Implement Zoho OAuth provider

[denis-goncharenko]

The implementation allows users to authenticate using their Zoho account credentials.

[kevinchalet]

Did you try with a user account created in a non-US region?

I just added this provider to OpenIddict and it was fairly painful to support that, as you need to make the token and userinfo endpoints dynamic (based on the location parameter returned from the authorization endpoint). Given it doesn't seem to be implemented here, it's likely it requires a bit more work to really work.

[denis-goncharenko]

Did you try with a user account created in a non-US region?

I just added this provider to OpenIddict and it was fairly painful to support that, as you need to make the token and userinfo endpoints dynamic (based on the location parameter returned from the authorization endpoint). Given it doesn't seem to be implemented here, it's likely it requires a bit more work to really work.

Yes, I did. I have tested with almost all regions.

Each region that supports Zoho has its own domain (https://www.zoho.com/accounts/protocol/oauth/multi-dc.html). In my implementation, I configure all necessary endpoints in ZohoAuthenticationPostConfigureOptions.cs file and use hardcoded endpoints for selected region. Do you mean to use this endpoint (https://accounts.zoho.com/oauth/serverinfo) to receive locations or smth else?

[kevinchalet]

In my implementation, I configure all necessary endpoints in ZohoAuthenticationPostConfigureOptions.cs file and use hardcoded endpoints for selected region.

But they are configured statically/globally and are used for all users. Yet, if your application is configured to use the US region and you try to log in with a EU account, you'll get an error during the token request since the client was expected to send that token request to the EU token endpoint and not to the US token endpoint.

[kevinchalet]

That (stupid) logic is explained here: https://www.zoho.com/accounts/protocol/oauth/multi-dc/client-authorization.html

[denis-goncharenko]

Hey, @kevinchalet ! When you get a chance, could you take a look at this pull request?

[kevinchalet]

Hey, @kevinchalet ! When you get a chance, could you take a look at this pull request?

Hey,

Sorry for the late reply, busy weekend 🤣

[martincostello]

Just to confirm, have you tested this works with the real service?

[denis-goncharenko]

Just to confirm, have you tested this works with the real service?

yep, I just did one more test and it works as expected.

[martincostello]

Thanks again for your contribution. I'll look to do a 8.2.0 release for this and Docusign at some point this weekend.

[martincostello]

The Docusign and Zoho providers are now both available from NuGet.org as part of the 8.2.0 release - thanks again!