public static void AddAuthServices(this IServiceCollection services, IHostEnvironment environment)
{
services.AddIdentity <IdentityUser, IdentityRole>(config =>
{
config.SignIn.RequireConfirmedEmail = false;
config.Tokens.PasswordResetTokenProvider = TokenOptions.DefaultPhoneProvider;
})
.AddEntityFrameworkStores <Db>()
.AddRoles <IdentityRole>()
.AddDefaultTokenProviders();
JwtSecurityTokenHandler.DefaultInboundClaimTypeMap.Clear(); // => remove default claims
services
.AddAuthentication(options =>
{
options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
options.DefaultScheme = JwtBearerDefaults.AuthenticationScheme;
options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
})
.AddJwtBearer(cfg =>
{
cfg.RequireHttpsMetadata = false;
cfg.SaveToken = true;
cfg.TokenValidationParameters = new TokenValidationParameters
{
ValidIssuer = environment.GetJwtIssuer(),
ValidAudience = environment.GetJwtIssuer(),
IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(environment.GetJwtKey())),
ClockSkew = TimeSpan.Zero // remove delay of token when expire
};
}).AddFacebook(facebookOptions => // are these really needed?
{
facebookOptions.AppId = environment.GetFbAppId();
facebookOptions.AppSecret = environment.GetFbSecret();
});
services.AddScoped <IUserAuthManager, UserAuthManager>();
services.AddScoped <ITokenGenerator, TokenGenerator>();
}