Unable to obtain configuration from: https://login.microsoftonline.com/common/dis about active-directory-aspnetcore-webapp-openidconnect-v2 HOT 7 CLOSED

@kalyankrishna1 please share with me what we did with MSAL. We are about 2 weeks out from shipping 5.5.0, if its a small item, we may be able to add it.

from active-directory-aspnetcore-webapp-openidconnect-v2.

@brentschmaltz @mafurman
Is there a way to set a proxy on Config manager?
@brentschmaltz, I believe you are revisiting this code. Is it something we can take into account
cc: @MarkZuber @kalyankrishna1 @TiagoBrenck

from active-directory-aspnetcore-webapp-openidconnect-v2.

@jmprieur I will be looking into this code in the next two weeks. This code requires that the address specified should return the metadata. Is the server required to call the proxy, then the proxy relay the request?
It would be easiest if the proxy was configured to allow this specific call through.

from active-directory-aspnetcore-webapp-openidconnect-v2.

@brubakerjeff , It would be much more easier if the domain "https://login.microsoftonline.com" is whitelisted by Proxy. It will also allow other apps integrating with AAD not change to accommodate the proxy.
We can learn from your feedback and work to expose the HttpClient like we did for MSAL, but consider
the whitelisting as a possible workaround.

from active-directory-aspnetcore-webapp-openidconnect-v2.

@brentschmaltz , I was referring to something similar to this

from active-directory-aspnetcore-webapp-openidconnect-v2.

Oh, we have support for specifying an HttpClient here https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/8b126a518875e3007655f75bbb842d4dffe0650f/src/Microsoft.IdentityModel.Protocols/Configuration/HttpDocumentRetriever.cs#L58, but we don't support HttpClientFactory.

from active-directory-aspnetcore-webapp-openidconnect-v2.

I had the same issue of IDX20803 when creating a protected web api, after several trials found out my appsettings.json needed a fix.
My current appsetting.json
{
"AzureAdB2C": {
"Instance": "https://xxxxxxxxxxxxx.b2clogin.com/tfp",
"ClientId": {Your AppID},
"Domain": "xxxxxxxxxxxxxxxxxxx.onmicrosoft.com",
"SignUpSignInPolicyId": "B2C_1_signupsignin1"
},
"Logging": {
"LogLevel": {
"Default": "Information",
"Microsoft": "Warning",
"Microsoft.Hosting.Lifetime": "Information"
}
},
"AllowedHosts": "*"
}

And this is a screenshot of the Postman OAuth2.0 Authorization facility to access the app:

Hope it helps 👍

from active-directory-aspnetcore-webapp-openidconnect-v2.