kjuulh/todo
1
0
Fork 0
Code Issues 1 Pull Requests Projects Releases Wiki Activity

Updated with secure cooke
Some checks failed
continuous-integration/drone/pr Build is passing
Details
continuous-integration/drone/push Build is failing
Details

Browse Source
This commit is contained in:
Kasper Juul Hermansen 2021-11-16 23:28:16 +01:00
parent cb43207502
commit fd79027b37
Signed by: kjuulh
GPG Key ID: DCD9397082D97069
2 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/backend/server/src/Todo.Api/Startup.cs
View File

@ -65,7 +65,7 @@ namespace Todo.Api
app.UseRouting(); app.UseRouting();
app.UseCors(); app.UseCors();
app.UseInfrastructure();
app.UseAuthentication(); app.UseAuthentication();
app.UseAuthorization(); app.UseAuthorization();

8
src/backend/server/src/Todo.Infrastructure/DependencyInjection.cs
View File

@ -1,5 +1,6 @@
using System.ComponentModel.DataAnnotations; using System.ComponentModel.DataAnnotations;
using Microsoft.AspNetCore.Builder; using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Http;
using Microsoft.Extensions.Configuration; using Microsoft.Extensions.Configuration;
using Microsoft.Extensions.DependencyInjection; using Microsoft.Extensions.DependencyInjection;
using Microsoft.IdentityModel.Protocols.OpenIdConnect; using Microsoft.IdentityModel.Protocols.OpenIdConnect;
@ -19,6 +20,7 @@ public static class DependencyInjection
.Bind(giteaOptions) .Bind(giteaOptions)
.ValidateDataAnnotations(); .ValidateDataAnnotations();
return services.AddAuthentication(options => return services.AddAuthentication(options =>
{ {
options.DefaultScheme = "Cookies"; options.DefaultScheme = "Cookies";
@ -36,7 +38,11 @@ public static class DependencyInjection
}).Services; }).Services;
} }
public static IApplicationBuilder UseInfrastructure(this IApplicationBuilder app) => app; public static IApplicationBuilder UseInfrastructure(this IApplicationBuilder app) => app.UseCookiePolicy(
new CookiePolicyOptions
{
Secure = CookieSecurePolicy.Always
});
} }
public class GiteaAuthOptions public class GiteaAuthOptions