DuendeSoftware / Samples

Samples for our Products
Other
225 stars 269 forks source link

BFF sample to show notifications on back-channel logout #108

Open brockallen opened 1 year ago

brockallen commented 1 year ago

For the scenario where the customer wants to do some push notification to the client (e.g. SignalR).

rogue-ninja-creative commented 1 year ago

Any update on this expected in the near future? I'm trying to implement a .NET 7 BFF with Vue.js and SignalR. Unfortunately, my Google searches have come up empty in terms of how to replace IUserTokenStore as suggested in another issue.

joelcoxokc commented 1 year ago

Bump

nikriaz commented 4 months ago

Any news so far? Some docs would be really helpful, I'm a bit lost.

I use BFF 2.2.0 with server side sessions and it seems like SignalR just works with default cookie-based auth (with no config on SignalR JS client side at all), seems like over WS as expected. According to people, it should not. Maybe my BFF is misconfigured?

I also tried to move SignalR client to WebWorker where the cookie is not easily accessible and switch to JWT auth, don't even know how to start with BFF.

hugh-maaskant commented 4 months ago

I too would really appreciate more guidance on how to use the (very desirable) Duende BFF framework with a .NET 8 Blazor Web App that contains both Server Side Rendered pages and WASM (no pre-rendering in my case) rendered pages. The WASM pages have a SignalR connection to the server to give real-time client site updates to the server and push server updates to the browser; note: not for the .NET framework itself (it is a multi-player card game app).

I understand that SignalR authenticates at connection set-up, and then not ever again. If necessary for security I could add logic to have the server ask the client to disconnect/reconnect from/to the server Hub when its authorization window expired, but this does feel rather hacky :-(.

Are there any examples of such a setup? If given sufficient guidance I would not mind building a simple demo and give that to Duende for others to look at (once reviewed by Duende for stupid security flaws obviously).

Thanks