Good day!
I am struggling just a bit. I was able to get everything working just fine in my VS2022 debugger, but when I deployed the app to my development server, I started receiving a “Callback URL mismatch” error when attempting to log in. Upon closer inspection, I found that the absolute url being generated is an “http” scheme rather than the “https” used to connect to the site (and is properly configured in my Auth0 Application settings). I’m concerned that this is because I have deployed the site behind an Apache reverse proxy server, so while the connection to Apache is https, the internal connection is http. And so the HttpContext is seeing an http connection rather than https, and so generating an absolute URL of the incorrect type because of it. Is there a way to override the automatically generated absolute URL and use one that I generate in my code? I’m also open to other explanations, of course.
Edit:
I have just found the answer I sought on this thread: Cannot authenticate Regular App using .NET Core SDK deployed in k8s behind reverse proxy with SSL termination - #4 by konrad.sopala
Evidently, by setting “HttpContext.Request.IsHttps = true;” before calling the ChallengeAsync method, I can force it to generate an https redirect_uri and all is well.