Fhi.Lmr.Authentication.ClientCredentials 10.2.2

Fhi.Lmr.Authentication.ClientCredentials

NuGet-pakke for automatisk token-håndtering ved maskin-til-maskin-kommunikasjon mot API-er beskyttet av HelseId, Entra ID eller Maskinporten.

Installasjon

dotnet add package Fhi.Lmr.Authentication.ClientCredentials

Konfigurasjon

appsettings.json

{
  "OidcClients": {
    "HelseIdClient": {
      "Authority": "https://helseid-sts.test.nhn.no",
      "ClientId": "din-client-id",
      "PrivateKey": "{\"d\":\"...\",\"kty\":\"RSA\",\"n\":\"...\"}"
    },
    "EntraIdClient": {
      "Authority": "https://login.microsoftonline.com/{tenant-id}/v2.0",
      "ClientId": "din-client-id",
      "PrivateKey": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----",
      "kid": "SERTIFIKAT_THUMBPRINT"
    },
    "MaskinportenClient": {
      "Authority": "https://test.maskinporten.no",
      "ClientId": "din-client-id",
      "PrivateKey": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----",
      "kid": "din-key-id"
    }
  },
  "Apis": {
    "EksempelApi": {
      "BaseAddress": "https://api.example.com/",
      "HttpClientName": "EksempelApiClient",
      "OidcClientName": "HelseIdClient",
      "Scope": "fhi:example/read",
      "UseDPoP": true
    },
    "AnnetApi": {
      "BaseAddress": "https://annet-api.example.com/",
      "HttpClientName": "AnnetApiClient",
      "OidcClientName": "MaskinportenClient",
      "Scope": "fhi:annet/api",
      "resource": "fhi:annet.api"
    }
  }
}

Konfigurasjonsverdier

OidcClients

Apis

Bruk

Program.cs

using Fhi.Lmr.Authentication.ClientCredentials.ClientCredentials;

var builder = WebApplication.CreateBuilder(args);

// Registrer HTTP-klienter med automatisk token-håndtering
builder.Services.ConfigureHttpClients(builder.Configuration);

var app = builder.Build();
app.Run();

Bruk av HttpClient

public class MinService
{
    private readonly IHttpClientFactory _httpClientFactory;

    public MinService(IHttpClientFactory httpClientFactory)
    {
        _httpClientFactory = httpClientFactory;
    }

    public async Task<string> HentDataAsync()
    {
        // HttpClientName fra appsettings
        var client = _httpClientFactory.CreateClient("EksempelApiClient");

        // Token hentes og vedlikeholdes automatisk
        var response = await client.GetAsync("api/data");
        response.EnsureSuccessStatusCode();

        return await response.Content.ReadAsStringAsync();
    }
}

Støttede Identity Providers

Tekniske detaljer

• Tokens caches automatisk og fornyes ved behov
• Discovery documents caches for ytelse
• DPoP-proof genereres automatisk for HelseId når UseDPoP: true
• Client assertions bygges med riktig format per identity provider