使用 Web 浏览器的 wpf 桌面应用程序的 OIDC/OAuth SSO

Question

We have our custom IDP which implements the OIDC/OAuth2 standards and many of our browser based SPA apps use it for authn/authz (With SSO). We also have some of our apps which are WPF desktop based. Now, our requirement is to implement similar OIDC/OAuth SSO from desktop app by launching a browser from the desktop application and then once the sign in is complete come back to the desktop app (SSO).

This is something very similar to how Docker desktop works which launches a browser for sign-in and then redirects back to the desktop application. Anybody can suggest what is the right way to implement this and any reference to sample implementation would be greatly appreciated.

Thanks

Answer 1

The system browser is used to login, according to RFC8252 . I believe Docker desktop uses a private URI schene to receive the OAuth response.

See these resources. My app is coded in Javascript but you should be able to translate the concepts:

• C# private URI scheme example
• My desktop code sample + blog posts