Stable user endpoints

Removed security deadlock
2026-09-02 16:11:10 +02:00
parent 669945ad13
commit a04e6f6f50
9 changed files with 96 additions and 13 deletions
@@ -135,17 +135,25 @@ public static class Security
        services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
            .AddJwtBearer(options =>
            {
+                options.MapInboundClaims = false;
                options.Authority = authOptions.Authority;
                options.Audience = authOptions.Audience;
+
                options.TokenValidationParameters = new TokenValidationParameters
                {
                    ValidIssuer = authOptions.Authority,
                    ValidateAudience = true,
                    ValidateIssuer = true,
+                    ValidateLifetime = true,
                };
            });

-        services.AddAuthorization();
+        services.AddAuthorizationBuilder()
+            .AddPolicy("ApiScope", policy =>
+            {
+                policy.RequireAuthenticatedUser();
+                policy.RequireClaim("scope", authOptions.Audience!);
+            });

        return services;
    }