Merge pull request #52 from DuendeSoftware/mb/conformance

Add Conformance Report feature and required dependencies

Author: maartenba

src/Duende.IdentityServer.Demo.csproj

@@ -9,6 +9,7 @@
 
 	<ItemGroup>
 		<PackageReference Include="Duende.IdentityServer" Version="8.0.0-alpha.1" />
+		<PackageReference Include="Duende.IdentityServer.ConformanceReport" Version="0.1.0-alpha.0.3488" />
 		<PackageReference Include="Duende.AspNetCore.Authentication.JwtBearer" Version="0.3.0" />
 		<PackageReference Include="Serilog.AspNetCore" Version="10.0.0" />
 	</ItemGroup>

src/HostingExtensions.cs

@@ -1,5 +1,7 @@
 using Duende.AspNetCore.Authentication.JwtBearer.DPoP;
+using Duende.ConformanceReport.Endpoints;
 using Duende.IdentityServer.Configuration;
+using Duende.IdentityServer.ConformanceReport;
 using Duende.IdentityServer.Services;
 using Duende.IdentityServer.Validation;
 using IdentityServerHost;
@@ -57,7 +59,11 @@ public static WebApplication ConfigureServices(this WebApplicationBuilder builde
             .AddTestUsers(TestUsers.Users)
             .AddJwtBearerClientAuthentication()
             .AddSaml()
-            .AddInMemorySamlServiceProviders(Config.SamlServiceProviders);
+            .AddInMemorySamlServiceProviders(Config.SamlServiceProviders)
+            .AddConformanceReport(options =>
+            {
+                options.Enabled = true;
+            });
 
         builder.Services.AddAuthentication()
             .AddLocalApi()
@@ -128,8 +134,9 @@ public static WebApplication ConfigurePipeline(this WebApplication app)
         app.UseRouting();
         app.UseIdentityServer();
         app.UseAuthorization();
-
-
+        
+        app.MapConformanceReport();
+        
         app.MapRazorPages()
             .RequireAuthorization();
         app.MapControllers();

src/Pages/Index.cshtml

@@ -78,6 +78,24 @@
                 </a>
             </div>
         </div>
+        <div class="card m-2" style="width: 18rem;">
+            <div class="card-body">
+                <h5 class="card-title">
+                    <i class="glyphicon glyphicon-flag"></i>
+                    Conformance Report
+                </h5>
+                <p class="card-text">Assess your configuration against
+                    <a href="https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1" rel="noopener noreferrer" target="_blank">OAuth 2.1</a> and
+                    <a href="https://openid.net/specs/fapi-2_0-security-profile.html" rel="noopener noreferrer" target="_blank">FAPI 2.0 Security Profile</a> specifications.
+                </p>
+            </div>
+            <div class="card-footer p-0">
+                <a href="/_duende/conformance-report" rel="nofollow" class="btn btn-primary w-100">
+                    Go
+                    <i class="glyphicon glyphicon-chevron-right"></i>
+                </a>
+            </div>
+        </div>
         <div class="card m-2" style="width: 18rem;">
             <div class="card-body">
                 <h5 class="card-title">