triggermeelmo/Watcher
1
0
Fork 0
Code Issues 11 Pull Requests Actions 1 Packages Projects 3 Releases Wiki Activity

OIDC Integration
All checks were successful
Gitea CI/CD / dotnet-build-and-test (push) Successful in 10m0s
Details
Gitea CI/CD / Set Tag Name (push) Successful in 5s
Details
Gitea CI/CD / docker-build-and-push (push) Successful in 11m39s
Details
Gitea CI/CD / Create Tag (push) Successful in 5s
Details

Browse Source
This commit is contained in:
Daniel Habenicht
2026-01-21 10:05:03 +01:00
parent d23a73c0d5
commit ad9b6bfdaf
10 changed files with 482 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

39
watcher-monitoring/Program.cs
View File

@@ -1,10 +1,13 @@
using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Authentication.OpenIdConnect;
using Microsoft.AspNetCore.Mvc;
using Microsoft.EntityFrameworkCore;
using Microsoft.IdentityModel.Protocols.OpenIdConnect;
using Microsoft.OpenApi.Models;
using Serilog;
using watcher_monitoring.Configuration;
using watcher_monitoring.Data;
var builder = WebApplication.CreateBuilder(args);
@@ -27,6 +30,10 @@ builder.Host.UseSerilog();
DotNetEnv.Env.Load();
builder.Configuration.AddEnvironmentVariables();
// OIDC-Einstellungen laden
var oidcSettings = OidcSettings.FromEnvironment();
builder.Services.AddSingleton(oidcSettings);
// Konfiguration laden
var configuration = builder.Configuration;
@@ -44,7 +51,7 @@ builder.Services.AddDbContext<WatcherDbContext>((serviceProvider, options) =>
builder.Services.AddControllersWithViews();
// Cookie-basierte Authentifizierung
builder.Services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
var authBuilder = builder.Services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
.AddCookie(options =>
{
options.LoginPath = "/Auth/Login";
@@ -57,6 +64,36 @@ builder.Services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationSc
options.Cookie.SameSite = SameSiteMode.Lax;
});
// OIDC-Authentifizierung (wenn aktiviert)
if (oidcSettings.IsValid)
{
Log.Information("OIDC-Authentifizierung aktiviert für Authority: {Authority}", oidcSettings.Authority);
authBuilder.AddOpenIdConnect(OpenIdConnectDefaults.AuthenticationScheme, options =>
{
options.Authority = oidcSettings.Authority;
options.ClientId = oidcSettings.ClientId;
options.ClientSecret = oidcSettings.ClientSecret;
options.ResponseType = OpenIdConnectResponseType.Code;
options.SaveTokens = true;
options.GetClaimsFromUserInfoEndpoint = true;
options.CallbackPath = oidcSettings.CallbackPath;
options.SignedOutCallbackPath = "/signout-callback-oidc";
options.Scope.Clear();
foreach (var scope in oidcSettings.GetScopes())
{
options.Scope.Add(scope);
}
options.TokenValidationParameters.NameClaimType = oidcSettings.ClaimUsername;
options.TokenValidationParameters.RoleClaimType = "roles";
});
}
else if (oidcSettings.Enabled)
{
Log.Warning("OIDC ist aktiviert aber nicht korrekt konfiguriert. Erforderlich: OIDC_AUTHORITY, OIDC_CLIENT_ID, OIDC_CLIENT_SECRET");
}
builder.Services.AddAuthorization();
// Health Checks