Hi, but of a big ask this one - but wondering if anyone can give me pointers on using Authentication with your own controllers and the new backoffice ?
I have a (very nearly) working demo of a dashboard, using a context, and repository, and a datastore and a openapi generated resource to talk to a newly constructed API (using the management api structures, showing its own swagger) to get some simple info from the server (in my case here, time and date as strings).
https://github.com/KevinJump/TimeDashboard/tree/master
this works !! when the
[Authorize(Policy = "New" + AuthorizationPolicies.BackOfficeAccess)]
tag is removed from the controller (so it has no auth!).
put it on, and the dashboard, does 'your session has expired'
I have gone down the road of replicating some of the extra swagger stuff from the core,
https://github.com/KevinJump/TimeDashboard/blob/master/TimeDashboard.Client/Configuration/ConfigureSwaggerGenOptions.cs
(replacing the filters with ones that look for 'time' instead of 'management' for the API)
but i suspect i am either missing something obvious,
or this isn't the way to do this.
anyone, any clues ?
https://cdn.discordapp.com/attachments/1201903877721698395/1201903878304714783/image.png?ex=65cb8336&is=65b90e36&hm=61812c01435b7be7c7e3caf50ff9c27311838a80170d47d6158af10249b1c541&