AuthorizationServerMetaData.cs

using System.Collections.Generic;
using System.Text;
using System.Threading.Tasks;
using Waher.Networking.HTTP.OAuth.MetaData;
using Waher.Runtime.Collections;
using Waher.Security.JWS;
 
namespace Waher.Networking.HTTP.OAuth
{
    public class AuthorizationServerMetaData : OAuthResource, IHttpGetMethod
    {
        public const string WellKnowResourcePath = "/.well-known/oauth-authorization-server";
 
        public AuthorizationServerMetaData(OAuth2Environment Environment)
            : base(Environment, WellKnowResourcePath)
        {
            Environment.Register(this);
        }
 
        public bool AllowsGET => true;
 
        public async Task GET(HttpRequest Request, HttpResponse Response)
        {
            StringBuilder sb = ProtectedResourceMetaData.GenerateServerUrl(Request, out _);
            string ServerUrl = sb.ToString();
 
            sb.Append(this.Environment.AuthorizeResource.ResourceName);
            string AuthorizeUri = sb.ToString();
            string TokenUri = ServerUrl + OAuthTokenResource.DefaultResourcePath;
 
            ChunkedList<string> GrantTypesSupported = new ChunkedList<string>(6)
            {
                "authorization_code",
                "implicit",
                "client_credentials",
                "password",
                "refresh_token"
            };
 
            if (this.Environment.HasDeviceAuthorizationResource)
                GrantTypesSupported.Add(OAuthDeviceAuthorizationResource.GrantType);
 
            Dictionary<string, object> MetaData = new Dictionary<string, object>()
            {
                { "issuer", ServerUrl },
                { "authorization_endpoint", AuthorizeUri },
                { "token_endpoint", TokenUri },
                { "scopes_supported", OAuthScopesSupportedAttribute.RegisteredScopes },
                { "token_endpoint_auth_methods_supported", new string[]
                    {
                        "client_secret_basic",
                        "client_secret_post"
                    } 
                },
                { "token_endpoint_auth_signing_alg_values_supported", JwsAlgorithm.GetAlgorithmNames() },
                { "response_types_supported", new string[] { "code", "token" } },
                { "code_challenge_methods_supported", new string[] { "plain", "S256" } },
                { "authorization_response_iss_parameter_supported", this.JwtFactory.HasIssuer },
                { "grant_types_supported", GrantTypesSupported.ToArray() }
            };
 
            if (this.Environment.HasRegistrationResource)
                MetaData["registration_endpoint"] = ServerUrl + this.Environment.RegistrationResource.ResourceName;
 
            if (this.Environment.HasDeviceAuthorizationResource)
                MetaData["device_authorization_endpoint"] = ServerUrl + this.Environment.DeviceAuthorizationResource.ResourceName;
 
            if (this.Environment.HasIntrospectionResource)
            {
                MetaData["introspection_endpoint"] = ServerUrl + this.Environment.IntrospectionResource.ResourceName;
                MetaData["introspection_endpoint_auth_methods_supported"] = new string[]
                {
                    "client_secret_basic",
                    "client_secret_post"
                };
            }
 
            await Response.Return(MetaData);
        }
    }
}