feat: update ProductController route and enhance authentication configuration

This commit is contained in:
Marek Lesko
2025-07-29 16:23:12 +00:00
parent 9217e805e9
commit 329fb94a3a
4 changed files with 26 additions and 24 deletions

View File

@@ -22,17 +22,17 @@ namespace Api
})
.AddJwtBearer(options =>
{
options.Events = new JwtBearerEvents
{
OnTokenValidated = context => Task.CompletedTask,
OnChallenge = context => Task.CompletedTask
};
// options.Events = new JwtBearerEvents
// {
// OnTokenValidated = context => Task.CompletedTask,
// OnChallenge = context => Task.CompletedTask
// };
options.Authority = builder.Configuration.GetConnectionString("Authentication:PocketId:Authority");
options.Authority = builder.Configuration["Authentication:PocketId:Authority"];
options.TokenValidationParameters = new Microsoft.IdentityModel.Tokens.TokenValidationParameters()
{
// ValidAudiences = builder.Configuration.GetSection("Authentication:PocketId:Audiences").Get<string[]>(),
ValidIssuers = builder.Configuration.GetSection("Authentication:PocketId:Authority").Get<string[]>()
ValidAudiences = builder.Configuration["Authentication:PocketId:ClientId"].Split(';').Select(i => i.Trim()).ToArray(),
ValidIssuers = builder.Configuration["Authentication:PocketId:Authority"].Split(';').Select(i => i.Trim()).ToArray()
};
});
@@ -65,19 +65,19 @@ namespace Api
app.UseSwagger();
app.UseSwaggerUI();
app.Use(async (context, next) =>
{
if (context.Request.Method == HttpMethods.Options)
{
context.Response.Headers.Add("Access-Control-Allow-Origin", "*");
context.Response.Headers.Add("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");
context.Response.Headers.Add("Access-Control-Allow-Headers", "Content-Type");
context.Response.StatusCode = StatusCodes.Status204NoContent;
return;
}
// app.Use(async (context, next) =>
// {
// if (context.Request.Method == HttpMethods.Options)
// {
// context.Response.Headers.Add("Access-Control-Allow-Origin", "*");
// context.Response.Headers.Add("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");
// context.Response.Headers.Add("Access-Control-Allow-Headers", "Content-Type");
// context.Response.StatusCode = StatusCodes.Status204NoContent;
// return;
// }
await next();
});
// await next();
// });
if (!app.Environment.IsDevelopment())
{
app.UseHttpsRedirection();