General/Authentication Provider-specific configuration file schema for ASP.NET development

[mkmills-ec]

I'm just wondering if there's somewhere that I'm able to plainly see (or that someone might be able to explain to me) what the PnPCore and PnPCore.Auth libraries are expecting in terms of configuration for usage in an ASP.NET Core web app? I'm struggling a little to ascertain what each authentication provider requires (in terms of the properties/values to provide in the appsettings.json) so that when I call builder.Services.Configure<PnPCoreOptions>(builder.Configuration.GetSection("PnPCore")); it deserialises into the correctly-typed authentication provider.

In my particular case, I'm trying to use the X509CertificateAuthenticationProvider as a part of my workflow, but I'm uncertain what PnPCore needs in the configuration so that the array items under Credentials > Configurations in appsettings.json get deserialised into the appropriate X509CertificateAuthenticationProvider.

If this is something that requires me to provide the configuration manually as a part of the DI & services container configuration then I can, but I'm sure that isn't necessary :)

[Adam-it]

@mkmills-ec just to clarify, you are asking what you should set in the appsetting.json so that when running

services.Configure<PnPCoreOptions>(Configuration.GetSection("PnPCore"));
services.AddPnPCoreAuthentication();
services.Configure<PnPCoreAuthenticationOptions>(Configuration.GetSection("PnPCore"));

in your ASP.NET Core web app it will use X509Certificate, so the same method as provided here

is that right?

[mkmills-ec]

Hi @Adam-it, effectively yes - I want to be able to cleanly configure the library from appsettings.json, but I wasn't certain what additional information needed providing in the configuration to ensure that it was deserialised correctly. The section you referenced largely provides what I need (and I swear I've seen that snippet a half a dozen times but didn't stop to look whether it applied to me!), so thank you for pointing me in the right direction 😄

With that said, I'm writing a solution that is eventually going to be hosted in Azure and I want to store the X509Certificate in Azure Key Vault. My gut instinct is that I'm going to need to construct the X509Certificate object manually but without understanding what I could provide in configuration, I was a little bit lost.

[Adam-it]

Sorry for the lack of response. Totally get what you mean.
Unfortunately, I do not have any example for this kind of auth usage currently. I will ask around if anyone has and could drop an example or update the guidance.
If not I will try to find some time to go over it myself.