reset

Author: damienbod

Blazor.BFF.Yarp.CertificateAuth/Client/Blazor.BFF.Yarp.CertificateAuth.Client.csproj

@@ -7,10 +7,10 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.Components.WebAssembly" Version="9.0.5" />
-    <PackageReference Include="Microsoft.AspNetCore.Components.WebAssembly.DevServer" Version="9.0.5" PrivateAssets="all" />
-    <PackageReference Include="Microsoft.Extensions.Http" Version="9.0.5" />
-    <PackageReference Include="Microsoft.AspNetCore.Components.WebAssembly.Authentication" Version="9.0.5" />
+    <PackageReference Include="Microsoft.AspNetCore.Components.WebAssembly" Version="9.0.4" />
+    <PackageReference Include="Microsoft.AspNetCore.Components.WebAssembly.DevServer" Version="9.0.4" PrivateAssets="all" />
+    <PackageReference Include="Microsoft.Extensions.Http" Version="9.0.4" />
+    <PackageReference Include="Microsoft.AspNetCore.Components.WebAssembly.Authentication" Version="9.0.4" />
   </ItemGroup>
 
   <ItemGroup>

Blazor.BFF.Yarp.CertificateAuth/Server/Blazor.BFF.Yarp.CertificateAuth.Server.csproj

@@ -7,7 +7,7 @@
 	</PropertyGroup>
 
 	<ItemGroup>
-		<PackageReference Include="Microsoft.AspNetCore.Components.WebAssembly.Server" Version="9.0.5" />
+    <PackageReference Include="Microsoft.AspNetCore.Components.WebAssembly.Server" Version="9.0.4" />
 		<PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="9.0.4" NoWarn="NU1605" />
 		<PackageReference Include="NetEscapades.AspNetCore.SecurityHeaders" Version="1.1.0" />
 		<PackageReference Include="NetEscapades.AspNetCore.SecurityHeaders.TagHelpers" Version="1.1.0" />

OpeniddictServer/Startup.cs

@@ -1,13 +1,15 @@
 using Fido2Identity;
 using Fido2NetLib;
 using Microsoft.AspNetCore.Authentication.Cookies;
+using Microsoft.AspNetCore.Authentication.OpenIdConnect;
 using Microsoft.AspNetCore.Identity;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.IdentityModel.Logging;
 using Microsoft.IdentityModel.Protocols.OpenIdConnect;
 using Microsoft.IdentityModel.Tokens;
 using OpeniddictServer.Data;
 using Quartz;
+using System.IdentityModel.Tokens.Jwt;
 using System.Security.Claims;
 using static OpenIddict.Abstractions.OpenIddictConstants;
 
@@ -128,6 +130,27 @@ public void ConfigureServices(IServiceCollection services)
                     RoleClaimType = ClaimTypes.Role,
                     ValidateIssuer = true
                 };
+            })
+            .AddOpenIdConnect("EntraID", "EntraID", oidcOptions =>
+            {
+                oidcOptions.SignInScheme = "entraidcookie";
+                oidcOptions.Scope.Add(OpenIdConnectScope.OpenIdProfile);
+                oidcOptions.Scope.Add("user.read");
+                oidcOptions.Scope.Add(OpenIdConnectScope.OfflineAccess);
+                oidcOptions.Authority = $"https://login.microsoftonline.com/{Configuration["AzureAd:TenantId"]}/v2.0/";
+                oidcOptions.ClientId = Configuration["AzureAd:ClientId"];
+                oidcOptions.ClientSecret = Configuration["AzureAd:ClientSecret"];
+                oidcOptions.ResponseType = OpenIdConnectResponseType.Code;
+                oidcOptions.MapInboundClaims = false;
+                oidcOptions.SaveTokens = true;
+                oidcOptions.TokenValidationParameters.NameClaimType = JwtRegisteredClaimNames.Name;
+                oidcOptions.TokenValidationParameters.RoleClaimType = "role";
+
+                oidcOptions.Events = new OpenIdConnectEvents
+                {
+                    // Add event handlers            
+
+                };
             });
 
         services.AddOpenIddict()