Access token not included on connection. Blazor WebAssembly app.

[kadickerss]

Sorry to open an issue. This could be a configuration problem, but before I continue, I wanted to ask "Is this even supported?"

I have working code I copied from a .Net Core console app into this Blazor app, to use the Blazor as the front-end.

I used fiddler to confirm the token is retrieved. It is just not included as a bearer token on the request that requires authentication.

None of this is internet-facing. It's all back-end code for internal systems.

255_Full.txt

public static async Task Main(string[] args) { var builder = WebAssemblyHostBuilder.CreateDefault(args); builder.RootComponents.Add("app");

        builder.Services.AddDistributedMemoryCache();

        string devAvatar = "DevAvatar";

        builder.Services.AddAccessTokenManagement(options =>
        {
            options.Client.Clients.Add(devAvatar, new ClientCredentialsTokenRequest
            {
                Address = "https://devauth/identity/connect/token",
                ClientId = "conveyable-restock-api",
                ClientSecret = "P^1IVpH@%1^mR7v@",
                Scope = "hl:conveyable-restock-api:driver"
            });
        });

        builder.Services.AddHttpClient("DevDisplayApi", configureClient: client =>
        {
            client.BaseAddress = new Uri("https://devservices/ConveyableRestock/api/Display");
        });

        builder.Services.AddClientAccessTokenClient("DevDriverApi", tokenClientName: devAvatar, configureClient: client =>
        {
            client.BaseAddress = new Uri("https://devservices/ConveyableRestock/secureapi/");
        });

        await builder.Build().RunAsync();
    }

[kadickerss]

Closing for now. Exceptions regarding CORS are being thrown and caught. I did not see them originally.

[kadickerss]

So, the problem appears to be CORS related. As I understand, the HttpClient coded in Blazor runs in the WASM/Browser sandbox and the browser is preventing the successful response containing the token from making it's way back into the HttpClient to be processed. So, I think the issue is how to configure CORS in the setup for ClientCredentialsTokenRequest that is being added to the builder services in the Blazor app startup.

[leastprivilege]

Any update on this?

[kadickerss]

@leastprivilege I have not worked on this further. I have not heard from IdentityModel people either. I'm moving towards Web Assembly client with server backend and away from direct connections for my needs. Still need to do this, though.

[leastprivilege]

closing due to inactivity.

[github-actions[bot]]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue.