Allow disabling HTTPS redirection via configuration

This commit is contained in:
Warren Chen 2026-04-02 02:41:46 +09:00
parent c56fc21915
commit 89272afc17

View File

@ -33,6 +33,9 @@ if (string.IsNullOrWhiteSpace(jwtAuthority) &&
} }
var signingKey = builder.Configuration["Jwt:SigningKey"]; var signingKey = builder.Configuration["Jwt:SigningKey"];
var useOidcJwks = !string.IsNullOrWhiteSpace(jwtAuthority) || !string.IsNullOrWhiteSpace(jwtMetadataAddress); var useOidcJwks = !string.IsNullOrWhiteSpace(jwtAuthority) || !string.IsNullOrWhiteSpace(jwtMetadataAddress);
var expectedIssuer = builder.Configuration["Jwt:Issuer"];
var expectedAudience = builder.Configuration["Jwt:Audience"];
var requireHttpsMetadata = builder.Configuration.GetValue("Jwt:RequireHttpsMetadata", false);
if (!useOidcJwks && string.IsNullOrWhiteSpace(signingKey)) if (!useOidcJwks && string.IsNullOrWhiteSpace(signingKey))
{ {
@ -44,10 +47,6 @@ if (!useOidcJwks && string.IsNullOrWhiteSpace(signingKey))
builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme) builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
.AddJwtBearer(options => .AddJwtBearer(options =>
{ {
var expectedIssuer = builder.Configuration["Jwt:Issuer"];
var expectedAudience = builder.Configuration["Jwt:Audience"];
var requireHttpsMetadata = builder.Configuration.GetValue("Jwt:RequireHttpsMetadata", false);
if (useOidcJwks) if (useOidcJwks)
{ {
if (!string.IsNullOrWhiteSpace(jwtAuthority)) if (!string.IsNullOrWhiteSpace(jwtAuthority))
@ -127,7 +126,12 @@ if (app.Environment.IsDevelopment())
app.UseSwaggerUI(); app.UseSwaggerUI();
} }
var enableHttpsRedirection = builder.Configuration.GetValue("HttpsRedirection:Enabled", true);
if (enableHttpsRedirection)
{
app.UseHttpsRedirection(); app.UseHttpsRedirection();
}
app.UseAuthentication(); app.UseAuthentication();
app.UseAuthorization(); app.UseAuthorization();
app.Use(async (context, next) => app.Use(async (context, next) =>