You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
79 lines
2.5 KiB
79 lines
2.5 KiB
using Microsoft.AspNetCore.Authentication.Cookies;
|
|
using Microsoft.AspNetCore.Authentication.OpenIdConnect;
|
|
using Microsoft.IdentityModel.Protocols.OpenIdConnect;
|
|
|
|
namespace Mvc.Client;
|
|
|
|
public class Startup
|
|
{
|
|
public void ConfigureServices(IServiceCollection services)
|
|
{
|
|
services.AddAuthentication(options =>
|
|
{
|
|
options.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
|
|
})
|
|
|
|
.AddCookie(options =>
|
|
{
|
|
options.LoginPath = "/login";
|
|
options.ExpireTimeSpan = TimeSpan.FromMinutes(50);
|
|
options.SlidingExpiration = false;
|
|
})
|
|
|
|
.AddOpenIdConnect(options =>
|
|
{
|
|
// Note: these settings must match the application details
|
|
// inserted in the database at the server level.
|
|
options.ClientId = "mvc";
|
|
options.ClientSecret = "901564A5-E7FE-42CB-B10D-61EF6A8F3654";
|
|
|
|
options.RequireHttpsMetadata = false;
|
|
options.GetClaimsFromUserInfoEndpoint = true;
|
|
options.SaveTokens = true;
|
|
|
|
// Use the authorization code flow.
|
|
options.ResponseType = OpenIdConnectResponseType.Code;
|
|
options.AuthenticationMethod = OpenIdConnectRedirectBehavior.RedirectGet;
|
|
|
|
// Note: setting the Authority allows the OIDC client middleware to automatically
|
|
// retrieve the identity provider's configuration and spare you from setting
|
|
// the different endpoints URIs or the token validation parameters explicitly.
|
|
options.Authority = "https://localhost:44395/";
|
|
|
|
options.Scope.Add("email");
|
|
options.Scope.Add("roles");
|
|
options.Scope.Add("offline_access");
|
|
options.Scope.Add("demo_api");
|
|
|
|
// Disable the built-in JWT claims mapping feature.
|
|
options.MapInboundClaims = false;
|
|
|
|
options.TokenValidationParameters.NameClaimType = "name";
|
|
options.TokenValidationParameters.RoleClaimType = "role";
|
|
|
|
options.AccessDeniedPath = "/";
|
|
});
|
|
|
|
services.AddHttpClient();
|
|
|
|
services.AddControllersWithViews();
|
|
}
|
|
|
|
public void Configure(IApplicationBuilder app)
|
|
{
|
|
app.UseDeveloperExceptionPage();
|
|
|
|
app.UseStaticFiles();
|
|
|
|
app.UseRouting();
|
|
|
|
app.UseAuthentication();
|
|
app.UseAuthorization();
|
|
|
|
app.UseEndpoints(options =>
|
|
{
|
|
options.MapControllers();
|
|
options.MapDefaultControllerRoute();
|
|
});
|
|
}
|
|
}
|
|
|