using System; using System.Net.Http; using IdentityServer4.Extensions; using Microsoft.AspNetCore.Builder; using Microsoft.AspNetCore.Hosting; using Microsoft.AspNetCore.Http; using Microsoft.AspNetCore.Identity; using Microsoft.AspNetCore.Mvc; using Microsoft.EntityFrameworkCore; using Microsoft.Extensions.Configuration; using Microsoft.Extensions.DependencyInjection; using Microsoft.Extensions.Hosting; using IdentityServer4.Services; using Microsoft.AspNetCore.HttpOverrides; using SteamOpenIdConnectProvider.Database; using SteamOpenIdConnectProvider.Profile; namespace SteamOpenIdConnectProvider { public class Startup { public Startup(IConfiguration configuration) { Configuration = configuration; } public IConfiguration Configuration { get; } public void ConfigureServices(IServiceCollection services) { services.AddControllers() .SetCompatibilityVersion(CompatibilityVersion.Version_3_0); services.AddSingleton(Configuration); services.AddDbContext(options => options.UseInMemoryDatabase("default")); services.AddIdentity(options => { options.User.AllowedUserNameCharacters = null; }) .AddEntityFrameworkStores() .AddDefaultTokenProviders(); services.AddIdentityServer(options => { options.UserInteraction.LoginUrl = "/ExternalLogin"; }) .AddAspNetIdentity() .AddInMemoryClients(IdentityServerConfig.GetClients( Configuration["OpenID:ClientID"], Configuration["OpenID:ClientSecret"], Configuration["OpenID:RedirectUri"], Configuration["OpenID:PostLogoutRedirectUri"])) .AddInMemoryPersistedGrants() .AddDeveloperSigningCredential(true) .AddInMemoryIdentityResources(IdentityServerConfig.GetIdentityResources()); services.AddHttpClient(); services.AddAuthentication() .AddCookie(options => { options.Cookie.SameSite = SameSiteMode.Strict; options.Cookie.IsEssential = true; }) .AddSteam(options => { options.ApplicationKey = Configuration["Authentication:Steam:ApplicationKey"]; }); services.AddHealthChecks() .AddUrlGroup(new Uri("https://steamcommunity.com/openid"), "Steam"); } public void Configure(IApplicationBuilder app, IWebHostEnvironment env) { if (env.IsDevelopment()) { app.UseDeveloperExceptionPage(); } if (!string.IsNullOrEmpty(Configuration["Hosting:PathBase"])) { app.UsePathBase(Configuration["Hosting:PathBase"]); } app.UseCookiePolicy(); app.Use(async (ctx, next) => { var origin = Configuration["Hosting:PublicOrigin"]; if (!string.IsNullOrEmpty(origin)) { ctx.SetIdentityServerOrigin(origin); } await next(); }); var forwardOptions = new ForwardedHeadersOptions { ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto, RequireHeaderSymmetry = false }; forwardOptions.KnownNetworks.Clear(); forwardOptions.KnownProxies.Clear(); app.UseForwardedHeaders(forwardOptions); app.UseRouting(); app.UseIdentityServer(); app.UseEndpoints(endpoints => { endpoints.MapControllers(); endpoints.MapHealthChecks("/health"); }); } } }