Configuration

Management API

The RCL's wwwroot/appsettings.json configures the authorization server management API:

{
  "AuthorizationServerApi": {
    "BaseUrl": "https://localhost:5001/api",
    "TimeoutSeconds": 30,
    "EnableRetry": true,
    "MaxRetryAttempts": 3
  }
}

AuthorizationServerApiClient reads these options; AuthorizationMessageHandler attaches the bearer token from the authenticated session. The WASM sample shell has its own wwwroot/appsettings.json.

DI wiring

builder.Services.AddAuthorizationServerAdminServices(builder.Configuration);

The sample shell (samples/<Name>.Shell/Program.cs) mounts the shell App at #app and calls the extension above. To embed in another WASM host, reference the package and add the RCL assembly to the Router's AdditionalAssemblies.

Auth and roles

Login flows through AuthService.LoginAsync -> api/auth/login. Access is gated by the policies in AuthorizationPolicies.cs (admin/viewer roles).

See also

• Features
• Runbook