fix: #3 Setup correct authentication scheme

[Jay-Dee]

#3 Setup correct authentication scheme as per https://github.com/Identityerver/IdentityServer4.AccessTokenValidation/issues/72#issuecomment-329054417

Now correctly responds with 401 for unauthorized instead of 404

[meysamhadeli]

#3 Setup correct authentication scheme as per https://github.com/Identityerver/IdentityServer4.AccessTokenValidation/issues/72#issuecomment-329054417

Now correctly responds with 401 for unauthorized instead of 404

@Jay-Dee Thanks for the solution. It works completely. Please consider this small change.
But I have a suggestion instead of pass AuthenticationSchemes = IdentityServerAuthenticationDefaults.AuthenticationScheme value to Authorize attribute, You can configure it globally in AddJwt method like below and it's more cleaner.

using BuildingBlocks.Utils;
using BuildingBlocks.Web;
using Duende.IdentityServer.Models;
using IdentityServer4.AccessTokenValidation;
using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.Extensions.DependencyInjection;

namespace BuildingBlocks.Jwt;

public static class JwtExtensions
{
    public static IServiceCollection AddJwt(this IServiceCollection services)
    {
        var jwtOptions = services.GetOptions<JwtBearerOptions>("Jwt");

        services.AddAuthentication(options =>
            {
                options.DefaultScheme = IdentityServerAuthenticationDefaults.AuthenticationScheme;
                options.DefaultAuthenticateScheme = IdentityServerAuthenticationDefaults.AuthenticationScheme;
                options.DefaultChallengeScheme = IdentityServerAuthenticationDefaults.AuthenticationScheme;
            })
            .AddJwtBearer(JwtBearerDefaults.AuthenticationScheme, options =>
            {
                options.Authority = jwtOptions.Authority;
                options.TokenValidationParameters.ValidateAudience = false;
            });

        if (!string.IsNullOrEmpty(jwtOptions.Audience))
        {
            services.AddAuthorization(options =>
                options.AddPolicy(nameof(ApiScope), policy =>
                {
                    policy.RequireAuthenticatedUser();
                    policy.RequireClaim("scope", jwtOptions.Audience);
                })
            );
        }

        return services;
    }
}

[Jay-Dee]

Hi, that makes sense. I have prepared the change but having issues with the testing. Will send a PR when ready

[meysamhadeli]

Hi, that makes sense. I have prepared the change but having issues with the testing. Will send a PR when ready

Ok. Thank You :)

[meysamhadeli]

Hi, that makes sense. I have prepared the change but having issues with the testing. Will send a PR when ready

Hi, that makes sense. I have prepared the change but having issues with the testing. Will send a PR when ready

Hi, Is the problem to run the project not resolved?