Merge pull request #45 from Progmasoft/feature/oauth-application-types

Move the OAuth pages to Next.js; split authorize.progmasoft.com and the Progmasoft Console

1 files changed, 2 insertions, 0 deletions

diff --git a/apps/api/Program.cs b/apps/api/Program.cs
index aeeff29..476cbdb 100644
--- a/apps/api/Program.cs
+++ b/apps/api/Program.cs
@@ -118,6 +118,8 @@ app.UseHttpsRedirection();
 app.UseMiddleware<SecurityHeadersMiddleware>();
 // Before authentication, where OpenIddict answers its own endpoints: OAuth only on its host, and nothing else there.
 app.UseMiddleware<OAuthHostFilter>();
+// Single-page applications call the token endpoints from the browser; see OAuth/Api/OAuthCors.cs.
+app.UseMiddleware<Progmasoft.OAuth.Api.OAuthCors>();
 app.UseAuthentication();
 app.UseAuthorization();
 app.UseRateLimiter();