CODEWITHSUNDEEP
asp.net-mvcgoogle-apigoogle-oauthowinmulti-tenant
DevExpress
DevExpress

Reputation: 99

Dynamic redirect url from google console - oAuth

I have created a MVC/API project to enable external authentication and worked fine for my local host url. However, I need to achieve the below.

  1. I am supporting multi tenancy (same app service and different DB), so each tenant has to connect different DB based on the custom param in the MVC url Ex: https://localhost/tenant1, .../tenant2, .../tenant3 etc (not going with separate subdomain at this point)

  2. I am not sure if the Google Console supports the wildcard url as a return ur and not sure how to achieve that in MVC code (Ex:http://localhost/* OR {0} .. something like that. (So dynamic input parameter will be returned back from google)

I am reading and attempting some solutions. Will update the answer here once i get the complete solution. In the meantime if anyone has any suggestions, please help me.

UPDATE 1:

I have updated my source code as follows:

Create session object before redirecting to the external login

System.Web.HttpContext.Current.Session["Tenant"] = "tenantname";

After callback read the tenant details and save in the session for subsequent DB calls based on the tenant name

public async Task<ActionResult> ExternalLoginCallback(string returnUrl)
    {
        var loginInfo = await AuthenticationManager.GetExternalLoginInfoAsync();
        if (loginInfo == null)
        {
            return RedirectToAction("Login");
        }

        if (System.Web.HttpContext.Current.Session["Tenant"] != null)
        {
            string sessionObj = System.Web.HttpContext.Current.Session["Tenant"] as String;
        }

Upvotes: 2

Views: 3267

Answers (2)

pinoyyid
pinoyyid

Reputation: 22306

This is a common requirement, and is easily solved. There are two components.

Firstly, regardless of which of your many URLs your application lives at (myapp.com/tenant1, /tenant2, etc) you have a single redirect URL (eg myapp.com/oauthredirect).

Secondly, when starting the OAuth dance (https://developers.google.com/identity/protocols/OAuth2WebServer#redirecting), you can specify a state parameter which will be passed into your oauthredirect routine (eg. as state=tenant1). You can then use this to create a redirect back to the appropriate site URL once you have finished your user registration tasks.

Be careful when specifying your redirect URLs into the developer console. They must be a character-by-character match with the actual URL. So, foe example, you will need to specify both http://myapp.com/oauthredirect and https://myapp.com/oauthredirect. I've always found it quite useful to create a local entry in /etc/hosts (or the windows equivalent) so your localhost is also resolved by eg. http://test.myapp.com

Upvotes: 5

Linda Lawton - DaImTo
Linda Lawton - DaImTo

Reputation: 117126

Authorized redirect URIs For use with requests from a web server. This is the path in your application that users are redirected to after they have authenticated with Google. The path will be appended with the authorization code for access. Must have a protocol. Cannot contain URL fragments or relative paths. Cannot be a public IP address.

You can have as many of them as you want but the wild card is not going to work.

Upvotes: 1

Related Questions