Blazor: access the user token from iOS - ios

Question

I'm creating application with Blazor in NET6. To call the API via an Azure API Management, I have to pass a token in the request adding
request.Headers.Authorization =
new System.Net.Http.Headers.AuthenticationHeaderValue("Bearer", token);
In this request, I have to pass the token that comes from an Identity Server. So, first, the user has to authenticate to the identity server and then receives the JWT token.
The configuration is
builder.Services.AddOidcAuthentication(options =>
{
builder.Configuration.Bind("oidc", options.ProviderOptions);
options.UserOptions.RoleClaim = "role";
})
.AddAccountClaimsPrincipalFactory<MultipleRoleClaimsPrincipalFactory<RemoteUserAccount>>();
builder.Services.AddAuthorizationCore();
Also, to apply the security, I add in the Program.cs this lines
app.Use((context, next) =>
{
context.Response.GetTypedHeaders().CacheControl =
new Microsoft.Net.Http.Headers.CacheControlHeaderValue()
{
MustRevalidate = true,
NoCache = true,
NoStore = true,
};
string oidcAuthority = builder.Configuration.GetValue(typeof(string), "oidc:Authority").ToString();
string mainUrl = "https://test.mywebsite.com/";
#if DEBUG
mainUrl = "https://localhost:7040";
#endif
context.Response.Headers.Add("X-Content-Type-Options", "nosniff");
context.Response.Headers.Add("Content-Security-Policy",
$"default-src 'self' {mainUrl} {oidcAuthority} " +
"https://code.cdn.mozilla.net " +
#if DEBUG
"https://dc.services.visualstudio.com " +
#endif
"https://api.myapi.com " +
"'unsafe-inline' 'unsafe-eval'; " +
$"script-src 'self' {mainUrl} 'unsafe-inline' 'unsafe-eval'; " +
$"connect-src 'self' {oidcAuthority} https://code.cdn.mozilla.net https://api.myapi.com;" +
$"img-src 'self' {mainUrl} data:; " +
$"style-src 'unsafe-inline' {mainUrl} " +
"https://code.cdn.mozilla.net " +
";" +
"base-uri 'self'; " +
"form-action 'self'; " +
"frame-ancestors 'self';");
context.Response.Headers.Add("Referrer-Policy", "same-origin");
context.Response.Headers.Add("Permissions-Policy", "geolocation=(), microphone=()");
context.Response.Headers.Add("X-XSS-Protection", "1; mode=block");
context.Response.Headers.Add("X-Frame-Options", "SAMEORIGIN");
context.Response.Headers.Add("SameSite", "Strict");
return next.Invoke();
});
So, after that I can read the JWT token with this code:
IAccessTokenProvider _accessToken;
private async Task<AccessToken> RequestUserToken()
{
try
{
var tokenResult = await _accessToken.RequestAccessToken();
tokenResult.TryGetToken(out var token);
Console.WriteLine(token);
return token;
}
catch (AccessTokenNotAvailableException aex)
{
throw new ApplicationException($"Exception {aex}");
}
catch (Exception ex)
{
throw new ApplicationException(
$"AccessTokenNotAvailable Exception Exception {ex}");
}
}
The application is working on Windows for any browser. On iOS and macOS I can read the token if I use Safari. It is working if I use Microsoft Edge and Chrome.
Do you have any idea how can I fix it?