PowerServer 2022 Help
Using other authentication servers

Declare the PowerBuilder application in Visual Guard and configure it – the examples below are based on the Sales Demo app.

Configure the Sales Demo app for the Visual Guard Identity Server after declaring the Sales Demo app in Visual Guard, you need to configure it for identity server (OIDC) integration. Please follow the steps below:

a) select a platform for the client application.

b) Specify the type of application under “Primary information”.

c) Define Identity resources (scopes).

d) Define supported grant types.

e) Define secret keys.

In Visual Guard Console, select the Sales Demo app, set the permissions and add the PowerServer security.

You can also map DataWindows to business entities/database tables. This allows granting fine-grain authorizations at table level, instead of the DataWindow level.

Assign Authorizations (permissions) to Roles or Permission Sets.

Grant roles to Users or User Groups.

a) Edit users to grant/revoke roles.

b) For audit/verification purposes, you can edit users and view their permissions.

Open the workspace of your project in PowerBuilder.

In the solution explorer, expand the workspace node.

Right-click the Target node for the workspace and select Properties.

In Library List tab, select the following two libraries:

Add the following DLL file from the Visual Guard installation folder to \VisualGuardConsole\VG PB Runtime\.

Go to the PowerServer C# solution > ServerAPIs project, add a reference to “Novalys.VisualGuard.Security.PowerServer.dll”. (You can get this DLL file from the Visual Guard Setup or the NuGet website).

Edit the ServerAPIs project > Startup.cs file:

1) Comment out this script:

            //services.AddPowerServerAuthentication(this.Configuration);

2) Add this script:

            //Adds Visual Guard Identity Server authentication/authorization to Power Server.
            services.AddVGPSIdentityServer(this.Configuration);

The scripts will look like this:

        // This method gets called by the runtime. Use this method to add services to the container.
        public void ConfigureServices(IServiceCollection services)
        {
            // Configures the services of the PowerServer AppConfig module
            services.AddPowerServerAppConfig(this.Configuration, this.HostingEnvironment);

            // Configures the services of the PowerServer Authentication module 
            //services.AddPowerServerAuthentication(this.Configuration);

            //Adds Visual Guard Identity Server authentication/authorization to Power Server.
            services.AddVGPSIdentityServer(this.Configuration);

            // Configures the services of the PowerServer HealthCheck module 
            services.AddPowerServersHealthChecks(this.Configuration);

            // Configures the services of the PowerServer Logging module 
            services.AddPowerServerLogging();

            // Configures the services of the PowerServer OpenAPI module
            services.AddPowerServerOpenAPI();

            services.AddPowerServerDataProvider(this.GetType().Assembly);
        }

Continue editing the Startup.cs file. Add this script to implement the Visual Guard middleware:

            //Adds Visual Guard Middleware
            app.UseVGPSMiddleware();

The scripts will look like this:

        // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
        public void Configure(IApplicationBuilder app)
        {
            app.UsePowerServerPathBase();

            if (this.HostingEnvironment.IsDevelopment())
            {
                // Enables the exception page during development. It will list all exceptions for debugging
                app.UseDeveloperExceptionPage();

                // Configures the HTTP request pipeline for the PowerServer OpenAPI module
                app.UsePowerServerOpenAPI();
            }

            // Adds middleware for redirecting HTTP Requests to HTTPS.
            //app.UseHttpsRedirection();

            // Configures the HTTP request pipeline for the PowerServer Logging module
            app.UsePowerServerLogging();

            app.UseRouting();

            // Enables the compression of responses
            app.UseResponseCompression();

            //Adds Visual Guard Middleware
            app.UseVGPSMiddleware();

            // Enables authentication
            app.UseAuthentication();

            // Enables authorization
            app.UseAuthorization();

            // Enables the welcome page
            app.UseWelcomePage("/");

            // Configures the HTTP request pipeline for the PowerServer HealthCheck module
            app.UsePowerServerHealthChecks();

            app.UseEndpoints(endpoints =>
            {
                // Adds the controller to the HTTP request pipeline
                endpoints.MapControllers();
            });
        }

Configure the ServerAPIs project > AppConfig > AppConfig.json file. You can specify actions to be excluded, Visual Guard Identity Server URI, enable/disable trace, etc.

"VGPSConfiguration": {
 "ExcludeActions": [
 "action1",
 "action2"
 ],
 "IdentityServerUrl": "https://vgidentityserver.azurewebsites.net",
 "TraceLevel": "Verbose",
 "VGRACMode": "Silence",
 "PolicyName": "ServerAPIs"
}