How to implement OpenIddict validation per tenant ?

[jpsalleras]

I cant find the way to resolve this, i need to implement openididct validation instropection per tenant. It's posible ?

`services.AddOpenIddict()
.AddValidation(options =>
{

          options.SetIssuer("https://localhost:7250");

          options.UseIntrospection()
                 .SetClientId("ApiTenant01")
                 .SetClientSecret("api01-web-app-secret");

          options.UseSystemNetHttp();
          options.UseAspNetCore();


      });`
      
     I tried : 

    services.PostConfigurePerTenant<OpenIddictValidationBuilder, IMultiTenantInfo>
(
   (options, tenantInfo) =>
   {
       options.SetIssuer(tenantInfo.OpenIdAuthority);

       options.UseIntrospection()
              .SetClientId("ApiTenant01")
              .SetClientSecret("api01-web-app-secret");

   }
);

[AndrewTriesToCode]

Hi, it should be possible.

Take a look at OpenIddictValidationBuilder source and you'll see the methods like SetIssuer and SetClientId are really just helper classes that internally configure OpenIddictValidationOptions

So in your PerTenantPostConfiguration you'll want to use OpenIddictValidationOptions as the first template parameter not OpenIddictValidationBuilder.

[jpsalleras]

thanks a lot!, its works but's call the configuration only the first run. What i'm doing wrong ?

services.AddOpenIddict()
.AddValidation(options =>
{
options.UseSystemNetHttp();
options.UseAspNetCore();
});

services.ConfigurePerTenant<OpenIddictValidationOptions, IMultiTenantInfo>(
(options, tenantInfo) =>
{
options.Issuer = new Uri(tenantInfo.OpenIdAuthority);
options.ClientId = "ApiTenant01";
options.ClientSecret = "api01-web-app-secret";
options.ValidationType = OpenIddictValidationType.Introspection;
});

[jpsalleras]

sry, works greate ! i'm calling wrong tenant host.