ASP.NET Core 6.0 Tutorial

//Program.cs

// Add services to the container.
// Add runtime compilation for hot reload
builder.Services.AddControllersWithViews().AddRazorRuntimeCompilation();

builder.Services.AddAuthentication(options =>
{
  // If an authentication cookie is present, use it to get authentication information
  options.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
  options.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
  options.DefaultChallengeScheme = CookieAuthenticationDefaults.AuthenticationScheme;
})
.AddCookie() // cookie authentication middleware first
.AddOpenIdConnect("PlusAuth", options =>
{
  options.ClientId = builder.Configuration["Plusauth:ClientId"];
  options.ClientSecret = builder.Configuration["Plusauth:ClientSecret"];
  options.Authority = builder.Configuration["Plusauth:AuthUrl"];
  options.ResponseType = "code";
  options.Scope.Clear();
  options.Scope.Add("openid");
  options.Scope.Add("email");
  options.Scope.Add("profile");
  // Get user info after authentication
  options.GetClaimsFromUserInfoEndpoint = true;
  // This is important to get user information
  // Map All user information into User Claims
  ClaimActionCollectionMapExtensions.MapAll(options.ClaimActions); 
  // Set Authentication Issuer
  options.ClaimsIssuer = "PlusAuth";
  options.CallbackPath = new PathString("/callback");

  options.Events = new OpenIdConnectEvents
  {
    // Configure post logout redirect
    // This section provides logout action for PlusAuth
    OnRedirectToIdentityProviderForSignOut = (context) =>
    {
      // Set PlusAuth logout endpoint
      var logoutUri = $"{builder.Configuration["Plusauth:AuthUrl"]}/oidc/logout?client_id={builder.Configuration["Plusauth:ClientId"]}";

      var postLogoutUri = context.Properties.RedirectUri;
      if (!string.IsNullOrEmpty(postLogoutUri))
      {
        if (postLogoutUri.StartsWith("/"))
        {
          postLogoutUri = context.Request.Scheme + "://" + context.Request.Host + context.Request.PathBase + postLogoutUri;
        }
        // Return index page after logout
        logoutUri += $"&post_logout_redirect_uri={ Uri.EscapeDataString(postLogoutUri)}";
      }

      context.Response.Redirect(logoutUri);
      context.HandleResponse();

      return Task.CompletedTask;
    }
  };
});

var app = builder.Build();

//... rest of the code

app.UseAuthentication();
// Use authorization to protect endpoints
app.UseAuthorization();
app.UseCookiePolicy();

//... rest of the code

app.Run();

// Controllers/AccountController.cs

public class AccountController : Controller
  {
    public async Task Login(string returnUrl = "/")
    {
      await HttpContext.ChallengeAsync("PlusAuth", new AuthenticationProperties() { RedirectUri = returnUrl });
    }

    [Authorize]
    public async Task Logout()
    {
      await HttpContext.SignOutAsync("PlusAuth", new AuthenticationProperties
      {
        // Indicate that PlusAuth should redirect the user after logout.
        RedirectUri = "/"
      });
      await HttpContext.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
    }
  }

// Controllers/HomeController.cs

public class HomeController : Controller
{
  private readonly ILogger<HomeController> _logger;

  public HomeController(ILogger<HomeController> logger)
  {
    _logger = logger;
  }

  public IActionResult Index()
  {
    return View();
  }

  [Authorize]
  public IActionResult Profile()
  {
    return View();
  }

  [ResponseCache(Duration = 0, Location = ResponseCacheLocation.None, NoStore = true)]
  public IActionResult Error()
  {
    return View(new ErrorViewModel { RequestId = Activity.Current?.Id ?? HttpContext.TraceIdentifier });
  }
}