#Backend For Frontend

This project is a modified version leastprivilege / AspNetCoreSecuritySamples / BFF. It demonstrates the same features but utilizes Microsoft's YARP: Reverse-Proxy.

• A server-side backend for user authentication and session management via Identity Server
• SameSite cookies
• Automatic token management
• Proxying calls to back-end services with YARP

The Host project is configured to use cookies and an in-memory token management system. It requests the following scopes from Identity Server, openid, offline_access, profile, and api. The token from Identity Server is stored in memory and then trasferred to the Authorization header as a Bearer token for external API requests. The Api project is configured to use a JWT Bearer token for authentication. It expects the token to contain an api scope, if none is found or the user is not authentiated that 401 Access Denied response will be sent back.

The SpaHost project follows the same setup as the Host project. The implementation utilizes route guards to protect the Guarded Route component. When the user visits the Fetch User data page they will get redirected to the Identity Server login page. Once they are authenticated they will be redirected back to the MVC controller that will direct the user back to the original page based on the redirect parameter. The Guarded Route will also become visible after the user has logged in.