private void ConfigureSecurity(IServiceCollection services)
{
var identityServer = services.AddIdentityServer(options =>
{
// Use ONLY for developing! Never use this in production. Never.
options.RequireSsl = false;
options.IssuerUri = "http://localhost:5001/";
options.SigningCertificate = _certificate;
});
identityServer.AddInMemoryClients(Clients.Get());
identityServer.AddInMemoryScopes(Scopes.Get());
identityServer.AddInMemoryUsers(Users.Get());
// Enable CORS on identity server
identityServer.Services.AddTransient<ICorsPolicyService>(p => {
var corsService = new DefaultCorsPolicyService(p.GetRequiredService<ILogger<DefaultCorsPolicyService>>());
corsService.AllowAll = true;
return corsService;
});
}
public DefaultCorsPolicyServiceTests()
{
subject = new DefaultCorsPolicyService(new FakeLogger<DefaultCorsPolicyService>());
}
