I have AddJwtBearer with this settings

services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
.AddJwtBearer(options =>
{
options.Authority = fusionAuthAuthority;
options.Audience = fusionAuthAudience;
options.RequireHttpsMetadata = false; // DEV only!!
});

and swagger client configured this way

services.AddSwaggerGen(c =>
{
c.AddSecurityDefinition("oauth2", new OpenApiSecurityScheme
{
Type = SecuritySchemeType.OAuth2,
Flows = new OpenApiOAuthFlows
{
AuthorizationCode = new OpenApiOAuthFlow
{
AuthorizationUrl = new Uri($"{fusionAuthAuthority}oauth2/authorize?audience={fusionAuthAudience}", UriKind.Absolute),
TokenUrl = new Uri($"{fusionAuthAuthority}oauth2/token", UriKind.Absolute),
Scopes = new Dictionary<string, string>() { }

         }
     }
 });

 c.AddSecurityRequirement(new OpenApiSecurityRequirement
 {
     {
         new OpenApiSecurityScheme
         {
             Reference = new OpenApiReference { Type = ReferenceType.SecurityScheme, Id = "oauth2" }
         },
         Array.Empty<string>()
     }
 });

 c.ExampleFilters();

 c.DocumentFilter<OrderTagsDocumentFilter>();

});

Any updates on this issue or hints ?

Thanks
Manlio

We are always open to feedback on our documentation and example applications. There may also be an opportunity to develop an alternative example application making use of other dot net security paradigms/workflows.

I will check in with the team and let you know if anything else surfaces to relay on.

Thanks,
Josh

I might need a bit more context, but it sounds like you are looking to store user identity information outside of a session.

Indeed, the default .Net way to handle authentication and roles is of course not keeping user info (data from JWT token) in Session (ISession interface). .Net uses Identity and Claims for those sensitive data. This is where information from the JWT token should normally be stored. But looking at the POC on GitHub, it looks like you guys store this in Session, nothing in Identity and Claims. Am I wrong ?

Thanks for the information.

I might need a bit more context, but it sounds like you are looking to store user identity information outside of a session.

These two articles may be of initial interest, based on a google search.

• https://andrewhalil.com/2020/09/14/role-retrieval-from-jwt-token-claims-in-net-core-applications/
• https://andrewhalil.com/2022/08/09/how-to-retrieve-user-context-from-jwt-bearer-tokens-in-net-core/

Let us know and we may be able to debug this a little bit further.

Thanks,
Josh