nicosabena

// This rule will get the groups for users coming from Azure AD
// Auth0 already has the option to do that, but it (currently) won't work
// if the user is coming from a different directory than the directory
// where the app is registered (this can happen with multi-tenant apps).
// This is a variation that gets an access token for Azure AD using the
// client-credential grants instead of using the access token given to the user.
// It's useful if a new access token from Azure AD is not obtained every time the rule runs,
// or if WS-Federation is used instead of OIDC.
// 
// After the rule runs, you will have the 'groups' property in the user

nicosabena

// This rule will get the groups for users coming from Azure AD
// Auth0 already has the option to do that, but it (currently) won't work
// if the user is coming from a different directory than the directory
// where the app is registered (this can happen with multi-tenant apps).
// It uses the access_token provided by Azure AD, so this needs
// the 'Open ID Connect' protocol selected in the Azure AD connection.
// 
// After the rule runs, you will have the 'groups' property in the user
// that you can use to add custom claims to the id_token.
// 

nicosabena

function (user, context, callback) {
  
  // this rule requires the following configuration values:
  // CAPTCHA_SECRET: a 32 bytes string that will be the shared secret between
  //                 the rule and the webtask
  // AUTH0_DOMAIN: your auth0 domain (e.g. account.auth0.com)
  // CAPTCHA_REDIRECT: the URL for the webtask that will show and process CAPTCHA

  // Put a specific client ID if you dont want CAPTCHA for every client
  // if (context.clientID !== '[your client id]')

nicosabena

using System;
using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Hosting;
using Microsoft.AspNetCore.Http;
using Microsoft.Extensions.Configuration;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Logging;
using Microsoft.Extensions.Options;
using Microsoft.IdentityModel.Tokens;