fengling/fengling-platform
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 13 Wiki Activity

feat[platform]: add fengling-api OAuth client for introspection

Browse Source 
- Add RegisterApiClientAsync to seed OpenIddict applications
- Register fengling-api client for Console backend token introspection
- Client secret: fengling-api-secret (Confidential, with Introspection permission)

This enables Console backend to validate tokens via introspection endpoint.
This commit is contained in:
movingsam 2026-02-21 16:43:26 +08:00
parent 95bd5847f7
commit e9b7a362e0
1 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
Fengling.Platform.Infrastructure/SeedData.cs
View File

@ -85,6 +85,7 @@ public static class SeedData
await RegisterCustomScopesAsync(scopeManager);
await RegisterVbenConsoleClientAsync(applicationManager);
await RegisterSwaggerClientAsync(applicationManager);
await RegisterApiClientAsync(applicationManager);
}
private static async Task RegisterCustomScopesAsync(IOpenIddictScopeManager scopeManager)
@ -193,4 +194,26 @@ public static class SeedData
}
});
}
private static async Task RegisterApiClientAsync(IOpenIddictApplicationManager applicationManager)
{
var existingClient = await applicationManager.FindByClientIdAsync("fengling-api");
if (existingClient != null)
{
return;
}
await applicationManager.CreateAsync(new OpenIddictApplicationDescriptor
{
ClientId = "fengling-api",
ClientSecret = "fengling-api-secret",
DisplayName = "Fengling API (Resource Server)",
ApplicationType = OpenIddictConstants.ApplicationTypes.Web,
ClientType = OpenIddictConstants.ClientTypes.Confidential,
Permissions =
{
OpenIddictConstants.Permissions.Endpoints.Introspection
}
});
}
}