsts.IdentityUserLogins);
            builder.Entity<UserIdentityUserClaim>().ToTable(TableConsts.IdentityUserClaims);
            builder.Entity<UserIdentityUserToken>().ToTable(TableConsts.IdentityUserTokens);
        }
    }
}

Just an fyi really.

Cheers!

In Admin UI under client Basic settings, Adding or Editing Redirect Uris does not work.

Similar problem with other field of same where adding Uri or Editing is not working.

Keep it up.

Add IdentityServer4.Admin.Common project for common interfaces, constants, DTOs, AppSettings.
Move non specific for App, DAL and BLL constants and DTOs to Common project.

Might be must have refactoring for #56

I'd like to see the methods to provision users (i.e. AutoProvisionUserAsync etc) in a separate implementation having the Skoruba-implementation as default but allowing us to replace it when needed. It is rather impractical having to modify the AccountController after every update.

Hello,

First of all, nice job. Really useful and clear admin UI for IS4.

Any plan to support multi-tenant identity strategies? I know that is not an easy architecture, but it has become very popular concept (and we use it in our service model :) )

Would you consider adding this feature?

I would be willing to help.

IdentityServer4 authors "kind of recommend" to use Serilog http://docs.identityserver.io/en/release/topics/logging.html
https://github.com/serilog

Serilog has basic sinks for
File (https://github.com/serilog/serilog-sinks-file)
Database (https://github.com/serilog/serilog-sinks-mssqlserver)
and enterprise level sinks for Splunk, Azure AppInsights, ElasticSearch etc.

Also Enrichers concept allows to customize on DI container level tracking properties.

I would use Serilog to log into existing Log table in Admin context,
and add Logging configuration section to appsettings.json with sinks configurations.

During administration clients, scopes, users, roles may be important to have control on it's history.

One of the cheap way to get changes history could be SQL server Track Data Changes feature.

1. Add feature for SQL server
   https://docs.microsoft.com/en-us/sql/relational-databases/track-changes/enable-and-disable-change-data-capture-sql-server?view=sql-server-2017
2. Add views to read tracking changes tables and build around them AuditDbContext.

Second options is to realize it on application level by using EF handlers and changetracker.
https://blog.tonysneed.com/2017/10/01/trackable-entities-for-ef-core/

To simplify using of different Asp.Net Identity model, especially another type of key - it will be necessary to rework the services, repositories and mapping which are connected with Asp.Net Identity.

Currently dotnet new template contains following params:

dotnet new skoruba.is4admin 
--name MyProject 
--title MyProject 
--adminrole MyRole 
--adminclientid MyClientId

It's necesarry to add the flag --exludeAspNetIdentity for exluding Asp.Net Core Identity from template.

I'm wondering if it is possible to change the structure of this project to two different projects(or nuget packages would be better).

• IdentityServer4.Admin
  this project will register all operations to a specific endpoint(like "/identity-server-admin") as a rest api.

• IdentityServer4.Admin.UI
  this project will register all default page to a specific endpoint(like "/identity-server-admin-ui") and it would be possible to inject some css or js or something.

Just like what swagger&swagger-ui has done.

Besides, thanks for your huge efforts for this repo.

Actually AdminUI IdSrv4 intergation and authorization params configured in AuthorizationConsts:

        public const string AdministrationPolicy = "RequireAdministratorRole";
        public const string AdministrationRole = "PlutoRootAdministrator";
        public const string IdentityAdminCookieName = "IdentityServerAdmin";        
        public const string IdentityAdminRedirectUri = "http://localhost:9000/signin-oidc";
        public const string IdentityServerBaseUrl = "https://localhost:44301/idsrv";
        public const string IdentityAdminBaseUrl = "http://localhost:9000";

I would suggest to use AppSettings class for that, which mapped to appsettings section in appsettings.JSON and IAppSettings rigistered as dependency in DI container.

Detailed about IOptions<TSettings> aspnetcore feature here:
https://joonasw.net/view/asp-net-core-1-configuration-deep-dive

services.AddOptions();
services.Configure<MySettings>(Configuration.GetSection("MySettings"));

I can't find any connection between MVC ViewModel and your KO pickers. params.hiddenId is undefined.

<div class="form-group row">
		<label asp-for="AllowedCorsOrigins" class="col-sm-3 col-form-label">
			@await Html.PartialAsync("Client/Section/Label", "AllowedCorsOrigins")
		</label>
	    <div class="col-sm-9">
	        <picker param="multipleSelect=true; hiddenId=AllowedCordOrigins" id="AllowedCorsOriginsItems" multiple-select="true" min-search-text="2"
	                selected-items="@Model.AllowedCorsOrigins" search-input-placeholder="Enter 2 and more characters 1"
	                selected-items-title="Selected: ">
	        </picker>
	    </div>
	</div>

You have multiple attributes for picker, but no params attr. What am I missing?

It is necessary update gulp-sass after new release because of this issue: dlmanning/gulp-sass#687

It seems there is no default admin/admin user or something else like for login page.
Follow the step,

1. add-migrations
2. datebase update
3. uncomment seeddata

Then I start IDS4 at localhost:5000, and IDS4 admin at localhost:9000.
Where I open http://localhost:9000, the website redirect me to localhost:5000 login page.
But I don't have a username and password for login.
User table is empty when I check it in SQL Server Management Studio.
Is it something I have done wrong?

Hello Skoruba ,
Thanks for this nice project it helps a lot

But am having two issues

1. is how can allow multiple roles for a single user , this comes i hand when i have more than one application where user can be able to share the login i tried to implement but it ends up in access denied page failing to authorize the user

2. what are the best way to authorize the API, i tried to implement but it works only on first minute after first minute the API loses access hence preventing user to have access to an API and the refresh token is invalid and throws an error when i try to renew the access token using the refresh token

If you are client editting page, you don't go back client list. Maybe breadcrumb is good for the project.

Hello

I am following the instructions to create a brand new project using the templates.

My problem is that I want to be able to use MySql. How can I change Log.cs

dtos have not values

Hello,

First of all, big thanks for doing this. You saved me a tremendous amount of work.

Why haven't you connected IdentityServer4 to the database modified by Admin panel? I understand that you could've done for the sake of simplicity and that's why you've opted for in memory stores but I'm curious if there's any other reason.

I'm working on having IS from Skoruba.IdentityServer4 connected to database modified in Skoruba.IdentityServer4.Admin. If I connect them are you interested in a pull request?

Hi,
First, thank you for this great job I appreciate it a lot :) . My question is :
The user remains logged in and accesses AdminUI when I delete the Role, How to block access or redirect to an error page?
Thank you :)

Thanks for such a great project.

I have an issue while migrating database.

First of all, I followed the instruction in EFMigration.md and Issue102 to use MySQL. When I run Update-Database -context AdminDbContext, I got

PM> dotnet ef database update -c AdminDbContext MySql.Data.MySqlClient.MySqlException (0x80004005): Table 'ApiResources' already exists ---> MySql.Data.MySqlClient.MySqlException (0x80004005): Table 'ApiResources' already exists at MySqlConnector.Core.ResultSet.ReadResultSetHeaderAsync(IOBehavior ioBehavior) in C:\projects\mysqlconnector\src\MySqlConnector\Core\ResultSet.cs:line 42 at MySql.Data.MySqlClient.MySqlDataReader.ActivateResultSet(ResultSet resultSet) in C:\projects\mysqlconnector\src\MySqlConnector\MySql.Data.MySqlClient\MySqlDataReader.cs:line 74 at MySql.Data.MySqlClient.MySqlDataReader.ReadFirstResultSetAsync(IOBehavior ioBehavior) in C:\projects\mysqlconnector\src\MySqlConnector\MySql.Data.MySqlClient\MySqlDataReader.cs:line 299 at MySql.Data.MySqlClient.MySqlDataReader.CreateAsync(MySqlCommand command, CommandBehavior behavior, ResultSetProtocol resultSetProtocol, IOBehavior ioBehavior) in C:\projects\mysqlconnector\src\MySqlConnector\MySql.Data.MySqlClient\MySqlDataReader.cs:line 284 at MySqlConnector.Core.TextCommandExecutor.ExecuteReaderAsync(String commandText, MySqlParameterCollection parameterCollection, CommandBehavior behavior, IOBehavior ioBehavior, CancellationToken cancellationToken) in C:\projects\mysqlconnector\src\MySqlConnector\Core\TextCommandExecutor.cs:line 37 at MySql.Data.MySqlClient.MySqlCommand.ExecuteNonQueryAsync(IOBehavior ioBehavior, CancellationToken cancellationToken) in C:\projects\mysqlconnector\src\MySqlConnector\MySql.Data.MySqlClient\MySqlCommand.cs:line 261 at MySql.Data.MySqlClient.MySqlCommand.ExecuteNonQuery() in C:\projects\mysqlconnector\src\MySqlConnector\MySql.Data.MySqlClient\MySqlCommand.cs:line 62 at Microsoft.EntityFrameworkCore.Storage.Internal.RelationalCommand.Execute(IRelationalConnection connection, DbCommandMethod executeMethod, IReadOnlyDictionary2 parameterValues)
at Microsoft.EntityFrameworkCore.Storage.Internal.RelationalCommand.ExecuteNonQuery(IRelationalConnection connection, IReadOnlyDictionary2 parameterValues) at Microsoft.EntityFrameworkCore.Migrations.MigrationCommand.ExecuteNonQuery(IRelationalConnection connection, IReadOnlyDictionary2 parameterValues)
at Microsoft.EntityFrameworkCore.Migrations.Internal.MigrationCommandExecutor.ExecuteNonQuery(IEnumerable1 migrationCommands, IRelationalConnection connection) at Microsoft.EntityFrameworkCore.Migrations.Internal.Migrator.Migrate(String targetMigration) at Microsoft.EntityFrameworkCore.Design.Internal.MigrationsOperations.UpdateDatabase(String targetMigration, String contextType) at Microsoft.EntityFrameworkCore.Design.OperationExecutor.UpdateDatabase.<>c__DisplayClass0_1.<.ctor>b__0() at Microsoft.EntityFrameworkCore.Design.OperationExecutor.OperationBase.Execute(Action action) Table 'ApiResources' already exists

Could you please help to see what did I missed? Thanks

Device flow will be added in next release of IdentityServer4 and is currently developed:
https://github.com/scottbrady91/IdentityServer4/tree/device-flow

Blog post describing the flow:
http://www.identityserver.com/articles/an-introduction-to-the-oauth-device-flow/

Would you consider adding this flow? I'm willing to help with that since I'll be using that flow a lot.

Actually Admin UI has only one level of authorization:

 services.AddAuthorization(options =>
            {
                options.AddPolicy(AuthorizationConsts.AdministrationPolicy,
                    policy => policy.RequireRole(AuthorizationConsts.AdministrationRole));
            });

There is need to provide access to Admin UI for users on Client Applicatiion level.
UserA has access to administrate App1, App2
UserB has access to administrate App1, App4, App5

Authorization must restrict user access in views to see only related to his application Client configurations, Stored Grants, Logs, Audit info etc.
What to do with application specific users is an open question.

I would suggest dynamic filters approach on DAL level
http://entityframework.net/ef-dynamic-filters
f.e Conditionally Enabling Filter could looks like that:
modelBuilder.Filter("HasClientId", (IHasClientId) => UserHasClientAppAdminClaim(d.ClientId));

• where UserHasClientAppAdminClaim will check if exists from UserClaimsPrincipal 'application-admin' claim with ClientId.
  For the Clients list view filter will be applied multiple WHERE IN (c1, c2, c3) filter.

Second level Authorization feature must be toggable with feature flag from AppSettings.json.

Good day,

had a problem using Admin pages, none of them opened, had to add .UseRowNumberForPaging()

services.AddDbContext<AdminDbContext>(options => options.UseSqlServer(configuration.GetConnectionString(ConfigurationConsts.AdminConnectionStringKey),
                optionsSql => optionsSql.MigrationsAssembly(migrationsAssembly).UseRowNumberForPaging()));

It is a known problem of EF core.

Best regards and thanks fore the project!

I've added new localization for Picker component.

@Seaear @zhulige @snys98 - Please, can you help me with these missing localization resources?

In this commit is list of missing resources: 2a67acd

Here is a file that contains all new resources:
https://github.com/skoruba/IdentityServer4.Admin/blob/feature/extensible-aspnet-identity/src/Skoruba.IdentityServer4.Admin/Resources/Views/Configuration/ClientClaims.zh-cn.resx#L138-L161

Thank you!

Can you develop this feature?
When I click a button then guid generate and set in secret key textbox

Hi!
I've tried to run app Admin in staging, but i always see that app try to redirect to /Account/Login. I think problem in this method:

        public static void AddAuthentication(this IServiceCollection services, IHostingEnvironment hostingEnvironment)
        {
            services.AddIdentity<UserIdentity, UserIdentityRole>()
                .AddEntityFrameworkStores<AdminDbContext>()
                .AddDefaultTokenProviders();

            //For integration tests use only cookie middleware
            if (hostingEnvironment.IsStaging())
            {
                services.AddAuthentication(options =>
                {
                    options.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                    options.DefaultChallengeScheme = CookieAuthenticationDefaults.AuthenticationScheme;

                    options.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                    options.DefaultForbidScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                    options.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                    options.DefaultSignOutScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                })
                    .AddCookie(CookieAuthenticationDefaults.AuthenticationScheme,
                        options => { options.Cookie.Name = AuthorizationConsts.IdentityAdminCookieName; });
            }
            else
            {
                services.AddAuthentication(options =>
                {
                    options.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                    options.DefaultChallengeScheme = AuthorizationConsts.OidcAuthenticationScheme;

                    options.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                    options.DefaultForbidScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                    options.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                    options.DefaultSignOutScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                })
                    .AddCookie(CookieAuthenticationDefaults.AuthenticationScheme,
                        options => { options.Cookie.Name = AuthorizationConsts.IdentityAdminCookieName; })
                    .AddOpenIdConnect(AuthorizationConsts.OidcAuthenticationScheme, options =>
                    {
                        options.Authority = AuthorizationConsts.IdentityServerBaseUrl;
                        options.RequireHttpsMetadata = false;

                        options.ClientId = AuthorizationConsts.OidcClientId;

                        options.Scope.Clear();
                        options.Scope.Add(AuthorizationConsts.ScopeOpenId);
                        options.Scope.Add(AuthorizationConsts.ScopeProfile);
                        options.Scope.Add(AuthorizationConsts.ScopeEmail);
                        options.Scope.Add(AuthorizationConsts.ScopeRoles);

                        options.SaveTokens = true;

                        options.TokenValidationParameters = new TokenValidationParameters
                        {
                            NameClaimType = JwtClaimTypes.Name,
                            RoleClaimType = JwtClaimTypes.Role,
                        };

                        options.Events = new OpenIdConnectEvents
                        {
                            OnMessageReceived = OnMessageReceived,
                            OnRedirectToIdentityProvider = OnRedirectToIdentityProvider
                        };
                    });
            }

App Admin does't contain definition for OpenIdConnect for Staging and I think it use default authentication methods. But app Admin doesn't contain Login page.

Add new project - Skoruba.IdentityServer4.Admin.Api:

• Create a list of API controllers - for managing of the IdentityServer4 and Asp.Net Core Identity
• Add swagger support

Hi,

I am receiving the following error while accessing the Persisted Grants page (/Grant/PersistedGrants):

An unhandled exception occurred while processing the request.
InvalidOperationException: The binary operator Equal is not defined for the types 'System.Nullable`1[System.Int32]' and 'System.Object'.

System.Linq.Expressions.Expression.GetEqualityComparisonOperator(ExpressionType binaryType, string opName, Expression left, Expression right, bool liftToNull)

This is the useful stack trace information:

I have changed only 2 things:

• The project configuration to run it without IIS Express
• The database related code to run using SQLite following the related instructions

The application seem to be working. Clicking everywhere I found this problem. I also tried adding the page and search arguments, but the error still persists.

Thanks!
Renato A. Ferreira

I'd like to create the project template via dotnet new that doesn't include the part with AspNet Identity therefore I'd like to move Asp.Net Identity into the separate projects.

BusinessLogic:

• Skoruba.IdentityServer4.Admin.BusinessLogic
• Skoruba.IdentityServer4.Admin.BusinessLogic.AspNetIdentity

EntityFramework:

• Skoruba.IdentityServer4.Admin.EntityFramework
• Skoruba.IdentityServer4.Admin.EntityFramework.AspNetIdentity