Henara.Grpc.Client.Common

Shared base for the Henara gRPC client libraries (Henara.Grpc.Client.Dakota, Henara.Grpc.Client.Imagelink, Henara.Grpc.Client.DakotaSlim). You normally consume one of those domain clients rather than referencing this package directly — they bring it in transitively.

It provides:

• GrpcClientBase — builds an authenticated, retrying GrpcChannel whose per-call authorization header is supplied by an ICallTokenProvider; allows call credentials over plaintext (http/h2c) targets and disposes the channels it creates.
• KeycloakRefreshingTokenProvider — an ICallTokenProvider for native clients that does the interactive-login → refresh lifecycle. Seed it with the tokens from a Keycloak Authorization Code + PKCE login via Initialize(...); it then refreshes the access token before expiry (rotating the refresh token) and throws when refresh fails (re-login required).
• AddNativeKeycloakAuth(...) — registers the provider above as the singleton ICallTokenProvider.

Native auth wire-up

services.AddNativeKeycloakAuth(o =>
{
    o.TokenEndpoint = "https://auth.praxx.me/realms/henara/protocol/openid-connect/token";
    o.ClientId      = "henara-main-sso";
});
services.AddDakotaExternalGrpcClients(); // or AddImageLinkDomainExternalGrpcClients()

// after the interactive login completes:
var auth = provider.GetRequiredService<KeycloakRefreshingTokenProvider>();
auth.Initialize(accessToken, refreshToken, expiresInSeconds);

AddNativeKeycloakAuth throws if an ICallTokenProvider is already registered — there must be exactly one token authority. For a host that already owns a Keycloak session (e.g. SmartVO), do not use this provider; use Henara.Grpc.Client.DakotaSlim instead, which adapts the host's existing token.

Supplying your own token provider

Any ICallTokenProvider works — register it before the domain clients to authenticate calls with a token you already have (e.g. a web app's user token or a static server token):

services.AddScoped<ICallTokenProvider, MyTokenProvider>();
services.AddDakotaExternalGrpcClients();