OpenShift OAuth

oauth.yaml

apiVersion: oauth.openshift.io/v1
kind: OAuthClient
metadata:
  name: my-aspnet-app
secret: <your-client-secret>
redirectURIs:
  - https://my-aspnet-app.example.com/signin-oidc
grantMethod: auto

Program.cs

services.AddAuthentication(options =>
{
    options.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
    options.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
    options.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme;
})
.AddCookie()
.AddOpenIdConnect(options =>
{
    options.Authority = "https://<openshift-auth-server>";
    options.ClientId = "my-aspnet-app";
    options.ClientSecret = "<your-client-secret>";
    options.CallbackPath = "/signin-oidc";
    options.ResponseType = "code";
    options.SaveTokens = true;
    options.GetClaimsFromUserInfoEndpoint = true;
    options.Scope.Add("openid");
    options.Scope.Add("profile");
    options.Scope.Add("email");
});