Ticket #771 : Add some sample projects for the OPENID federation

Author: habarthierry-hue

src/Federation/SimpleIdServer.Federation.Rp.Startup/Controllers/ClaimsController.cs

@@ -0,0 +1,19 @@
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using SimpleIdServer.Federation.Rp.Startup.ViewModels;
+
+namespace SimpleIdServer.Federation.Rp.Startup.Controllers;
+
+public class ClaimsController : Controller
+{
+    [Authorize]
+    public async Task<IActionResult> Index()
+    {
+        var accessToken = await HttpContext.GetTokenAsync("access_token");
+        return View(new ClaimsViewModel
+        {
+            AccessToken = accessToken
+        });
+    }
+}

src/Federation/SimpleIdServer.Federation.Rp.Startup/Controllers/HomeController.cs

@@ -0,0 +1,37 @@
+using Microsoft.AspNetCore.Mvc;
+using SimpleIdServer.Federation.Rp.Startup.ViewModels;
+using System.Diagnostics;
+
+namespace SimpleIdServer.Federation.Rp.Startup.Controllers
+{
+    public class HomeController : Controller
+    {
+        private readonly ILogger<HomeController> _logger;
+
+        public HomeController(ILogger<HomeController> logger)
+        {
+            _logger = logger;
+        }
+
+        public IActionResult Index()
+        {
+            return View();
+        }
+
+        public IActionResult Privacy()
+        {
+            return View();
+        }
+
+        public IActionResult Logout()
+        {
+            return SignOut(new[] { "sid", "Cookies" });
+        }
+
+        [ResponseCache(Duration = 0, Location = ResponseCacheLocation.None, NoStore = true)]
+        public IActionResult Error()
+        {
+            return View(new ErrorViewModel { RequestId = Activity.Current?.Id ?? HttpContext.TraceIdentifier });
+        }
+    }
+}

src/Federation/SimpleIdServer.Federation.Rp.Startup/Program.cs

@@ -1,8 +1,93 @@
-var builder = WebApplication.CreateBuilder(args);
+using Microsoft.IdentityModel.Tokens;
+using SimpleIdServer.Federation.Rp.Startup;
+using SimpleIdServer.IdServer.Domains;
+using SimpleIdServer.OpenidFederation.Store.EF;
+using System.Security.Cryptography;
+
+var builder = WebApplication.CreateBuilder(args);
+var signatureCredentials = new SigningCredentials(new RsaSecurityKey(RSA.Create()) { KeyId = "raId" }, SecurityAlgorithms.RsaSha256);
+
+var jsonWebKey = signatureCredentials.SerializePublicJWK();
+jsonWebKey.Alg = SecurityAlgorithms.RsaSha256;
+jsonWebKey.Use = "sig";
+
+builder.Services.AddDistributedMemoryCache();
 builder.Services.AddRpFederation(r =>
 {
     r.Client = new SimpleIdServer.IdServer.Domains.Client
     {
-
+        ClientId = "http://localhost:7001",
+        RedirectionUrls = new List<string>
+        {
+            "http://localhost:7001/signin-oidc"
+        },
+        ClientRegistrationTypesSupported = new List<string>
+        {
+            "automatic"
+        },
+        RequestObjectSigningAlg = SecurityAlgorithms.RsaSha256,
+        Scopes = new List<Scope>
+        {
+            new Scope
+            {
+                Name = "openid"
+            },
+            new Scope
+            {
+                Name = "profile"
+            }
+        },
+        ResponseTypes = new List<string>
+        {
+            "code"
+        },
+        GrantTypes = new List<string>
+        {
+            "authorization_code"
+        },
+        TokenEndPointAuthMethod = "private_key_jwt"
     };
-});
+    r.Client.Add(jsonWebKey.Kid, jsonWebKey, "sig", SecurityKeyTypes.RSA);
+    r.SigningCredentials = signatureCredentials;
+});
+builder.Services.AddOpenidFederationStore();
+builder.Services.AddControllersWithViews();
+builder.Services.AddAuthentication(options =>
+{
+    options.DefaultScheme = "Cookies";
+    options.DefaultChallengeScheme = "sid";
+})
+    .AddCookie("Cookies")
+    .AddCustomOpenIdConnect("sid", options =>
+    {
+
+        options.SignInScheme = "Cookies";
+        options.ResponseType = "code";
+        options.Authority = "https://localhost:5001/master";
+        options.RequireHttpsMetadata = false;
+        options.ClientId = "http://localhost:7001";
+        options.GetClaimsFromUserInfoEndpoint = true;
+        options.SaveTokens = true;
+        options.UseFederationAutomaticRegistration(signatureCredentials);
+    });
+
+var app = builder.Build();
+AddTrustedEntities(app.Services);
+app.UseHttpsRedirection();
+app.UseStaticFiles();
+app.UseRouting();
+app.UseAuthorization();
+app.MapControllerRoute(
+    name: "default",
+    pattern: "{controller=Home}/{action=Index}/{id?}");
+
+app.Run();
+static void AddTrustedEntities(IServiceProvider services)
+{
+    using (var scope = services.CreateScope())
+    {
+        var dbContext = scope.ServiceProvider.GetRequiredService<OpenidFederationDbContext>();
+        dbContext.FederationEntities.AddRange(RpConfiguration.FederationEntities);
+        dbContext.SaveChanges();
+    }
+}

src/Federation/SimpleIdServer.Federation.Rp.Startup/Properties/launchSettings.json

@@ -2,11 +2,10 @@
   "profiles": {
     "SimpleIdServer.Federation.Rp.Startup": {
       "commandName": "Project",
-      "launchBrowser": true,
       "environmentVariables": {
         "ASPNETCORE_ENVIRONMENT": "Development"
       },
-      "applicationUrl": "https://localhost:5425;http://localhost:5426"
+      "applicationUrl": "http://localhost:7001"
     }
   }
 }

src/Federation/SimpleIdServer.Federation.Rp.Startup/RpConfiguration.cs

@@ -0,0 +1,17 @@
+using SimpleIdServer.OpenidFederation.Domains;
+
+namespace SimpleIdServer.Federation.Rp.Startup;
+
+public class RpConfiguration
+{
+    public static List<FederationEntity> FederationEntities = new List<FederationEntity>
+    {
+        new FederationEntity
+        {
+            Id = Guid.NewGuid().ToString(),
+            Sub = "http://localhost:7000",
+            Realm = string.Empty,
+            IsSubordinate = false
+        }
+    };
+}

src/Federation/SimpleIdServer.Federation.Rp.Startup/SimpleIdServer.Federation.Rp.Startup.csproj

@@ -5,6 +5,8 @@
     <ImplicitUsings>enable</ImplicitUsings>
   </PropertyGroup>
   <ItemGroup>
+    <ProjectReference Include="..\..\IdServer\SimpleIdServer.OpenIdConnect\SimpleIdServer.OpenIdConnect.csproj" />
+    <ProjectReference Include="..\..\IdServer\SimpleIdServer.OpenidFederation.Store.EF\SimpleIdServer.OpenidFederation.Store.EF.csproj" />
     <ProjectReference Include="..\..\IdServer\SimpleIdServer.Rp.Federation\SimpleIdServer.Rp.Federation.csproj" />
   </ItemGroup>
 </Project>

src/Federation/SimpleIdServer.Federation.Rp.Startup/ViewModels/ClaimsViewModel.cs

@@ -0,0 +1,6 @@
+namespace SimpleIdServer.Federation.Rp.Startup.ViewModels;
+
+public class ClaimsViewModel
+{
+    public string AccessToken { get; set; }
+}

src/Federation/SimpleIdServer.Federation.Rp.Startup/ViewModels/ErrorViewModel.cs

@@ -0,0 +1,8 @@
+namespace SimpleIdServer.Federation.Rp.Startup.ViewModels;
+
+public class ErrorViewModel
+{
+    public string? RequestId { get; set; }
+
+    public bool ShowRequestId => !string.IsNullOrEmpty(RequestId);
+}

src/Federation/SimpleIdServer.Federation.Rp.Startup/Views/Claims/Index.cshtml

@@ -0,0 +1,13 @@
+@model SimpleIdServer.Federation.Rp.Startup.ViewModels.ClaimsViewModel
+
+<ul>
+    @foreach (var claim in User.Claims)
+    {
+        <li>@claim.Type : @claim.Value</li>
+    }
+</ul>
+
+<div>
+    <h3>Access token</h3>
+    <p>@Model.AccessToken</p>
+</div>

src/Federation/SimpleIdServer.Federation.Rp.Startup/Views/Home/Index.cshtml

@@ -0,0 +1,6 @@
+<ul>
+    @foreach (var claim in User.Claims)
+    {
+        <li>@claim.Type : @claim.Value</li>
+    }
+</ul>