[FA-17] Update auth

FictionArchive.API/FictionArchive.API.csproj

@@ -13,6 +13,7 @@
         <PackageReference Include="HotChocolate.Data.EntityFramework" Version="15.1.11" />
         <PackageReference Include="HotChocolate.Fusion" Version="15.1.11" />
         <PackageReference Include="HotChocolate.Types.Scalars" Version="15.1.11" />
+        <PackageReference Include="Microsoft.AspNetCore.HeaderPropagation" Version="8.0.22" />
         <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="9.0.11">
           <PrivateAssets>all</PrivateAssets>
           <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>

FictionArchive.API/Program.cs

@@ -12,7 +12,11 @@ public class Program
         
         #region Fusion Gateway
 
-        builder.Services.AddHttpClient("Fusion");
+        builder.Services.AddHttpClient("Fusion")
+            .AddHeaderPropagation(opt =>
+            {
+                opt.Headers.Add("Authorization");
+            });
 
         builder.Services
             .AddFusionGatewayServer()
@@ -23,7 +27,6 @@ public class Program
         
         // Add authentication
         builder.Services.AddOidcAuthentication(builder.Configuration);
-        builder.Services.AddFictionArchiveAuthorization();
         
         builder.Services.AddCors(options =>
         {
@@ -41,11 +44,10 @@ public class Program
 
         app.UseCors("AllowFictionArchiveOrigins");
         
-        app.UseAuthentication();
-        app.UseAuthorization();
-        
         app.MapHealthChecks("/healthz");
 
+        app.UseHeaderPropagation();
+
         app.MapGraphQL();
 
         app.RunWithGraphQLCommands(args);

FictionArchive.API/appsettings.json

@@ -7,9 +7,10 @@
   },
   "AllowedHosts": "*",
   "OIDC": {
-    "Authority": "https://auth.orfl.xyz/application/o/fictionarchive/",
+    "Authority": "https://auth.orfl.xyz/application/o/fiction-archive/",
     "ClientId": "fictionarchive-api",
     "Audience": "fictionarchive-api",
+    "ValidIssuer": "https://auth.orfl.xyz/application/o/fiction-archive/",
     "ValidateIssuer": true,
     "ValidateAudience": true,
     "ValidateLifetime": true,