/// <inheritdoc />
public void Apply(TransformBuilderContext transformBuildContext)
{
var routeValue = transformBuildContext.Route.Metadata?.GetValueOrDefault(Constants.Yarp.TokenTypeMetadata);
var clusterValue =
transformBuildContext.Cluster?.Metadata?.GetValueOrDefault(Constants.Yarp.TokenTypeMetadata);
// no metadata
if (string.IsNullOrEmpty(routeValue) && string.IsNullOrEmpty(clusterValue))
{
return;
}
var values = new HashSet <string>();
if (!string.IsNullOrEmpty(routeValue))
{
values.Add(routeValue);
}
if (!string.IsNullOrEmpty(clusterValue))
{
values.Add(clusterValue);
}
if (values.Count > 1)
{
throw new ArgumentException(
"Mismatching Duende.Bff.Yarp.TokenType route or cluster metadata values found");
}
if (!TokenType.TryParse(values.First(), true, out TokenType tokenType))
{
throw new ArgumentException("Invalid value for Duende.Bff.Yarp.TokenType metadata");
}
transformBuildContext.AddRequestTransform(async transformContext =>
{
transformContext.HttpContext.CheckForBffMiddleware(_options);
var token = await transformContext.HttpContext.GetManagedAccessToken(tokenType);
if (!string.IsNullOrEmpty(token))
{
transformContext.ProxyRequest.Headers.Authorization =
new AuthenticationHeaderValue("Bearer", token);
}
else
{
_logger.AccessTokenMissing(transformBuildContext?.Route?.RouteId ?? "unknown route", tokenType);
}
});
}