OidcIdpSignedAssertionLoader requires IConfiguration to be registered with a service collection

[GeoK]

Microsoft.Identity.Web Library

Microsoft.Identity.Web

Microsoft.Identity.Web version

3.10.0

Web app

Not Applicable

Web API

Protected web APIs (validating tokens)

Token cache serialization

Not Applicable

Description

This applies to Microsoft.Identity.Web.OidcFic project.

Reproduction steps

1. Don't register IConfiguration with a service collection and try to resolve IOidcIdpSignedAssertionLoader.

Error message

System.InvalidOperationException : Unable to resolve service for type 'Microsoft.Extensions.Configuration.IConfiguration' while attempting to activate 'Microsoft.Identity.Web.OidcFic.OidcIdpSignedAssertionLoader'.

Id Web logs

No response

Relevant code snippets

var oidcIdpSignedAssertionLoader = serviceProvider.GetService<IOidcIdpSignedAssertionLoader>();

Regression

No response

Expected behavior

One should be able to resolve IOidcIdpSignedAssertionLoader without registering IConfiguration explicitly.

[jmprieur]

Design proposal:

• inject a IServiceProvider in the constructor of IOidcIdpSignedAssertionLoader instead of a IConfiguration
• get the IConfiguration if needed from the service prrovider just in time
• if the configuration is null, the section can't be resolved. so throw with a meaningful exception with an aka.ms like https://aka.ms/ms-id-web/fic-oidc/troubleshoot
• add high performance logging