Okta Provider not respecting Options settings about aspnet.security.oauth.providers HOT 3 OPEN

I'm minded to not change anything for this, as this is customisable using built-in configuration functionality, even though it is maybe not 100% intuitive due to us building the URLs for you in the default case.

Sounds very reasonable. Customizing the endpoints is generally reserved to very specific scenarios, so not sure it's worth changing anything on our end.

from aspnet.security.oauth.providers.

We can look at making a change to have it only set the values if they are null.

In the meantime, you could workaround this with the following code snippet:

services.AddOkta("TestScheme");
services.AddOptions<OktaAuthenticationOptions>("TestScheme")
        .PostConfigure((options) =>
        {
            options.AuthorizationEndpoint = "whatever";
            options.TokenEndpoint = "whatever";
            options.UserInformationEndpoint = "whatever";
        });

EDIT: Updated code snippet after testing.

from aspnet.security.oauth.providers.

I'm minded to not change anything for this, as this is customisable using built-in configuration functionality, even though it is maybe not 100% intuitive due to us building the URLs for you in the default case.

You can see in this test that you can further configure the options after OktaPostConfigureOptions has run: martincostello@cdeb022#diff-410fc1906e363b918ed101da30985db9efb377bb50945d8e3c058af8a7e584ff

Otherwise if we use ??= instead of = to assign the endpoint property values, the original way of configuring things would work, or PostConfigure can be simplified to Configure in that case.

Thoughts @kevinchalet?

from aspnet.security.oauth.providers.