Duende BFF Security Framework V4 Preview 1

[maartenba]

Duende BFF Security Framework V4 Preview 1 has just been released.

Look here for the release notes:
Duende BFF V4 Preview 1 release notes

We also did a live stream on BFF V3, where we announce the new release. Check it out on our YouTube stream (https://www.youtube.com/watch?v=6zMSwlGBmxs)

[Captaincyr]

I found a small issue with the WithDefaultOpenIdConnectOptions, I can't keep the default "/signin-oidc" CallbackPath because the code changes the CallbackPath to "/bff-signin" if it is the default value after calling the ConfigureOpenIdConnectDefaults. I tried explicitely setting CallbackPath in WithDefaultOpenIdConnectOptions to "/signin-oidc", but it still changes it, if I set it to anything else, it works.

Found the faulty bit of code:
https://github.com/DuendeSoftware/products/blob/a35d20550c584a90c18dbf2141a44f899ab6e5d4/bff/src/Bff/DynamicFrontends/BffConfigureOpenIdConnectOptions.cs#L39

[Captaincyr]

Is it normal that the server side sessions no longer work with this version?
I managed to make the bff work, but the entire session is in the cookie and nothing in the database table.

Edit: It does not work only when using AddFrontends, if I don't use this method and instead keep the app.MapRemoteBffApiEndpoint, it still works.