From 4f200845f5686da62443d395746ab2e1e463518c Mon Sep 17 00:00:00 2001 From: Ricardo Carneiro Date: Thu, 21 Aug 2025 20:44:53 -0300 Subject: [PATCH] fix: http para https. Ajustar novamente. --- src/BCards.Web/Program.cs | 24 ++++++++++++++---------- 1 file changed, 14 insertions(+), 10 deletions(-) diff --git a/src/BCards.Web/Program.cs b/src/BCards.Web/Program.cs index fdb397a..a7e6c33 100644 --- a/src/BCards.Web/Program.cs +++ b/src/BCards.Web/Program.cs @@ -84,20 +84,24 @@ builder.Services.AddAuthentication(options => options.AuthorizationEndpoint = "https://login.microsoftonline.com/common/oauth2/v2.0/authorize"; options.TokenEndpoint = "https://login.microsoftonline.com/common/oauth2/v2.0/token"; - if (!builder.Environment.IsDevelopment()) - { - options.Events.OnRedirectToAuthorizationEndpoint = context => - { - context.RedirectUri = context.RedirectUri.Replace("http://", "https://"); - return Task.CompletedTask; - }; - } - options.Events = new OAuthEvents { OnRedirectToAuthorizationEndpoint = context => { - context.Response.Redirect(context.RedirectUri + "&prompt=login"); + // 1. Força HTTPS em produção + if (!builder.Environment.IsDevelopment()) + { + context.RedirectUri = context.RedirectUri.Replace("http://", "https://"); + } + + // 2. Adiciona prompt=login para forçar seleção de conta + var redirectUri = context.RedirectUri; + if (!redirectUri.Contains("prompt=")) + { + redirectUri += "&prompt=login"; + } + + context.Response.Redirect(redirectUri); return Task.CompletedTask; } }; -- 2.45.2