OpenIddict Files

This release introduces the following changes:

• Similarly to what was already possible with the OpenIddict client system integration, the ASP.NET Core (and OWIN) hosts now allow overriding the requested scopes dynamically/per challenge. For that, an OpenIddictClientAspNetCoreConstants.Properties.Scope property must be added to the AuthenticationProperties.Items collection with the space-separated list of scopes that should be attached to the authorization request:

  :::csharp var properties = new AuthenticationProperties(new Dictionary<string, string> { // Note: when only one client is registered in the client options, // specifying the issuer URI or the provider name is not required. [OpenIddictClientAspNetCoreConstants.Properties.ProviderName] = provider }) { // Only allow local return URLs to prevent open redirect attacks. RedirectUri = Url.IsLocalUrl(returnUrl) ? returnUrl : "/" };

  // Override the scopes configured globally for this challenge operation. properties.SetString(OpenIddictClientAspNetCoreConstants.Properties.Scope, "api_1_scope api_2_scope");

  // Ask the OpenIddict client middleware to redirect the user agent to the identity provider. return Challenge(properties, OpenIddictClientAspNetCoreDefaults.AuthenticationScheme);

• FACEIT is now supported by OpenIddict.Client.WebIntegration.