In my previous post, I walked through setting up an OAuth2/OIDC server with OpenIddict 6, AWS Lambda, API Gateway, and Aurora Serverless v2. That worked well when SQL storage was the right fit, but I also wanted a DynamoDB backed option for workloads that are already built around AWS serverless components and need predictable request latency without managing database connections.
After succesfully running ASP.NET 8 Minimal API with Lambda Container image it's time to run something real.
And just in December 2023 Kévin Chalet announced new version of OpenIddict, the library to build your own OAuth2 / OpenID Connect server in .NET.
Officially OpenIddict supports two implementations for persistance layer:
This time we will explore how to implement fully serverless OAuth2 server using OpenIddict 5 with Lambda Container image and persistance layer backed by AWS DynamoDB
Due to the large scope this will be series of posts covering the following aspects:
You can find source code available at https://github.com/ahanoff/OpenIddict.DynamoDb
First let's review OpenIddict concepts and components.