AspNetCore.Docs/aspnetcore/security/authentication
Luke Latham 8031f63a22 Surface Forward Headers in ext auth provider topics (#9554)
Fixes #9549 

* Not a full UE pass on the group of external provider topics ... don't quite have time for that right now. However, I do hit a number of small UE-type updates.
* Engineering: You only need to look at one thing here: See the *forwarded-headers-middleware.md* file. The content of the file is below. The INCLUDE is linked into the external auth provider topics to surface Forwarded Headers Middleware (proxy/LB topic).

> \#\# Forward request information with a proxy or load balancer
>
> If the app is deployed behind a proxy server or load balancer, some of the original request information might be forwarded to the app in request headers. This information usually includes the secure request scheme (\`https\`), host, and client IP address. Apps don't automatically read these request headers to discover and use the original request information.
>
> The scheme is used in link generation that affects the authentication flow with external providers. Losing the secure scheme (\`https\`) results in the app generating incorrect insecure redirect URLs.
>
> Use Forwarded Headers Middleware to make the original request information available to the app for request processing.
>
> For more information, see \<xref:host-and-deploy/proxy-load-balancer>.

If it's easier to provide feedback in a comment here over hunting down the file on the diff, that works for me.
2018-11-14 15:58:01 -06:00
..
2fa Specify "Core" for ASP.NET Core refs (#8110) 2018-08-15 22:30:29 -05:00
accconfirm delete map and min files (#9310) 2018-10-31 14:26:48 -10:00
add-user-data/sample delete map and min files (#9310) 2018-10-31 14:26:48 -10:00
azure-active-directory Jmprieur/update aad (#7333) 2018-06-27 17:01:36 -05:00
azure-ad-b2c/_static Minor corrections (#8377) 2018-09-04 17:00:37 -07:00
azure-ad-b2c-webapi Azure AD B2C with Web API (#5275) 2018-01-29 13:08:36 -06:00
cookie/samples/2.x/CookieSample Update Login.cshtml.cs (#9560) 2018-11-12 15:21:01 -06:00
customize-identity-model/samples 2.1 updates to Identity PK data type doc (#8640) 2018-09-27 09:44:02 -05:00
identity delete map and min files (#9310) 2018-10-31 14:26:48 -10:00
identity-configuration/sample delete map and min files (#9310) 2018-10-31 14:26:48 -10:00
identity-custom-storage-providers Specify "Core" for ASP.NET Core refs (#8110) 2018-08-15 22:30:29 -05:00
scaffold-identity/sample Identity Scaffolder bug fix (#8458) 2018-09-12 11:45:39 -07:00
social Surface Forward Headers in ext auth provider topics (#9554) 2018-11-14 15:58:01 -06:00
windowsauth Update Windows auth doc to 2.0 (#4617) 2017-10-26 11:30:04 -05:00
ws-federation/_static Tutorial for WS-Federation middleware (#5532) 2018-02-27 13:45:04 -06:00
2fa.md Table of Contents reorg (#9133) 2018-10-26 18:34:40 -10:00
accconfirm.md Fix DocFX build warnings from retired index pages (#9339) 2018-10-30 15:48:01 -05:00
add-user-data.md Table of Contents reorg (#9133) 2018-10-26 18:34:40 -10:00
azure-ad-b2c-webapi.md Additional B2C tweaks (#8688) 2018-10-15 18:36:50 -05:00
azure-ad-b2c.md Minor corrections (#8377) 2018-09-04 17:00:37 -07:00
community.md Metadata updates to ASP.NET Core security docs (#7188) 2018-06-20 12:43:43 -05:00
cookie.md Update 'checkbox' (#9419) 2018-11-10 09:13:52 -10:00
customize-identity-model.md Fix invalid Scaffold Identity link (#8739) 2018-09-27 11:57:50 -05:00
identity-configuration.md Fix broken table (#8940) 2018-10-09 10:36:33 -10:00
identity-custom-storage-providers.md Azure Apps troubleshooting title change (#9199) 2018-10-24 14:26:16 -05:00
identity-enable-qrcodes.md c# --> csharp 2018-11-06 14:13:36 -06:00
identity.md Update identity.md (#9383) 2018-11-01 15:06:04 -10:00
individual.md Update individual.md (#8648) 2018-09-20 14:56:30 -10:00
scaffold-identity.md Azure Apps troubleshooting title change (#9199) 2018-10-24 14:26:16 -05:00
windowsauth.md Surface Nano Server content in Windows Auth topic (#9392) 2018-11-01 13:57:42 -10:00
ws-federation.md Metadata updates to ASP.NET Core security docs (#7188) 2018-06-20 12:43:43 -05:00