使用OKTA的OpenIdConnect配置

Question

        app.Map("/login.aspx", map =>
        {
            map.Run(ctx =>
            {
                if (ctx.Authentication.User == null || !ctx.Authentication.User.Identity.IsAuthenticated)
                {
                    // trigger authentication
                    ctx.Response.StatusCode = 401;
                }
                else
                {
                    ctx.Response.Redirect("/");
                }

                return Task.FromResult(0);
            });
        });

Answer 1

OpenID Owin实现中存在AuthenticationFailed事件（称为通知）

例如

app.UseOpenIdConnectAuthentication(new OpenIdConnectAuthenticationOptions
{
      // config...
      ClientId = //...,
      ClientSecret = // ...,
      // etc

      // events
      Notifications = new OpenIdConnectAuthenticationNotifications
      {
      // AuthenticationFailed
            AuthenticationFailed = context =>
            {
                  context.HandleResponse();

                  // Handle redirect

                  //context.Response.Write(context.Exception.Message);
                  //_logger.Log(context.Exception.Message);
                  return Task.FromResult(0);
            },
            // ...
      }
}

更完整的示例可以在https://github.com/ericherlitz/identityserver4-epioserver-demo/blob/master/idepi/idepi.webepiserver/business/owin/startup.cs找到