From 3849732fd40c47843bbd24de5407f7fc3324a9cf Mon Sep 17 00:00:00 2001
From: Galip Tolga Erdem <galiperdem@gmail.com>
Date: Thu, 20 Oct 2022 02:45:48 -0400
Subject: [PATCH] Disabled audience validation for microservices

---
 .../EShopOnAbpSharedHostingMicroservicesModule.cs            | 1 +
 .../JwtBearerConfigurationHelper.cs                          | 5 +++++
 2 files changed, 6 insertions(+)

diff --git a/shared/EShopOnAbp.Shared.Hosting.Microservices/EShopOnAbpSharedHostingMicroservicesModule.cs b/shared/EShopOnAbp.Shared.Hosting.Microservices/EShopOnAbpSharedHostingMicroservicesModule.cs
index e497d6d5..fdad69fd 100644
--- a/shared/EShopOnAbp.Shared.Hosting.Microservices/EShopOnAbpSharedHostingMicroservicesModule.cs
+++ b/shared/EShopOnAbp.Shared.Hosting.Microservices/EShopOnAbpSharedHostingMicroservicesModule.cs
@@ -29,6 +29,7 @@ public class EShopOnAbpSharedHostingMicroservicesModule : AbpModule
 {
     public override void ConfigureServices(ServiceConfigurationContext context)
     {
+        Microsoft.IdentityModel.Logging.IdentityModelEventSource.ShowPII = true;
         var configuration = context.Services.GetConfiguration();
 
         Configure<AbpMultiTenancyOptions>(options =>
diff --git a/shared/EShopOnAbp.Shared.Hosting.Microservices/JwtBearerConfigurationHelper.cs b/shared/EShopOnAbp.Shared.Hosting.Microservices/JwtBearerConfigurationHelper.cs
index b00229f1..0cc48603 100644
--- a/shared/EShopOnAbp.Shared.Hosting.Microservices/JwtBearerConfigurationHelper.cs
+++ b/shared/EShopOnAbp.Shared.Hosting.Microservices/JwtBearerConfigurationHelper.cs
@@ -1,6 +1,7 @@
 using Microsoft.AspNetCore.Authentication.JwtBearer;
 using Microsoft.Extensions.DependencyInjection;
 using System;
+using Microsoft.IdentityModel.Tokens;
 using Volo.Abp.Modularity;
 
 namespace EShopOnAbp.Shared.Hosting.Microservices;
@@ -19,6 +20,10 @@ public static class JwtBearerConfigurationHelper
                 options.Authority = configuration["AuthServer:Authority"];
                 options.RequireHttpsMetadata = Convert.ToBoolean(configuration["AuthServer:RequireHttpsMetadata"]);
                 options.Audience = audience;
+                options.TokenValidationParameters = new TokenValidationParameters()
+                {
+                    ValidateAudience = false //Disabled since seeding audience is not possible with the current keycloak.net library version
+                };
             });
     }
 }
\ No newline at end of file