Question: How to setup OIDC configuration globally?

[Sen-Gupta]

We are adding sites to Oqtane programatically and would like to add global configuration for External Logins(OIDC) so that each site can benefit from external login, instead of specifying External login over and over again.

I have read in the Oqtane Security implementation that there is something called global configuration for External Login. I'm unable to find it.

Apologies if it sounds like stupid but I have less than 20 hours on Oqtane so far.

[sbwalker]

The concept is that External Login settings can be set globally in appsettings.json similar to the .NET Core Identity options. There is a method ConfigureOqtaneAuthenticationOptions() to read the OIDC and OAuth settings - however it has not been tested as much as the per-site options, so you may encounter some challenges.

[sbwalker]

After reviewing the code, it appears some modifications will be required to allow global configuration for External Login via appsettings.

[Sen-Gupta]

@sbwalker, thanks for confirming it!
If you can drop a hint, I can try to do a PR for it.

[sbwalker]

Sorry for the slow response... as a general rule in Oqtane we are trying to minimize the clutter in appsettings as it tends to be problematic for upgrades, etc... in the long term. So as an alternative I am trying to explore the challenges in storing these global settings in the database - there is a HostSettings concept in the framework already... it is more a matter of determining a UX strategy which aligns with the current patterns.