Map Keycloak name claim
This commit is contained in:
@@ -12,16 +12,17 @@ builder.Services.AddProblemDetails();
|
|||||||
builder.Services.AddOpenApi();
|
builder.Services.AddOpenApi();
|
||||||
|
|
||||||
builder.Services.AddAuthentication()
|
builder.Services.AddAuthentication()
|
||||||
.AddKeycloakJwtBearer(ServiceNames.Keycloak, KeycloakConstants.Realm, options =>
|
.AddKeycloakJwtBearer(ServiceNames.Keycloak, KeycloakConstants.Realm, options =>
|
||||||
{
|
{
|
||||||
var keycloakHost = builder.Configuration.GetValue<string>($"services:{ServiceNames.Keycloak}:http:0")
|
var keycloakHost = builder.Configuration.GetValue<string>($"services:{ServiceNames.Keycloak}:http:0")
|
||||||
?? throw new InvalidOperationException("Keycloak host is not configured.");
|
?? throw new InvalidOperationException("Keycloak host is not configured.");
|
||||||
|
|
||||||
options.MetadataAddress = $"{keycloakHost}/realms/{KeycloakConstants.Realm}/.well-known/openid-configuration";
|
options.MetadataAddress = $"{keycloakHost}/realms/{KeycloakConstants.Realm}/.well-known/openid-configuration";
|
||||||
options.RequireHttpsMetadata = !builder.Environment.IsDevelopment();
|
options.RequireHttpsMetadata = !builder.Environment.IsDevelopment();
|
||||||
options.Audience = KeycloakConstants.ClientId;
|
options.Audience = KeycloakConstants.ClientId;
|
||||||
options.Authority = keycloakHost;
|
options.Authority = keycloakHost;
|
||||||
});
|
options.TokenValidationParameters.NameClaimType = "preferred_username";
|
||||||
|
});
|
||||||
builder.Services.AddAuthorization();
|
builder.Services.AddAuthorization();
|
||||||
|
|
||||||
var app = builder.Build();
|
var app = builder.Build();
|
||||||
@@ -31,29 +32,37 @@ app.UseExceptionHandler();
|
|||||||
|
|
||||||
if (app.Environment.IsDevelopment())
|
if (app.Environment.IsDevelopment())
|
||||||
{
|
{
|
||||||
app.MapOpenApi();
|
app.MapOpenApi();
|
||||||
}
|
}
|
||||||
|
|
||||||
app.UseAuthentication();
|
app.UseAuthentication();
|
||||||
app.UseAuthorization();
|
app.UseAuthorization();
|
||||||
|
|
||||||
string[] summaries =
|
string[] summaries =
|
||||||
["Freezing", "Bracing", "Chilly", "Cool", "Mild", "Warm", "Balmy", "Hot", "Sweltering", "Scorching"];
|
["Freezing", "Bracing", "Chilly", "Cool", "Mild", "Warm", "Balmy", "Hot", "Sweltering", "Scorching"];
|
||||||
|
|
||||||
app.MapGet("/weatherforecast", () =>
|
app.MapGet("/weatherforecast", () =>
|
||||||
{
|
{
|
||||||
var forecast = Enumerable.Range(1, 5).Select(index =>
|
var forecast = Enumerable.Range(1, 5).Select(index =>
|
||||||
new WeatherForecast
|
new WeatherForecast
|
||||||
(
|
(
|
||||||
DateOnly.FromDateTime(DateTime.Now.AddDays(index)),
|
DateOnly.FromDateTime(DateTime.Now.AddDays(index)),
|
||||||
Random.Shared.Next(-20, 55),
|
Random.Shared.Next(-20, 55),
|
||||||
summaries[Random.Shared.Next(summaries.Length)]
|
summaries[Random.Shared.Next(summaries.Length)]
|
||||||
))
|
))
|
||||||
.ToArray();
|
.ToArray();
|
||||||
return forecast;
|
return forecast;
|
||||||
})
|
})
|
||||||
.WithName("GetWeatherForecast")
|
.WithName("GetWeatherForecast")
|
||||||
.RequireAuthorization();
|
.RequireAuthorization();
|
||||||
|
|
||||||
|
app.MapGet("/test", (HttpContext context) =>
|
||||||
|
{
|
||||||
|
_ = context.User;
|
||||||
|
return TypedResults.Ok();
|
||||||
|
})
|
||||||
|
.WithName("Test Endpoint")
|
||||||
|
.RequireAuthorization();
|
||||||
|
|
||||||
app.MapDefaultEndpoints();
|
app.MapDefaultEndpoints();
|
||||||
|
|
||||||
@@ -61,5 +70,5 @@ app.Run();
|
|||||||
|
|
||||||
record WeatherForecast(DateOnly Date, int TemperatureC, string? Summary)
|
record WeatherForecast(DateOnly Date, int TemperatureC, string? Summary)
|
||||||
{
|
{
|
||||||
public int TemperatureF => 32 + (int)(TemperatureC / 0.5556);
|
public int TemperatureF => 32 + (int)(TemperatureC / 0.5556);
|
||||||
}
|
}
|
||||||
Reference in New Issue
Block a user