jbreuer / umbraco-openidconnect-example Goto Github PK

How to add custom b2c scope to the AddOpenIdConnect options.

@jbreuer, thank you for sharing this code; it has been most helpful.

If you have time, I'm wondering how I might repurpose your code (OnRedirectToIdentityProviderForSignOut) for backoffice users. I have an OpenIdConnect properly configured for sign-in, auto-linking, etc. The last piece of the puzzle is how to trigger this code upon signing out of the backoffice.

I appreciate your help,

I believe this is a flaw in the example, but I would love to be corrected. I'd love even more if you have any idea how to resolve it.

Logging out using this code works fine because we expire our auth cookie. However I think there is a problem with the following user journey.

1. Login to our app
2. Go to another app with the same SSO
3. Go out on that other app
4. Return to our app

In this scenario we have logged out via SSO, but we are still logged in on our app.

Hot to get the name of the groups in a member.
I have the azure AD and i only get the id of the group.

Hi @jbreuer ,

Thank you very much for this repro, it helped me a lot!
However, I still have the following problem: I want members to be able to log in via OpenIdConnect, but only if the member already exists within Umbraco. The members are created manually.
I had hoped that setting autoLinkExternalAccount = false would be sufficient, but then the message appears that there is no link.

Is it possible to use the login functionality of OpenIdConnect, but only for existing members?

Best regards,

iNETZO

Do it work also for Microsoft Azure AD changing the appsettings parameters?
Thanks.

Hey first off this code sample is fantastic, definitely gets me up and running.

I noticed an oddity - when I tried to implement an OpenIdConnect provider (before reading umbraco documentation and using member auto-linking), I hit a snag where my AuthenticationMiddleware and the default callback path of /signin-oidc error.

I noticed this project also exhibits the same error where navigation to /signin-oidc has an exception reproudicble by just running this project.

Do you know more about why this may be or an adjustment that can be made during AddOpenIdConnect? Using IUmbracoBuilder.AddMemberExternalLogins was just slightly different enough from a non-umbraco sample I had working, so this threw me off for some time until I found this project.

Exception: OpenIdConnectAuthenticationHandler: message.State is null or empty.

Unknown location
Exception: An error was encountered while handling the remote login.

Microsoft.AspNetCore.Authentication.RemoteAuthenticationHandler.HandleRequestAsync()

Exception: An error was encountered while handling the remote login.

Microsoft.AspNetCore.Authentication.RemoteAuthenticationHandler<TOptions>.HandleRequestAsync()
Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext context)
StackExchange.Profiling.MiniProfilerMiddleware.Invoke(HttpContext context) in MiniProfilerMiddleware.cs
Umbraco.Cms.Web.Common.Middleware.UmbracoRequestMiddleware.InvokeAsync(HttpContext context, RequestDelegate next)
Umbraco.Cms.Web.Common.Middleware.UmbracoRequestMiddleware.InvokeAsync(HttpContext context, RequestDelegate next)
Microsoft.AspNetCore.Builder.UseMiddlewareExtensions+<>c__DisplayClass6_1+<<UseMiddlewareInterface>b__1>d.MoveNext()
Umbraco.Cms.Web.Common.Middleware.PreviewAuthenticationMiddleware.InvokeAsync(HttpContext context, RequestDelegate next)
Microsoft.AspNetCore.Builder.UseMiddlewareExtensions+<>c__DisplayClass6_1+<<UseMiddlewareInterface>b__1>d.MoveNext()
Umbraco.Cms.Web.Common.Middleware.UmbracoRequestLoggingMiddleware.InvokeAsync(HttpContext context, RequestDelegate next)
Microsoft.AspNetCore.Builder.UseMiddlewareExtensions+<>c__DisplayClass6_1+<<UseMiddlewareInterface>b__1>d.MoveNext()
SixLabors.ImageSharp.Web.Middleware.ImageSharpMiddleware.Invoke(HttpContext httpContext, bool retry)
Microsoft.AspNetCore.Diagnostics.DeveloperExceptionPageMiddlewareImpl.Invoke(HttpContext context)

hi Jeroen

firstly, thanks for this sample project.

does this example require membership records already exist in umbraco, or can it work exclusively with auth0 as a SSO provider?

I was curious why the extra claims you set up in the OnTokenValidated event aren't in the OnAutoLinking callback instead as that seems like the more logical place according to the Umbraco docs (however, i can't get that event to fire, not sure if that's an Umbraco 10 bug or not)

thanks in advance for any feedback/insight you might be able to provide here
Andrew