OpenIdClientSettingsStep.cs

using System.Text.Json.Nodes;
using Microsoft.AspNetCore.DataProtection;
using OrchardCore.OpenId.Configuration;
using OrchardCore.OpenId.Services;
using OrchardCore.OpenId.Settings;
using OrchardCore.Recipes.Models;
using OrchardCore.Recipes.Services;

namespace OrchardCore.OpenId.Recipes;

/// <summary>
/// This recipe step sets general OpenID Connect Client settings.
/// </summary>
public sealed class OpenIdClientSettingsStep : NamedRecipeStepHandler
{
    private readonly IOpenIdClientService _clientService;
    private readonly IDataProtectionProvider _dataProtectionProvider;

    private static readonly char[] ScopeDelimiters = [' ', ','];

    public OpenIdClientSettingsStep(
        IOpenIdClientService clientService,
        IDataProtectionProvider dataProtectionProvider)
        : base("OpenIdClientSettings")
    {
        _clientService = clientService;
        _dataProtectionProvider = dataProtectionProvider;
    }

    protected override async Task HandleAsync(RecipeExecutionContext context)
    {
        var model = context.Step.ToObject<OpenIdClientSettingsStepModel>();
        var settings = await _clientService.LoadSettingsAsync();

        settings.Scopes = model.Scopes?.Split(ScopeDelimiters, StringSplitOptions.RemoveEmptyEntries);
        settings.Authority = !string.IsNullOrEmpty(model.Authority) ? new Uri(model.Authority, UriKind.Absolute) : null;
        settings.CallbackPath = model.CallbackPath;
        settings.ClientId = model.ClientId;
        if (!string.IsNullOrEmpty(model.ClientSecret))
        {
            settings.ClientSecret = model.ClientSecret;
        }
        else if (!string.IsNullOrEmpty(model.ClientSecretPlainText))
        {
            var protector = _dataProtectionProvider.CreateProtector(nameof(OpenIdClientConfiguration));
            settings.ClientSecret = protector.Protect(model.ClientSecret);
        }
        settings.DisplayName = model.DisplayName;
        settings.ResponseMode = model.ResponseMode;
        settings.ResponseType = model.ResponseType;
        settings.SignedOutCallbackPath = model.SignedOutCallbackPath;
        settings.SignedOutRedirectUri = model.SignedOutRedirectUri;
        settings.StoreExternalTokens = model.StoreExternalTokens;
        settings.Parameters = model.Parameters;

        await _clientService.UpdateSettingsAsync(settings);
    }
}

public sealed class OpenIdClientSettingsStepModel
{
    public string DisplayName { get; set; }

    [Url]
    public string Authority { get; set; }

    public string ClientId { get; set; }
    public string ClientSecret { get; set; }
    public string ClientSecretPlainText { get; set; }
    public string CallbackPath { get; set; }
    public string SignedOutRedirectUri { get; set; }
    public string SignedOutCallbackPath { get; set; }
    public string Scopes { get; set; }
    public string ResponseType { get; set; }
    public string ResponseMode { get; set; }
    public bool StoreExternalTokens { get; set; }
    public ParameterSetting[] Parameters { get; set; }
}