Hi I removed https from my local development environment, and the authentication never really worked out over http.
I use discord oauth2 and a third party oauth2 too. I stepped into the authentication handler using a debugger (for my third party service), and it seems to work correctly, and it does set my claims and authenticate the current request. (The authentication tiket is correctly built, being authenticated and with the proper claims).
Which mean the issue isn't about the oauth2.
However, down in the request pipeline (I assume after the challenge redirects to the redirect urls), the request isn't authenticated anymore.
It's rather annoying because I didn't manage to find a way to manage a local dev cert on my NixOS machine. And in production, the https in handled by the firewall, so I really don't want an extra https in there.
Any idea? (Yes, the IsDevelopment() returns true lol)