Skip to content

Latest commit

 

History

History
191 lines (149 loc) · 5.63 KB

File metadata and controls

191 lines (149 loc) · 5.63 KB
title Getting Started - Multiple Frontends
description A guide on how to create a BFF application with multiple frontends.
sidebar
order label badge
20
Multiple Frontends
text variant
v4
tip

import { Code } from "@astrojs/starlight/components"; import { Tabs, TabItem } from "@astrojs/starlight/components";

Duende.BFF (Backend for Frontend) supports multiple frontends in a single BFF host. This is useful for scenarios where you want to serve several SPAs or frontend apps from the same backend, each with their own authentication and API proxying configuration.

:::note Multi-frontend support is available in Duende.BFF v4 and later. The v3-style of wiring up BFF is not supported for this scenario. :::

Prerequisites

  • .NET 8.0 or later
  • Multiple frontend applications (e.g., React, Angular, Vue, or plain JavaScript)

Setting Up A BFF Project For Multiple Frontends

1. Create A New ASP.NET Core Project

dotnet new web -n MyMultiBffApp
cd MyMultiBffApp

2. Add The Duende.BFF NuGet Package

dotnet add package Duende.BFF

3. OpenID Connect Configuration

Configure OpenID Connect authentication for your BFF host. This is similar to the single frontend setup, but applies to all frontends unless overridden per frontend.

// Program.cs
builder.Services.AddBff()
    .ConfigureOpenIdConnect(options =>
    {
        options.Authority = "https://demo.duendesoftware.com";
        options.ClientId = "interactive.confidential";
        options.ClientSecret = "secret";
        options.ResponseType = "code";
        options.ResponseMode = "query";

        options.GetClaimsFromUserInfoEndpoint = true;
        options.SaveTokens = true;
        options.MapInboundClaims = false;

        options.Scope.Clear();
        options.Scope.Add("openid");
        options.Scope.Add("profile");

        // Add this scope if you want to receive refresh tokens
        options.Scope.Add("offline_access");
    })
    .ConfigureCookies(options =>
    {
        // Because we use an identity server that's configured on a different site
        // (duendesoftware.com vs localhost), we need to configure the SameSite property to Lax.
        // Setting it to Strict would cause the authentication cookie not to be sent after logging in.
        // The user would have to refresh the page to get the cookie.
        // Recommendation: Set it to 'strict' if your IDP is on the same site as your BFF.
        options.Cookie.SameSite = SameSiteMode.Lax;
    });

builder.Services.AddAuthorization();

var app = builder.Build();

app.UseAuthentication();
app.UseRouting();

// adds antiforgery protection for local APIs
app.UseBff();

// adds authorization for local and remote API endpoints
app.UseAuthorization();

app.Run();

4. Configure BFF In Program.cs

{/* prettier-ignore /} {/ prettier-ignore */}

  Register multiple frontends directly in code using `AddFrontends`:

  <Code
      lang="csharp"
      title="Program.cs"
      code={`builder.Services.AddBff()
.AddFrontends(
    new BffFrontend(BffFrontendName.Parse("default-frontend"))
        .WithCdnIndexHtmlUrl(new Uri("https://localhost:5005/static/index.html")),
    new BffFrontend(BffFrontendName.Parse("admin-frontend"))
        .WithCdnIndexHtmlUrl(new Uri("https://localhost:5005/admin/index.html"))
);

// ...existing code for authentication, authorization, etc.`}/>

{/* prettier-ignore */} You can also load frontend configuration from an `IConfiguration` source, such as a JSON file:
Example `bffconfig.json`:

<Code
    lang="json"
    code={`{
"defaultOidcSettings": null,
"defaultCookieSettings": null,
"frontends": {
  "from_config": {
    "cdnIndexHtmlUrl": "https://localhost:5005/static/index.html",
    "matchingPath": "/from-config",
    "oidc": {
      "clientId": "bff.multi-frontend.config"
    },
    "remoteApis": [
      {
        "matchingPath": "/api/client-token",
        "targetUri": "https://localhost:5010",
        "tokenRequirement": "Client"
      }
    ]
  }
}

}`}/>

Load and use the configuration in Program.cs:

<Code
lang="csharp"
title="Program.cs"
code={`var bffConfig = new ConfigurationBuilder()
.AddJsonFile("bffconfig.json")
.Build();

builder.Services.AddBff() .LoadConfiguration(bffConfig);

// ...existing code for authentication, authorization, etc.`}/>

5. Remote API Proxying

You can configure remote API proxying in two ways:

  • Single YARP proxy for all frontends: You can set up a single YARP proxy for all frontends, as shown in the Single Frontend Guide.

  • Direct proxying per frontend: You can configure remote APIs for each frontend individually:

    // Program.cs
    builder.Services.AddBff()
        .AddFrontends(
            new BffFrontend(BffFrontendName.Parse("default-frontend"))
                .WithCdnIndexUrl(new Uri("https://localhost:5005/static/index.html"))
                .WithRemoteApis(
                    new RemoteApi("/api/user-token", new Uri("https://localhost:5010"))
                )
        );

This allows each frontend to have its own set of proxied remote APIs.

6. Server Side Sessions

Server side session configuration is the same as in the single frontend scenario. See the Single Frontend Guide for details.