ASP.NET Core JWT Bearer: dejinta backchannel proxy-ga metadata

Isticmaal BackchannelHttpHandler ka hor inta soo dejintu bilaabmin, haddii aan macmiil buuxa ama maareeyaha qaabeynta gaarka ah horey u lahayn gaadiidkaas.

API waxay qaadan kartaa token bearer oo ku guuldareystaa soo dejinta metadata iyo furaha saxeexa ee server-ka. Habee qaabkaas JWT bearer ka dib diiwaangelintiisa jira iyo ka hor codsiyada:

using System.Net;
using Microsoft.AspNetCore.Authentication.JwtBearer;

builder.Services.Configure<JwtBearerOptions>(
    JwtBearerDefaults.AuthenticationScheme, options =>
    {
        options.BackchannelHttpHandler = new HttpClientHandler
        {
            UseProxy = true,
            Proxy = new WebProxy("http://proxy.example:8080")
        };
    });

La jaanqaad magaca diiwaangashan; haddii uu ka duwan yahay Bearer caadiga ah, isticmaal magaciisa dhabta ah. Ilaali Authority, Audience iyo halbeegyada token-ka ee jira. Barta dhammaadka ee metadata iyo furaha saxeexa ee dadweynaha ayaa isticmaali karta musharrax ka mid ah liiska proxy HTTP ee URL-kan WebProxy ee aan akoonka lahayn marka gelitaanka proxy dadweynaha la ogolaado.

Habeynta caadiga ah, post-configuration waxay ka abuurtaa backchannel handler-kan. Haddii Backchannel buuxa ama ConfigurationManager gaar ah uu horey u bixiyo soo-qaadaha, habee shaygaas beddelkiisa. Hantida handler ma beddelo labadaba.

Deji akoon kasta oo proxy ah WebProxy ka hor isticmaalka, ma aha inaad beddesho Proxy gudaha SendAsync. Ilaali issuer, audience, saxeex, cimri iyo xaqiijiyeyaal dheeraad ah. Gelitaanka OIDC iyo helitaanka token ee gooni ah waxay hayaan waddooyinkooda HTTP.

Maqaallo la xiriira