Gano OIDC ta hanyar wakili da JWKS a cikin .NET tare da HttpDocumentRetriever

Saka HttpClient da ya san wakili a cikin retriever da binciken saitin Microsoft.IdentityModel ke amfani da shi, tare da kiyaye manufofin sabuntawa da tabbatarwa.

var handler = new HttpClientHandler
{
    Proxy = new WebProxy("http://proxy.example:8080"),
    UseProxy = true
};
var http = new HttpClient(handler);
var documents = new HttpDocumentRetriever(http);

var configuration = await OpenIdConnectConfigurationRetriever.GetAsync(
    "https://issuer.example/.well-known/openid-configuration",
    documents,
    cancellationToken);

HttpDocumentRetriever ya fito daga Microsoft.IdentityModel.Protocols; OpenIdConnectConfigurationRetriever ya fito daga fakitin OpenIdConnect nasa. Ka riƙe abokin ciniki na HTTP a raye tsawon aikinsa. Don adiresoshin discovery da JWKS na jama'a inda aka yarda da masu shiga tsakani na jama'a, jerin wakilan HTTP yana ba da 'yan takara don adireshin WebProxy.

Binciken yana ɗaukar discovery da farko sannan ya yi amfani da wannan retriever ɗin da aka bayar don jwks_uri, idan akwai. Waɗannan adiresoshin na iya kasancewa a kan masu masauki daban-daban, kuma wakilin dole ya yarda da duka biyun.

Don tabbatar da wakili, saita asusun WebProxy kafin ginawa. Wannan ba sirrin abokin ciniki na mai bayarwa ba ne.

A cikin sabis ɗin tabbatarwa na dogon lokaci, ba da wannan retriever ga tsarin ajiya da sabuntawa da aka tallafa maimakon sauke saitin ga kowace buƙata mai shigowa. Ka riƙe manufofin mai bayarwa, amincewar HTTPS da tabbatar da alamar a matsayin masu zaman kansu daga wannan zaɓin jigilar.

Labarai masu alaƙa