Reverted in memory ticket store from RC

Author: Swapnamol

Auth/LearningHub.Nhs.Auth/Filters/SecurityHeadersAttribute.cs

@@ -33,7 +33,7 @@ public override void OnResultExecuting(ResultExecutingContext context)
 
                 // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
                 ////var csp = "default-src 'self'; object-src 'none'; frame-ancestors 'none'; sandbox allow-forms allow-same-origin allow-scripts; base-uri 'self';";
-                var csp = "object-src 'none'; frame-ancestors 'none'; base-uri 'self';";
+                var csp = "object-src 'none'; frame-ancestors 'none'; sandbox allow-forms allow-same-origin allow-scripts allow-popups; base-uri 'self';";
                 //// also consider adding upgrade-insecure-requests once you have HTTPS in place for production
                 ////csp += "upgrade-insecure-requests;";
                 //// also an example if you need client images to be displayed from twitter

Auth/LearningHub.Nhs.Auth/ServiceCollectionExtension.cs

@@ -73,11 +73,7 @@ public static void ConfigureServices(this IServiceCollection services, IConfigur
                 options.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                 options.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
             })
-            .AddCookie(CookieAuthenticationDefaults.AuthenticationScheme, options =>
-            {
-                options.AccessDeniedPath = "/Home/AccessDenied";
-                options.SessionStore = new InMemoryTicketStore(new ConcurrentDictionary<string, AuthenticationTicket>());
-            })
+            .AddCookie()
             .AddOpenIdConnect(
                 "oidc_oa",
                 options =>

LearningHub.Nhs.UserApi/Program.cs

@@ -10,7 +10,7 @@
 
 var logger = NLogBuilder.ConfigureNLog("nlog.config").GetCurrentClassLogger();
 
-var csp = "object-src 'none'; frame-ancestors 'none'; base-uri 'self';";
+var csp = "object-src 'none'; frame-ancestors 'none'; sandbox allow-forms allow-same-origin allow-scripts allow-popups; base-uri 'self';";
 try
 {
     logger.Debug("Log Started");