Where can I find the values of blazorweba_oidcpkce_sample:access in class AccessPolicyAttribute of BlazorWebAssemblyOidcSample.Server.Policys?

Question

I cannot find the values of blazorweba_oidcpkce_sample:access issued by FoxIDs. I wonder if it should stored it in appsettings.json. Thanks!

Answer 1

The sample client blazorweba_oidcpkce_sample is configured in FoxIDs and the client is granted the blazorweba_oidcpkce_sample:access scope which gives access to call the backend API. Both the frontend client and and backend resource (API) have the same name (blazorweba_oidcpkce_sample) in this scenarie.

The sample client request the blazorweba_oidcpkce_sample:access which is configured in appsettings.json.

The API verificeres that the access token contain the scope and grant access if the scope is present.

The test user [email protected] with password TestAccess! on the FoxIDs test track has two roles role1 and role2. It is possible to require e.g. role1 in the policy like this:

public static void AddPolicy(AuthorizationOptions options)
{
    options.AddPolicy(_name, policy =>
    {
        policy.RequireScopeAndRoles(
            new ScopeAndRoles { Scope = "blazorweba_oidcpkce_sample:access", Roles = new [] { "role1" } }
        );
    });
}