AspNetCore RC2 MVC アプリケーションで認証するために Azure AD B2C を使用しています。これは、認証が必要なアクションに移動すると、それに応じて B2C ログイン ページにリダイレクトされるという点で部分的に機能します。ログインに成功すると、アプリケーション ページに正しくリダイレクトされます (クエリ パラメータで適切に指定された id_token フィールドを確認できます)。残念ながら、パイプライン認証ミドルウェアはリダイレクト クエリ パラメータを正しく処理していないようで、すぐにログイン ページにリダイレクトされます。誰でもアドバイスできますか？
私が使用しているコードは以下のとおりです。
public static void UseOAuth(this IApplicationBuilder app)
{
// By default, all middleware are passive/not automatic. Making cookie middleware automatic so that it acts on all the messages.
app.UseCookieAuthentication( new CookieAuthenticationOptions{ AutomaticAuthenticate = true, CookieSecure = CookieSecureOption.Never });
app.UseOpenIdConnectAuthentication(new OpenIdConnectOptions {
ClientId = B2CAuthentication.ClientId,
ResponseType = OpenIdConnectResponseTypes.IdToken,
Authority = string.Format(CultureInfo.InvariantCulture, B2CAuthentication.AadInstance, B2CAuthentication.PortalTenant, string.Empty, string.Empty),
AuthenticationScheme = "Cookies",
Events = new OpenIdConnectEvents
{
OnAuthenticationFailed = OnAuthenticationFailed,
OnRedirectToIdentityProvider = OnRedirectToIdentityProvider,
OnAuthorizationCodeReceived = OnAuthorizationCodeReceived,
OnTokenResponseReceived = OnTokenResponseReceived,
OnTokenValidated = OnTokenValidated,
OnTicketReceived = OnTicketReceived,
OnMessageReceived = OnMessageReceived,
OnRedirectToIdentityProviderForSignOut = OnRedirectToIdentityProviderForSignOut,
OnRemoteFailure = OnRemoteFailure,
OnUserInformationReceived = OnUserInformationReceived
},
// The PolicyConfigurationManager takes care of getting the correct Azure AD authentication
// endpoints from the OpenID Connect metadata endpoint. It is included in the PolicyAuthHelpers folder.
ConfigurationManager = new PolicyConfigurationManager(
string.Format(CultureInfo.InvariantCulture, B2CAuthentication.AadInstance, B2CAuthentication.PortalTenant, "/v2.0", "/" + OpenIdProviderMetadataNames.Discovery),
new string[] { B2CAuthentication.ResetPolicy, B2CAuthentication.CommonPolicy, B2CAuthentication.SignInPolicy })
});
}
private static Task OnUserInformationReceived(UserInformationReceivedContext arg)
{
...Never called...
}
private static Task OnRemoteFailure(FailureContext arg)
{
...Never called...
}
private static Task OnRedirectToIdentityProviderForSignOut(RedirectContext arg)
{
...Never called...
}
private static Task OnMessageReceived(MessageReceivedContext arg)
{
...Never called...
}
private static Task OnTicketReceived(TicketReceivedContext arg)
{
...Never called...
}
private static Task OnTokenValidated(TokenValidatedContext arg)
{
...Never called...
}
private static Task OnTokenResponseReceived(TokenResponseReceivedContext arg)
{
...Never called...
}
private static Task OnAuthorizationCodeReceived(AuthorizationCodeReceivedContext arg)
{
...Never called...
}
private static async Task OnRedirectToIdentityProvider(RedirectContext context)
{
PolicyConfigurationManager mgr = (PolicyConfigurationManager)context.Options.ConfigurationManager;
if (context.ProtocolMessage.RequestType == OpenIdConnectRequestType.LogoutRequest)
{
OpenIdConnectConfiguration config = await mgr.GetConfigurationByPolicyAsync(CancellationToken.None, B2CAuthentication.CommonPolicy);
context.ProtocolMessage.IssuerAddress = config.EndSessionEndpoint;
}
else
{
OpenIdConnectConfiguration config = await mgr.GetConfigurationByPolicyAsync(CancellationToken.None, B2CAuthentication.CommonPolicy);
context.ProtocolMessage.IssuerAddress = config.AuthorizationEndpoint;
context.ProtocolMessage.RedirectUri = "http://localhost:8080/Portal/";
context.ProtocolMessage.ResponseType = OpenIdConnectResponseTypes.IdToken;
context.ProtocolMessage.ResponseMode = OpenIdConnectResponseModes.Query;
}
}
private static Task OnAuthenticationFailed(AuthenticationFailedContext context)
{
context.HandleResponse();
context.Response.Redirect("/Home/Error?message=" + context.Exception.Message);
return Task.FromResult(0);
}