Blazor WASM OIDC authentication with Google fail
I've implemented a Blazor WASM application wiht Google authentication as described here.
If I select "Log in", I get redirected to Google and I can insert my username and password.
At that point Google redirect to the RedirectUri (/authentication/login-callback).
This cause the Blazor SPA to reload, which is expected.
At that point I can see (from Edge Dev Tools) the AuthenticationService.js library to issue a token request to Google, but the request fails.
My understanding so far:
- I'm using an Authentication Code Flow with PKCE: by design, this does not store the client_secret on the client, nor sends it to the IP.
- if I change the ResponseCode to "id_token" as suggested here, authentication complete. But, this way, I'm using Implicit Flow, which is no longer recommended for security reasons.
Thank you.
Unfortunately, google oauth2 "web application" client doesn't really support code flow with PKCE even for now https://stackoverflow.com/a/63275535/20240963.
But the "UWP" client support PKCE https://developers.google.com/identity/protocols/oauth2/native-app#step1-code-verifier. So there is a workaround that you create a "UWP" client, then the authentication will success.
Credentials -> Create credentials -> OAuth client ID -> UWP
You could use this "UWP" client for Blazor WASM. And the store ID can be whatever.
- Replace a dropdownlist by a combobox (editable dropdown)
- How to fix 500.30 - ASP.NET CORE app failed to start
- How can I programmatically determine the Blazor render mode
- How do I integration test a SoapCore endpoint?
- How to add an environment indicator into a razor page?
- Implement dotnet core Identity Provider server for Google
- ASP.Net Core API failing when I try to return results from Active Directory search and some values are empty
- View is not found when a Web App is deployed with Azure DevOps
- Set Log Levels for Microsoft.* , System, and AspNet when using Serilog
- tsconfig.json: Build:No inputs were found in config file
- Docker: No frameworks and runtimes were found (.NET 8)
- Logging in ASP.NET Core Main
- System.Net.Http vs Microsoft.Net.Http
- Get caller info for injected service in .NET Core
- LINQ Query Translation Error with Array of Search Queries in EF Core
- Cannot export file on .NET Core application
- Using ASP.Net Core Identity for Razor page web app and MAUI app
- Store does not implement IUserRoleStore<TUser> ASP.NET Core Identity
- Applying EF Core Global Filter to a collection of tenants instead of a single TenantId
- Usehealthchecks vs Maphealthchecks
- How to resolve "TypeError: Failed to fetch" error on Blazor?
- @Html.Action in Asp.Net Core
- Why does ASP.NET Core 9 strip out importmap?
- Exclude specific endpoint serilog logging using aspnet core
- Why use AddScoped() instead of AddSingleton()?
- Blazor requesting a json file
- ASP.NET Core clear cache from IMemoryCache (set by Set method of CacheExtensions class)
- EF Core multitenacy, different schema. EF Core does not change the table schema when the API is at runtime
- NLOG Database Target can't connect
- Entity Framework Core: `SqlNullValueException: Data is Null.` How to troubleshoot?