c7edcd4f58
OidcDeskCredential authenticates a bearer through the validation scheme only (never the default scheme; the cookie authenticates nothing on /api/desk and a bearer authenticates no cookie page) and returns sub, audience and scopes. The desk keeps judging audience, scope and per-request Active membership. The issuer registers desk.read/desk.answer and stamps audience bifrost-desk on tokens that carry one; client permissions are what limit scopes, so the MAS client can neither ask for them nor use its chat token on the desk. A Desk section without Bifrost:Oidc now fails startup in StartupConfigurationValidator. Packages: OpenIddict.Validation.AspNetCore and .ServerIntegration 7.7.1. No production Ratatoskr client is seeded. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
26 lines
1.3 KiB
XML
26 lines
1.3 KiB
XML
<Project Sdk="Microsoft.NET.Sdk.Web">
|
|
|
|
<PropertyGroup>
|
|
<TargetFramework>net8.0</TargetFramework>
|
|
<Nullable>enable</Nullable>
|
|
<ImplicitUsings>enable</ImplicitUsings>
|
|
</PropertyGroup>
|
|
|
|
<ItemGroup>
|
|
<PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="8.0.0">
|
|
<PrivateAssets>all</PrivateAssets>
|
|
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
|
|
</PackageReference>
|
|
<PackageReference Include="BouncyCastle.Cryptography" Version="2.4.0" />
|
|
<PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="8.0.0" />
|
|
<!-- Direct pins lift transitive packages past their advisories; the lockfile holds the result. -->
|
|
<PackageReference Include="Npgsql" Version="8.0.3" />
|
|
<PackageReference Include="System.Text.Json" Version="8.0.5" />
|
|
<PackageReference Include="Microsoft.Extensions.Caching.Memory" Version="8.0.1" />
|
|
<PackageReference Include="OpenIddict.Server.AspNetCore" Version="7.7.1" />
|
|
<PackageReference Include="OpenIddict.Validation.AspNetCore" Version="7.7.1" />
|
|
<PackageReference Include="OpenIddict.Validation.ServerIntegration" Version="7.7.1" />
|
|
<PackageReference Include="OpenIddict.EntityFrameworkCore" Version="7.7.1" />
|
|
</ItemGroup>
|
|
|
|
</Project>
|