Middleware not invoked when using custom endpoints

[ricksearcy]

Our system passes some claims to Elsa via JWT. We then have middleware to read the token. All works fine when using the built in /Execute endpoint, but if we try and use any custom HTTP activities the middleware is never invoked. Is there a way to get this to work?

[glime-ai[bot]]

To ensure that your custom HTTP activities in Elsa workflows can process JWT tokens and invoke your middleware, you need to configure the HTTP activities to use the authentication middleware. This typically involves setting up the authentication and authorization services correctly in your Startup.cs or Program.cs file, depending on the version of ASP.NET Core you are using.

Here are the steps you should follow:

1. Ensure that you have configured the authentication services to validate JWT tokens. This includes setting up the AddAuthentication method with the correct scheme and options for JWT bearer tokens.

2. Configure the authorization services with the necessary policies that your application requires.

3. Make sure that the middleware for authentication and authorization is correctly ordered in the request processing pipeline. The authentication middleware should be registered before the authorization middleware, and both should be registered before the Elsa HTTP activities middleware.

4. If you are using Elsa's HTTP Endpoint activities, ensure that the UseHttpActivities middleware is registered after the authentication and authorization middleware.

5. If you have custom middleware that needs to process the token, ensure that it is also correctly registered in the pipeline.

6. Verify that the HTTP activities in your workflows are configured to require authentication. This can be done by setting the Authorize property on the HttpEndpoint activity to the name of the policy that should be applied.

Here's an example of how you might configure the services and middleware in Program.cs:

var builder = WebApplication.CreateBuilder(args);

// Add authentication services
builder.Services.AddAuthentication("Bearer")
    .AddJwtBearer("Bearer", options =>
    {
        // Configure JWT bearer options
    });

// Add authorization services
builder.Services.AddAuthorization(options =>
{
    // Define authorization policies
});

var app = builder.Build();

// Use authentication middleware
app.UseAuthentication();

// Use authorization middleware
app.UseAuthorization();

// Use your custom middleware
app.UseYourCustomMiddleware();

// Use Elsa's HTTP activities middleware
app.UseHttpActivities();

app.Run();

If you have followed these steps and are still encountering issues, please provide more details about your configuration and the specific problem you are facing. This will help in giving a more precise solution to your issue.

[ricksearcy]

This is version 3 there is no app.UseHttpActivities();

[raymonddenhaan]

You're right. In Elsa 3 you should use app.UseWorkflows(); instead.