Can i using OpenId module authenticate client consuming a GraphQL api

[vitalybrandes]

Can i somehow using OpenId module authenticate/authorize client consuming a GraphQL api from external site or i need to make my own module?

[Skrypt]

That's what the OpenId module is for. Maybe we need more documentation?

[kevinchalet]

The OpenID module has a built-in server you can use to issue tokens than can be validated by the validation feature. To use token authentication in your APIs, use [Authorize(AuthenticationSchemes = "Api")].

Regarding scopes, not sure I got the question right: they are fully supported and they are not tied to a specific client. In the future tho, we'll have a way to configure each app to be able to request each scope or not: #1981.

[vitalybrandes]

@kevinchalet Hi,
my original question was regarding OpenId client module,
can i create multiple code based authentications via OpenId servers (to get data from them by API.)

[MichaelPetrinolis]

@vitalybrandes OpenID client does not support multiple servers. It is used to authenticate users from one OpenID provider. You could save external user's token to call an external API that is protected with that IdP. If you need your application to consume external APIs that are protected by different Idps, you should implement your own module to keep the auth tokens for each API and configure the authentication for each one of the HTTP Client that you will use

[vitalybrandes]

Thank you!

[yassinsayed]

@MichaelPetrinolis Is there documentation or guide for this approach