Best Way to Access Open ID Connect Policy?

[Mike-E-angelo]

This is related to this question:
#19146

I fixed one issue but now have run into another. Namely, I am attempting to use an authority with http:// in it and when doing so with the default policy it results in the following error:

System.InvalidOperationException: Error loading discovery document: Error connecting to http://10.0.2.2:5275/.well-known/openid-configuration. HTTPS required.

In order to fix this I have to modify the Open Id Connect Policy. Unfortunately, it seems all the components where this is stored are internal (namely Uno.Extensions.Authentication.Oidc.OidcAuthenticationSettings).

I have attempted to access the options after the IHost is created and running the following code:

var snapshot = host.Services.GetRequiredService<IOptionsSnapshot<OidcClientOptions>>();
var options  = snapshot.Value;
options.Policy.Discovery.RequireHttps = false;

But this doesn't seem to fix the issue. Is there a better/preferred way to access the OpenIdClientOptions used in .Extensions.Authentication.Oidc.OidcAuthenticationSettings ?

[Mike-E-angelo]

Figured this one out. 😌🙏

The trick is to use PostConfigure but make sure to use the same name you are passing to AddOidc. Ironically PostConfigure was one of the first strategies I attempted, but I forgot the name. It must be the same as the name being used to bind configuration. Very obvious now in hindsight but I am glad I can cross this off my list:

sealed class ConfigureHostBuilder : ICommand<IHostBuilder>
{
	public static ConfigureHostBuilder Default { get; } = new();

	ConfigureHostBuilder() : this("OidcAuthentication") {}

	public ConfigureHostBuilder(string name)
	{
		_name     = name;
	}

	public void Execute(IHostBuilder parameter)
	{
		parameter
// ... omitted
		         .UseAuthentication(y => y.AddOidc(name: _name))
		         .ConfigureServices(x => x.PostConfigure<OidcClientOptions>(_name,
		                                                                    y =>
		                                                                    {
			                                                                    y.Policy.Discovery.RequireHttps = false;
			                                                                    y.BackchannelHandler = new HttpClientHandler
			                                                                    {
				                                                                    ServerCertificateCustomValidationCallback =
					                                                                    (_, _, _, _) => true
			                                                                    };
		                                                                    }))
// ... omitted
;
	}
}