i tried to secure mt API in .Net Core 3.1, using OAuthentication with bitbucket client-id and clientSecret ,
i am authenticated and then i have "Invalid redirect_uri" error
here is the associated Url:
https://bitbucket.org/site/oauth2/authorize?client_id=xxxxxxxxxxx&scope=&response_type=code&redirect_uri=https%3A%2F%2Flocalhost%3A44377%2F&state=CfDJ8E2YW5aczspHtpcKCUDMSdbgg_7hYceedO7ugVfBCyZza0Rxq5uoBHPRvM8dxipLeZHNXnK_KEaV6SQuVhp-yRSBQzQ7ItQGhc7uS2oAWDp-z1hyTf70MmprHFXSQDQ4nKgb7KCvRtPb8ZJe4_wAVCaHDU-G15vzxeEw4u-zKVjv_kUA5JC9OFkw4tFrQgaJ92CCxDGDutdY38PVsDS65p4iOTWdQ0ACqY0jidEucAEK
i think that i have a probleme on "callbackPath"
------------------my code snippets---------------/////----------------------------------------
services.AddAuthentication(config =>
{ // we check cookie to confirm that we are authenticated
config.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
// when we sign in , we will deal out a cookie
config.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
// use this to check if we are allowed to do something
config.DefaultChallengeScheme = "OurServer";
}).AddCookie().AddOAuth("OurServer", config =>
{
config.ClientId = Configuration["OurServer:ClientId"];
config.ClientSecret = Configuration["OurServer:ClientSecret"];
config.CallbackPath = new PathString("/");
config.AuthorizationEndpoint = "https://bitbucket.org/site/oauth2/authorize"; //
config.TokenEndpoint = "https://bitbucket.org/site/oauth2/access_token";
config.SaveTokens = true;
config.Events = new OAuthEvents()
{
OnCreatingTicket = context =>
{
var accessToken = context.AccessToken;
var base64payload = accessToken.Split('.')[1];
var bytes = Convert.FromBase64String(base64payload);
var JSonpayload = Encoding.UTF8.GetString(bytes);
var claims = JsonConvert.DeserializeObject<Dictionary<string, string>>(JSonpayload);
foreach(var claim in claims)
{
context.Identity.AddClaim(new Claim(claim.Key, claim.Value));
}
return Task.CompletedTask;
}
};
}).AddOAuthValidation();
--------------------------------------/////----------------------------------------------
Does anyone have encountered this problem or know the solution?
