Azure AD B2C BackofficeAuthenticationExtensions.cs

BackofficeAuthenticationExtensions.cs

    using Microsoft.AspNetCore.Authentication.Cookies;
    using Microsoft.AspNetCore.Authentication.MicrosoftAccount;
    using Microsoft.AspNetCore.Authentication.OpenIdConnect;
    using Microsoft.Identity.Web;
    using Microsoft.IdentityModel.Protocols.OpenIdConnect;
    using System.Security.Claims;

    namespace AzureAD
    {
        public static class BackofficeAuthenticationExtensions
        {
            public static IUmbracoBuilder ConfigureAuthentication(this IUmbracoBuilder builder)
            {
                builder.Services.ConfigureOptions<AzureB2CBackofficeExternalLoginProviderOptions>();



                builder.AddBackOfficeExternalLogins(logins =>
                {
                    //const string schema = MicrosoftAccountDefaults.AuthenticationScheme;

                    logins.AddBackOfficeLogin(
                        backOfficeAuthenticationBuilder =>
                        {
                            backOfficeAuthenticationBuilder.AddOpenIdConnect(
                        backOfficeAuthenticationBuilder.SchemeForBackOffice(AzureB2CBackofficeExternalLoginProviderOptions.SchemeName),
                        options =>
                        {
                            //options.ResponseMode = "query";
                            options.ResponseType = "id_token token";

                            options.Scope.Add("https://sergiuazureadb2c.onmicrosoft.com/api/demo.read");
                            options.Scope.Add("https://sergiuazureadb2c.onmicrosoft.com/api/demo.write");
                            options.Scope.Add("email");
                            options.Scope.Add("openid");
                            options.Scope.Add("offline_access");


                            options.RequireHttpsMetadata = true;



                            //Obtained from the AZURE AD B2C WEB APP
                            options.ClientId = "";
                            //Obtained from the AZURE AD B2C WEB APP
                            options.ClientSecret = "";
                            //Callbackpath - Important! The CallbackPath represents the URL to which the browser should be redirected to and the default value is /signin-oidc.
                            options.CallbackPath = "/signin-oidc";

                            //Obtained from user flows in your Azure B2C tenant
                            options.MetadataAddress = "";

                            options.TokenValidationParameters.SaveSigninToken = true;
                            options.SaveTokens = true;
                            options.GetClaimsFromUserInfoEndpoint = true;

                            options.Events.OnTokenValidated = async context =>
                            {
                                ClaimsPrincipal? principal = context.Principal;
                                if (principal is null)
                                {
                                    throw new InvalidOperationException("No claims found.. :(");
                                    return;
                                }

                                var claims = principal.Claims.ToList();

                                Claim? email = claims.SingleOrDefault(x => x.Type == "emails");
                                if (email is not null)
                                {
                                    claims.Add(new Claim(ClaimTypes.Email, email.Value));
                                }

                                Claim? name = claims.SingleOrDefault(x => x.Type == "name");
                                if (name is not null)
                                {
                                    claims.Add(new Claim(ClaimTypes.Name, name.Value));
                                }

                                var authenticationType = principal.Identity?.AuthenticationType;
                                context.Principal = new ClaimsPrincipal(new ClaimsIdentity(claims, authenticationType));
                            };
                        });
                        });
                });

                return builder;
              
            }
        }
    }