AzureActiveDirectoryV2AuthenticatorConfiguration.cs

// Copyright (c) .NET Foundation. All rights reserved.
// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.

using System;
using System.Configuration;
using System.Globalization;
using Microsoft.Owin.Security;
using Microsoft.Owin.Security.OpenIdConnect;

namespace NuGetGallery.Authentication.Providers.AzureActiveDirectoryV2
{
    public class AzureActiveDirectoryV2AuthenticatorConfiguration : AuthenticatorConfiguration
    {
        public string ClientId { get; set; }
        public string ClientSecret { get; set; }

        public AzureActiveDirectoryV2AuthenticatorConfiguration()
        {
            AuthenticationType = AzureActiveDirectoryV2Authenticator.DefaultAuthenticationType;
        }

        public override void ApplyToOwinSecurityOptions(AuthenticationOptions options)
        {
            base.ApplyToOwinSecurityOptions(options);

            var openIdOptions = options as OpenIdConnectAuthenticationOptions;
            if (openIdOptions != null)
            {
                // Set passive so that a HTTP 401 does not automatically trigger
                // Azure AD authentication. NuGet uses an explicit challenge to trigger
                // the auth flow.
                openIdOptions.AuthenticationMode = AuthenticationMode.Passive;

                // Make sure ClientId and ClientSecret is configured
                if (String.IsNullOrEmpty(ClientId))
                {
                    throw new ConfigurationErrorsException(String.Format(
                        CultureInfo.CurrentCulture,
                        ServicesStrings.MissingRequiredConfigurationValue,
                        "Auth.CommonAuth.ClientId"));
                }

                if (String.IsNullOrEmpty(ClientSecret))
                {
                    throw new ConfigurationErrorsException(String.Format(
                        CultureInfo.CurrentCulture,
                        ServicesStrings.MissingRequiredConfigurationValue,
                        "Auth.CommonAuth.ClientSecret"));
                }

                openIdOptions.ClientId = ClientId;
                openIdOptions.ClientSecret = ClientSecret;
                openIdOptions.Authority = String.Format(CultureInfo.InvariantCulture, AzureActiveDirectoryV2Authenticator.Authority, AzureActiveDirectoryV2Authenticator.V2CommonTenant);
            }
        }
    }
}