使用 dotnet core 5 的 Openiddict 给出错误“此服务器仅接受 HTTPS 请求”。

Question

我试图oidc-client在角度应用程序中使用 with oppeniddict 但存在错误.well-known/openid-configuration。

错误说：

GET http://localhost:2987/.well-known/openid-configuration 400 (Bad Request)

我在 dot-net core 5 应用程序中有 openiddict 实现。

然后我抓取 URLhttp://localhost:2987/.well-known/openid-configuration 并在浏览器中浏览它，我收到错误：

{
  "error": "invalid_request",
  "error_description": "This server only accepts HTTPS requests.",
  "error_uri": "https://documentation.openiddict.com/errors/ID2083"
}

我还从 Web 服务器设置中禁用了 SSL，如图所示：

我的启动ConfigureServices看起来像这样：

public void ConfigureServices(IServiceCollection services)
{

    services.AddDbContext<ApplicationDbContext>(options =>
    {
        options.UseSqlServer(Configuration["ConnectionString"], sqlServerOptionsAction: sqlOptions =>
        {
            sqlOptions.MigrationsAssembly(typeof(Startup).GetTypeInfo().Assembly.GetName().Name);
        });

        options.UseOpenIddict();
    });

    services.AddIdentity<ApplicationUser, IdentityRole>()
       .AddEntityFrameworkStores<ApplicationDbContext>()
       .AddDefaultTokenProviders();



    services.Configure<IdentityOptions>(options =>
    {
        options.ClaimsIdentity.UserNameClaimType = Claims.Name;
        options.ClaimsIdentity.UserIdClaimType = Claims.Subject;
        options.ClaimsIdentity.RoleClaimType = Claims.Role;
    });

    services.AddOpenIddict()


        .AddCore(options =>
        {
            options.UseEntityFrameworkCore()
                   .UseDbContext<ApplicationDbContext>();
        }).AddServer(options =>
       {
           options.SetAuthorizationEndpointUris("/connect/authorize")
                  .SetLogoutEndpointUris("/connect/logout")
                  .SetIntrospectionEndpointUris("/connect/introspect")
                  .SetUserinfoEndpointUris("/connect/userinfo");
          

           options.RegisterScopes(Scopes.Email, Scopes.Profile, Scopes.Roles);
           options.AllowImplicitFlow();

           options.AddEncryptionKey(new SymmetricSecurityKey(
                Convert.FromBase64String("DRjd/GnduI3Efzen9V9BvbNUfc/VKgXltV7Kbk9sMkY=")));


           options.AddDevelopmentSigningCertificate();
          

           options.UseAspNetCore()
                  .EnableAuthorizationEndpointPassthrough()
                  .EnableLogoutEndpointPassthrough()
                  .EnableUserinfoEndpointPassthrough()
                  .EnableStatusCodePagesIntegration();
       }).AddValidation(options =>
       {
           // Import the configuration from the local OpenIddict server instance.
           options.UseLocalServer();

           // Register the ASP.NET Core host.
           options.UseAspNetCore();

           
       });

    services.AddCors(options => options.AddPolicy("ApiCorsPolicy", builder =>
    {
        builder.WithOrigins("http://localhost:4200").AllowAnyMethod().AllowAnyHeader();
    }));
    services.AddControllersWithViews();
}

配置：

public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
{
    app.UseStatusCodePagesWithReExecute("/error");
    app.UseRouting();
    app.UseCors("ApiCorsPolicy");

    app.UseAuthentication();
    app.UseAuthorization();
    app.UseEndpoints(options =>
    {
        options.MapControllers();
        options.MapDefaultControllerRoute();
    });
}

我觉得我错过了一些非常容易做的事情。但找不到真正的原因。StackOverflow 中没有任何问题。

这是 Openiddict 的错误还是 dot net core 5 本身的错误？任何能够解决这个问题的指南或解决方法将不胜感激。

Answer 1

我最近也遇到了这个问题。默认情况下，Openiddict SSL 处于启用状态。如果你想禁用 ssl 检查。

您可以通过以下代码禁用它

   options.UseAspNetCore().DisableTransportSecurityRequirement();

Answer 2

在方法中使用下面的代码

public override void PreConfigureServices(ServiceConfigurationContext context)
    {
        PreConfigure<OpenIddictBuilder>(builder =>
        {
            builder.AddValidation(options =>
            {
                options.AddAudiences("PaymentService");
                options.UseLocalServer();
                options.UseAspNetCore();
            });

//below code needs to be added

            builder.AddServer(options => { options.UseAspNetCore().DisableTransportSecurityRequirement(); });
        });
    }