chore: end 2 end testing

.github/workflows/cicd.yml

@@ -38,6 +38,17 @@ jobs:
       working-directory: src/oidc-guard
       run: docker build -t oidc-guard .
 
+    - name: Add hosts to /etc/hosts
+      run: |
+          sudo echo "127.0.0.1 demo-app.test.loc" | sudo tee -a /etc/hosts
+          sudo echo "127.0.0.1 oidc-guard.test.loc" | sudo tee -a /etc/hosts
+          sudo echo "127.0.0.1 oidc-server.oidc-server" | sudo tee -a /etc/hosts
+
+    - name: Install Playwright
+      working-directory: tests/oidc-guard-tests/bin/Release/net8.0
+      run: ./playwright.ps1 install --with-deps
+      shell: pwsh
+
     - name: .NET Test
       run: dotnet test -c Release --collect:"XPlat Code Coverage"
 

src/oidc-guard/Program.cs

@@ -110,6 +110,7 @@
                 o.ClientSecret = settings.Cookie.ClientSecret;
                 o.CorrelationCookie.Name = settings.Cookie.CookieName;
                 o.MetadataAddress = settings.OpenIdProviderConfigurationUrl;
+                o.RequireHttpsMetadata = settings.RequireHttpsMetadata;
                 o.NonceCookie.Name = settings.Cookie.CookieName;
                 o.ResponseType = OpenIdConnectResponseType.Code;
                 o.SaveTokens = settings.Cookie.SaveTokensInCookie;
@@ -129,6 +130,8 @@
         {
             auth.AddJwtBearer(o =>
             {
+                o.RequireHttpsMetadata = settings.RequireHttpsMetadata;
+
                 if (!string.IsNullOrEmpty(settings.JWT.JWKSUrl))
                 {
                     var httpClient = new HttpClient(o.BackchannelHttpHandler ?? new HttpClientHandler())
@@ -181,8 +184,6 @@
 
         var app = builder.Build();
 
-        app.UseHttpLogging();
-
         app.UseForwardedHeaders();
 
         app.Use((context, next) =>
@@ -227,6 +228,8 @@
             return next();
         });
 
+        app.UseHttpLogging();
+
         app.UseAuthentication();
         app.UseAuthorization();
 
@@ -264,7 +267,7 @@
                 {
                     foreach (var item in skipEquals)
                     {
                         var commaIndex = item.IndexOf(',');
                         if (commaIndex != -1)
                         {
                             var method = item[..commaIndex];
@@ -291,7 +294,7 @@
                 {
                     foreach (var item in skipNotEquals)
                     {
                         var commaIndex = item.IndexOf(',');
                         if (commaIndex != -1)
                         {
                             var method = item[..commaIndex];

src/oidc-guard/Settings.cs

@@ -5,6 +5,7 @@
     public bool SkipAuthPreflight { get; set; }
     public LogLevel LogLevel { get; set; }
     public string OpenIdProviderConfigurationUrl { get; set; } = null!;
+    public bool RequireHttpsMetadata { get; set; } = true;
     public string? Host { get; set; }
     public string? Scheme { get; set; }
     public CookieAuthSettings Cookie { get; set; } = new();
@@ -21,7 +22,7 @@
     public string ClientSecret { get; set; } = null!;
     public string CookieName { get; set; } = "oidc-guard";
     public string? CookieDomain { get; set; }
     public string[] Scopes { get; set; }
     public string[]? AllowedRedirectDomains { get; set; }
 }