Unable to get it to work with the keycloak integration example.

[migoldfinger]

I started with the keycloak example. -> https://learn.microsoft.com/en-us/dotnet/aspire/authentication/keycloak-integration?tabs=dotnet-cli
I added swagger UI for the service.
With the help of this package I was finaly able to enable the authorize button.

However, if I click on authenticate I only see a client-id/secret authentication.
I was hoping for a user/password authentication so that existing users can authenticate.
Regardless of that I was unable to get the authentication working at all.

Could you maybe provide an example how to enable authentication in combination with keycloak?

[xC0dex]

Hey @migoldfinger,

Thanks for using this package. Could you please share the code of how you use APIWeaver? It sounds like the OpenApiSecurityScheme is not configured correctly.

[migoldfinger]

I did change back and forth with all variants I could think of. But I could not get it to run, with trial and error.
The TokenUrl may be not working, but I kind of hope that the Service Discovery is working there too. The keycloak instance is registerd with the name "keycloak".

Ignore Dapr, since it is not relevant for the SwaggerUI.

using APIWeaver;
using Exoda.Configuration.DbContexts;
using Exoda.Configuration.Entities;
using Exoda.Configuration.Interfaces;
using Exoda.Configuration.Services;
using Exoda.ServiceDefaults;
using Microsoft.OpenApi.Models;
using Scalar.AspNetCore;

var builder = WebApplication.CreateBuilder(args);

// Add service defaults & Aspire client integrations.
builder.AddServiceDefaults();

// Add services to the container.
builder.Services.AddProblemDetails();

// Learn more about configuring OpenAPI at https://aka.ms/aspnet/openapi
builder.Services.AddOpenApi(static options =>
                            {
	                            options.AddSecurityScheme("Bearer",
	                                                      static scheme =>
	                                                      {
		                                                      scheme.In = ParameterLocation.Header;
		                                                      scheme.Type = SecuritySchemeType.OAuth2;
		                                                      scheme.Flows = new OpenApiOAuthFlows
		                                                                     {
			                                                                     ClientCredentials = new OpenApiOAuthFlow
				                                                                     {
					                                                                     TokenUrl =
						                                                                     new Uri("https+http://keycloak/realms/WeatherShop/protocol/openid-connect/token")
				                                                                     }
		                                                                     };
	                                                      });
	                            options.AddAuthResponse();
                            });

builder.Services.AddDaprClient();
builder.AddNpgsqlDbContext<ConfigurationContext>("ConfigurationDb");

builder.Services.AddScoped<IConfigurationService, ConfigurationService>();
builder.Services.AddControllers();
if (builder.Environment.IsDevelopment())
{
	builder.Services.AddCors(static options =>
		                         options.AddPolicy("GetOrPost",
		                                           static builder => builder.AllowAnyOrigin().WithMethods("GET", "POST").AllowAnyHeader()));
}

builder.Services
       .AddAuthentication()
       .AddKeycloakJwtBearer("keycloak",
                             "WeatherShop",
                             static options =>
                             {
	                             options.RequireHttpsMetadata = false;
	                             options.Audience = "weather.api";
                             });

builder.Services.AddAuthorizationBuilder();

var app = builder.Build();

// Configure the HTTP request pipeline.
app.UseExceptionHandler();

if (app.Environment.IsDevelopment())
{
	app.MapOpenApi();

	app.UseSwaggerUI(static options => { options.SwaggerEndpoint("/openapi/v1.json", "OpenAPI V1"); });

	app.UseReDoc(static options => { options.SpecUrl("/openapi/v1.json"); });

	app.MapScalarApiReference();

	app.UseCors("GetOrPost");

	await InitializeDevelopmentDatabase(app).ConfigureAwait(false);
}

app.MapControllers();
app.MapDefaultEndpoints();

await app.RunAsync().ConfigureAwait(false);
return;