OpenIdDict 4 (26.12.2022 W)

Question 1

What if you enable passthrough, but don’t provide action or forget to add MapControllers?

Answer 1

You will receive 404 not found status code

Question 2

What does SignIn method do in token action of the controller?

Answer 2

It is standard ControllerBase method.
It creates SignInResult which is ActionResult. Receiving it middleware calls HttpContext.SignInAsync().

You have to specify OpenIdDict authentication scheme. It makes middleware passes controll to OpeidDict. Which issues tokens for you.

SignInResult must contain ClaimsPrincipal created by you.

Question 3

Why OpenIdDict doesn’t include scopes automatically?

Answer 3

OpenIddict has already checked if the requested scopes are allowed (in general and for the current client). The reason why we have to add the scopes manually here is that we are able to filter the scopes granted here if we want to.

Question 4

How to enable Implicit Flow on server level?

Answer 4

AddServer().AllowImplicitFlow()

Question 5

Hot to enable AuthorizationCode flow?

Answer 5

AddServer().AllowAuthorizationCodeFlow()

Question 6

Hot to enable AuthorizationCode flow and require PKCE?

Answer 6

AddServer().AllowAuthorizationCodeFlow().RequireProofKeyForCodeExchange()