OpenID Connect login plugin (6/7)

Directory.Packages.props

@@ -41,6 +41,7 @@
     <PackageVersion Include="Microsoft.AspNetCore.JsonPatch.SystemTextJson" Version="10.0.12" />
     <PackageVersion Include="Microsoft.AspNetCore.Authentication.Facebook" Version="10.0.12" />
     <PackageVersion Include="Microsoft.AspNetCore.Authentication.Google" Version="10.0.12" />
+    <PackageVersion Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="10.0.12" />
     <PackageVersion Include="Braintree" Version="5.41.0" />
     <PackageVersion Include="System.Configuration.ConfigurationManager" Version="10.0.12" />
     <PackageVersion Include="System.Linq.Dynamic.Core" Version="1.7.4" />

GrandNode.slnx

@@ -37,6 +37,7 @@
   <Folder Name="/Plugins/">
     <Project Path="src/Plugins/Authentication.Facebook/Authentication.Facebook.csproj" />
     <Project Path="src/Plugins/Authentication.Google/Authentication.Google.csproj" />
+    <Project Path="src/Plugins/Authentication.OpenIdConnect/Authentication.OpenIdConnect.csproj" />
     <Project Path="src/Plugins/DiscountRules.Standard/DiscountRules.Standard.csproj" />
     <Project Path="src/Plugins/ExchangeRate.McExchange/ExchangeRate.McExchange.csproj" />
     <Project Path="src/Plugins/Payments.BrainTree/Payments.BrainTree.csproj" />

src/Plugins/Authentication.OpenIdConnect/Areas/Admin/Controllers/OidcLoginSettingsController.cs

@@ -0,0 +1,90 @@
+using Authentication.OpenIdConnect.Models;
+using Grand.Business.Core.Interfaces.Common.Configuration;
+using Grand.Business.Core.Interfaces.Common.Localization;
+using Grand.Business.Core.Interfaces.Common.Security;
+using Grand.Domain.Permissions;
+using Grand.Infrastructure.Configuration;
+using Grand.Web.Common.Controllers;
+using Grand.Web.Common.Security.Authorization;
+using Microsoft.AspNetCore.Mvc;
+
+namespace Authentication.OpenIdConnect.Areas.Admin.Controllers;
+
+[PermissionAuthorize(PermissionSystemName.ExternalAuthenticationMethods)]
+public class OidcLoginSettingsController : BaseAdminPluginController
+{
+    #region Ctor
+
+    public OidcLoginSettingsController(
+        OidcLoginSettings oidcLoginSettings,
+        OidcResourceServerConfig resourceServerConfig,
+        OidcLoginConfig oidcLoginConfig,
+        ITranslationService translationService,
+        IPermissionService permissionService,
+        ISettingService settingService)
+    {
+        _oidcLoginSettings = oidcLoginSettings;
+        _resourceServerConfig = resourceServerConfig;
+        _oidcLoginConfig = oidcLoginConfig;
+        _translationService = translationService;
+        _permissionService = permissionService;
+        _settingService = settingService;
+    }
+
+    #endregion
+
+    #region Fields
+
+    private readonly OidcLoginSettings _oidcLoginSettings;
+    private readonly OidcResourceServerConfig _resourceServerConfig;
+    private readonly OidcLoginConfig _oidcLoginConfig;
+    private readonly ITranslationService _translationService;
+    private readonly IPermissionService _permissionService;
+    private readonly ISettingService _settingService;
+
+    #endregion
+
+    #region Methods
+
+    public async Task<IActionResult> Configure()
+    {
+        if (!await _permissionService.Authorize(StandardPermission.ManageExternalAuthenticationMethods))
+            return AccessDeniedView();
+
+        var model = new ConfigurationModel {
+            Authority = _resourceServerConfig.Authority,
+            ClientId = _oidcLoginConfig.ClientId,
+            //never the secret itself
+            ClientSecret = _translationService.GetResource(string.IsNullOrWhiteSpace(_oidcLoginConfig.ClientSecret)
+                ? "Plugins.ExternalAuth.OpenIdConnect.ClientSecret.NotSet"
+                : "Plugins.ExternalAuth.OpenIdConnect.ClientSecret.Set"),
+            DisplayOrder = _oidcLoginSettings.DisplayOrder
+        };
+
+        return View(model);
+    }
+
+    [HttpPost]
+    [AutoValidateAntiforgeryToken]
+    public async Task<IActionResult> Configure(ConfigurationModel model)
+    {
+        if (!await _permissionService.Authorize(StandardPermission.ManageExternalAuthenticationMethods))
+            return AccessDeniedView();
+
+        if (!ModelState.IsValid)
+            return await Configure();
+
+        _oidcLoginSettings.DisplayOrder = model.DisplayOrder;
+
+        await _settingService.SaveSetting(_oidcLoginSettings);
+
+        //now clear settings cache
+        await _settingService.ClearCache();
+
+        Success(_translationService.GetResource("Admin.Plugins.Saved"));
+
+        return await Configure();
+    }
+
+    #endregion
+}

src/Plugins/Authentication.OpenIdConnect/Areas/Admin/Views/OidcLoginSettings/Configure.cshtml

@@ -0,0 +1,35 @@
+@model Authentication.OpenIdConnect.Models.ConfigurationModel
+@{
+    Layout = "_AdminLayout";
+    ViewBag.Title = "OpenID Connect";
+}
+
+<input id="active-menu-item" type="hidden" value="/Admin/ExternalAuthentication/Methods"/>
+@* the identity provider and the client come from appsettings and are shown read-only; the secret is never shown *@
+<form asp-controller="OidcLoginSettings" asp-area="Admin" asp-action="Configure" method="post">
+    <admin-page title="OpenID Connect" icon="bi-person-badge">
+        <page-actions>
+            <button type="submit" name="save" class="btn btn-primary">
+                <i class="bi bi-check-lg"></i> @Loc["Admin.Common.Save"]
+            </button>
+        </page-actions>
+
+        <div class="note note-info">
+            @Html.Raw(Loc["Plugins.ExternalAuth.OpenIdConnect.Description"])
+        </div>
+        <admin-card>
+            <div class="grand-fields grand-fields--2col">
+                <admin-field asp-for="Authority">
+                    <input asp-for="Authority" type="text" disabled class="form-control text-box single-line"/>
+                </admin-field>
+                <admin-field asp-for="ClientId">
+                    <input asp-for="ClientId" type="text" disabled class="form-control text-box single-line"/>
+                </admin-field>
+                <admin-field asp-for="ClientSecret">
+                    <input asp-for="ClientSecret" type="text" disabled class="form-control text-box single-line"/>
+                </admin-field>
+                <admin-field asp-for="DisplayOrder" size="sm"/>
+            </div>
+        </admin-card>
+    </admin-page>
+</form>

src/Plugins/Authentication.OpenIdConnect/Areas/Admin/_ViewImports.cshtml

@@ -0,0 +1,9 @@
+@addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
+@addTagHelper *, Grand.Web.Common
+@addTagHelper *, Grand.Web
+
+@using Microsoft.AspNetCore.Mvc.ViewFeatures
+@using Grand.Infrastructure.Extensions
+@using Grand.Web.Common.Localization
+
+@inject LocService Loc

src/Plugins/Authentication.OpenIdConnect/Authentication.OpenIdConnect.csproj

@@ -0,0 +1,34 @@
+<Project Sdk="Microsoft.NET.Sdk.Razor">
+	<Import Project="..\..\Build\Grand.Common.props" />
+	<Import Project="..\..\Build\Grand.Plugin.props" />
+	<PropertyGroup>
+		<AddRazorSupportForMvc>true</AddRazorSupportForMvc>
+		<StaticWebAssetsEnabled>false</StaticWebAssetsEnabled>
+	</PropertyGroup>
+	<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|AnyCPU'">
+		<OutputPath>..\..\Web\Grand.Web\Plugins\Authentication.OpenIdConnect</OutputPath>
+		<OutDir>$(OutputPath)</OutDir>
+	</PropertyGroup>
+
+	<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|AnyCPU'">
+		<OutputPath>..\..\Web\Grand.Web\Plugins\Authentication.OpenIdConnect</OutputPath>
+		<OutDir>$(OutputPath)</OutDir>
+	</PropertyGroup>
+
+	<ItemGroup>
+		<PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" />
+	</ItemGroup>
+
+	<!--
+		The handler package pulls in Microsoft.IdentityModel.*, System.IdentityModel.Tokens.Jwt and
+		Microsoft.Bcl.Cryptography, which the host already ships (JwtBearer). Plugin assemblies are
+		loaded by path, so a second copy that drifts from the host's could break plugin discovery.
+		Only the handler package itself is copied to the plugin folder.
+	-->
+	<Target Name="KeepOnlyHandlerPackage" BeforeTargets="_CopyFilesMarkedCopyLocal;GenerateBuildDependencyFile">
+		<ItemGroup>
+			<ReferenceCopyLocalPaths Remove="@(ReferenceCopyLocalPaths)" Condition="'%(ReferenceCopyLocalPaths.NuGetPackageId)' != 'Microsoft.AspNetCore.Authentication.OpenIdConnect'" />
+		</ItemGroup>
+	</Target>
+
+</Project>

src/Plugins/Authentication.OpenIdConnect/Components/OidcLoginViewComponent.cs

@@ -0,0 +1,17 @@
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Mvc;
+
+namespace Authentication.OpenIdConnect.Components;
+
+[ViewComponent(Name = "OidcLogin")]
+public class OidcLoginViewComponent(IAuthenticationSchemeProvider authenticationSchemeProvider) : ViewComponent
+{
+    public async Task<IViewComponentResult> InvokeAsync()
+    {
+        //no scheme (not configured, or not restarted since the install): a button that can only fail is not shown
+        if (await authenticationSchemeProvider.GetSchemeAsync(OidcLoginDefaults.AuthenticationScheme) == null)
+            return Content(string.Empty);
+
+        return View();
+    }
+}