From f8a16d3e515f1678a4edf2306f4b739e36490f3e Mon Sep 17 00:00:00 2001 From: Luke Latham <1622880+guardrex@users.noreply.github.com> Date: Thu, 27 Mar 2025 10:47:11 -0400 Subject: [PATCH 1/3] Add PAR support configuration (#35073) --- .../security/blazor-web-app-with-oidc.md | 30 +++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/aspnetcore/blazor/security/blazor-web-app-with-oidc.md b/aspnetcore/blazor/security/blazor-web-app-with-oidc.md index b91d485f72c0..26974b7df21f 100644 --- a/aspnetcore/blazor/security/blazor-web-app-with-oidc.md +++ b/aspnetcore/blazor/security/blazor-web-app-with-oidc.md @@ -80,6 +80,16 @@ If using Visual Studio, you can confirm the secret is set by right-clicking the The following configuration is found in the project's `Program` file on the call to : +:::moniker range=">= aspnetcore-9.0" + +* : Controls [Pushed Authorization Requests (PAR) support](xref:aspnetcore-9#openidconnecthandler-adds-support-for-pushed-authorization-requests-par). By default, the setting is to use PAR if the identity provider's discovery document (usually found at `.well-known/openid-configuration`) advertises support for PAR. If you wish to require PAR support for the app, you can assign a value of [`PushedAuthorizationBehavior.Require`](xref:Microsoft.AspNetCore.Authentication.OpenIdConnect.PushedAuthorizationBehavior). PAR isn't supported by Microsoft Entra, and there are no plans for Entra to ever support it in the future. + + ```csharp + oidcOptions.PushedAuthorizationBehavior = PushedAuthorizationBehavior.UseIfAvailable; + ``` + +:::moniker-end + * : Sets the authentication scheme corresponding to the middleware responsible of persisting user's identity after a successful authentication. The OIDC handler needs to use a sign-in scheme that's capable of persisting user credentials across requests. The following line is present merely for demonstration purposes. If omitted, is used as a fallback value. ```csharp @@ -305,6 +315,16 @@ If using Visual Studio, you can confirm the secret is set by right-clicking the The following configuration is found in the project's `Program` file on the call to : +:::moniker range=">= aspnetcore-9.0" + +* : Controls [Pushed Authorization Requests (PAR) support](xref:aspnetcore-9#openidconnecthandler-adds-support-for-pushed-authorization-requests-par). By default, the setting is to use PAR if the identity provider's discovery document (usually found at `.well-known/openid-configuration`) advertises support for PAR. If you wish to require PAR support for the app, you can assign a value of [`PushedAuthorizationBehavior.Require`](xref:Microsoft.AspNetCore.Authentication.OpenIdConnect.PushedAuthorizationBehavior). PAR isn't supported by Microsoft Entra, and there are no plans for Entra to ever support it in the future. + + ```csharp + oidcOptions.PushedAuthorizationBehavior = PushedAuthorizationBehavior.UseIfAvailable; + ``` + +:::moniker-end + * : Sets the authentication scheme corresponding to the middleware responsible of persisting user's identity after a successful authentication. The OIDC handler needs to use a sign-in scheme that's capable of persisting user credentials across requests. The following line is present merely for demonstration purposes. If omitted, is used as a fallback value. ```csharp @@ -520,6 +540,16 @@ If using Visual Studio, you can confirm the secret is set by right-clicking the The following configuration is found in the project's `Program` file on the call to : +:::moniker range=">= aspnetcore-9.0" + +* : Controls [Pushed Authorization Requests (PAR) support](xref:aspnetcore-9#openidconnecthandler-adds-support-for-pushed-authorization-requests-par). By default, the setting is to use PAR if the identity provider's discovery document (usually found at `.well-known/openid-configuration`) advertises support for PAR. If you wish to require PAR support for the app, you can assign a value of [`PushedAuthorizationBehavior.Require`](xref:Microsoft.AspNetCore.Authentication.OpenIdConnect.PushedAuthorizationBehavior). PAR isn't supported by Microsoft Entra, and there are no plans for Entra to ever support it in the future. + + ```csharp + oidcOptions.PushedAuthorizationBehavior = PushedAuthorizationBehavior.UseIfAvailable; + ``` + +:::moniker-end + * : Sets the authentication scheme corresponding to the middleware responsible of persisting user's identity after a successful authentication. The OIDC handler needs to use a sign-in scheme that's capable of persisting user credentials across requests. The following line is present merely for demonstration purposes. If omitted, is used as a fallback value. ```csharp From 5ad952e9aba2c29cd8355584e242275d8495b5d4 Mon Sep 17 00:00:00 2001 From: Tim Deschryver <28659384+timdeschryver@users.noreply.github.com> Date: Thu, 27 Mar 2025 17:58:30 +0100 Subject: [PATCH 2/3] remove broken link --- aspnetcore/tutorials/first-web-api.md | 3 --- aspnetcore/tutorials/first-web-api/includes/first-web-api7.md | 1 - aspnetcore/tutorials/first-web-api/includes/first-web-api8.md | 1 - 3 files changed, 5 deletions(-) diff --git a/aspnetcore/tutorials/first-web-api.md b/aspnetcore/tutorials/first-web-api.md index 6babe3a376c9..53392be102b4 100644 --- a/aspnetcore/tutorials/first-web-api.md +++ b/aspnetcore/tutorials/first-web-api.md @@ -769,9 +769,6 @@ There are many other tools that can be used to test web APIs, for example: * [curl](https://terminalcheatsheet.com/guides/curl-rest-api). Swagger uses `curl` and shows the `curl` commands it submits. * [Fiddler](https://www.telerik.com/fiddler) -For more information, see: - -* [Install and test APIs with `http-repl`](xref:tutorials/first-web-api?view=aspnetcore-6.0&preserve-view=true#ihr6) diff --git a/aspnetcore/tutorials/first-web-api/includes/first-web-api7.md b/aspnetcore/tutorials/first-web-api/includes/first-web-api7.md index d5f08d6a1329..4ba60ef2d201 100644 --- a/aspnetcore/tutorials/first-web-api/includes/first-web-api7.md +++ b/aspnetcore/tutorials/first-web-api/includes/first-web-api7.md @@ -457,7 +457,6 @@ There are many other tools that can be used to test web APIs, for example: For more information, see: * [Minimal API tutorial: test with .http files and Endpoints Explorer](xref:tutorials/min-web-api) -* [Install and test APIs with `http-repl`](xref:tutorials/first-web-api?view=aspnetcore-6.0&preserve-view=true#ihr6) diff --git a/aspnetcore/tutorials/first-web-api/includes/first-web-api8.md b/aspnetcore/tutorials/first-web-api/includes/first-web-api8.md index 9a35aac0835c..f0e971bbc6a7 100644 --- a/aspnetcore/tutorials/first-web-api/includes/first-web-api8.md +++ b/aspnetcore/tutorials/first-web-api/includes/first-web-api8.md @@ -413,7 +413,6 @@ There are many other tools that can be used to test web APIs, for example: For more information, see: * [Minimal API tutorial: test with .http files and Endpoints Explorer](xref:tutorials/min-web-api) -* [Install and test APIs with `http-repl`](xref:tutorials/first-web-api?view=aspnetcore-6.0&preserve-view=true#ihr6) From 9d5a2a6d260a7a4b133f0b4fbaee578b39f1dd2e Mon Sep 17 00:00:00 2001 From: Bill Wagner Date: Thu, 27 Mar 2025 20:46:15 -0400 Subject: [PATCH 3/3] remove Di parents, add Br parents (#35077) * remove Se parents, add Br parents Much simpler this time. * Remove dilithium, not selenium --- quest-config.json | 46 +++------------------------------------------- 1 file changed, 3 insertions(+), 43 deletions(-) diff --git a/quest-config.json b/quest-config.json index 782376f6109b..f42ac1233f1d 100644 --- a/quest-config.json +++ b/quest-config.json @@ -37,51 +37,11 @@ "ParentNodeId": 308205 }, { - "Label": "okr-freshness", - "Semester": "Dilithium", - "ParentNodeId": 237266 - }, - { - "Label": "okr-curation", - "Semester": "Dilithium", - "ParentNodeId": 237271 - }, - { - "Label": "user-feedback", - "Semester": "Dilithium", - "ParentNodeId": 233465 - }, - { - "Label": "okr-health", - "Semester": "Dilithium", - "ParentNodeId": 237266 - }, - { - "Label": "doc-bug", - "Semester": "Dilithium", - "ParentNodeId": 233465 - }, - { - "Label": "sfi-ropc", - "Semester": "Dilithium", - "ParentNodeId": 271716 - }, - { - "Label": "sfi-admin", - "Semester": "Dilithium", - "ParentNodeId": 271716 - }, - { - "Label": "sfi-images", - "Semester": "Dilithium", - "ParentNodeId": 286370 - }, - { - "Semester": "Dilithium", - "ParentNodeId": 227486 + "Semester": "Bromine", + "ParentNodeId": 403735 } ], - "DefaultParentNode": 308205, + "DefaultParentNode": 403735, "WorkItemTags": [ { "Label": "9.0",