Authenticating the user

OpenID Connect (OIDC) is Microsoft's suggested way to authenticate Blazor WebAssembly applications. ABP follows that suggestion and provides it as preconfigured in the startup solution.

The Blazor application doesn't contain login, register, or other authentication-related UI pages. It uses the Authorization Code flow with Proof Key for Code Exchange (PKCE) enabled to redirect the user to the server application. The server handles all the authentication logic and redirects the user back to the Blazor application.

The authentication configuration is stored in the wwwroot/appsettings.json file of the Blazor application. See the following example configuration:

  "AuthServer": {
    "Authority": "https://localhost:44306",
    "ClientId": "DemoApp_Blazor",
    "ResponseType": "code"
  }

Here...