aws/aws-sdk-net

 services.AddScoped<IViewRenderService, ViewRenderService>();

            services.AddMvc()
                .AddViewLocalization()
                    .AddDataAnnotationsLocalization()
                .AddJsonOptions(options =>
                {
                    options.SerializerSettings.ContractResolver = new CamelCasePropertyNamesContractResolver();
                    options.SerializerSettings.ReferenceLoopHandling = ReferenceLoopHandling.Ignore;
                });

            services.AddDefaultAWSOptions(Configuration.GetAWSOptions());
            services.AddAuthorization(options =>
            {
                //Temporary Authorization FIX - added roles policy (to test roles), while AwsCognito - policy not implemented
                options.AddPolicy("RequireRoles",
                    policy => policy.RequireRole("SysAdmin", "OrgAdmin", "PhiUser", "User"));
            });

            services.AddScoped<ILandingPageUserService, LandingPageUserService>();
            services.AddAuthentication(options =>
            {
                options.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                options.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                options.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme;
            })
                .AddCookie(options =>
                {
                    //options.Cookie.SecurePolicy = mEnvironment.IsDevelopment()
                    //    ? CookieSecurePolicy.None
                    //    : CookieSecurePolicy.Always;
                    options.Cookie.SecurePolicy = CookieSecurePolicy.Always;
                    options.Cookie.SameSite = SameSiteMode.None;
                    options.Cookie.Expiration = TimeSpan.FromMinutes(4.5);
                })
                .AddOpenIdConnect(options =>
                {
                    options.ResponseType = Configuration["Authentication:Cognito:ResponseType"];
                    options.MetadataAddress = Configuration["Authentication:Cognito:MetadataAddress"];
                    options.ClientId = Configuration["Authentication:Cognito:ClientId"];
                    //options.CallbackPath = new PathString(Configuration["Authentication:Cognito:CallbackUrl"]);
                    options.SaveTokens = bool.Parse(Configuration["Authentication:Cognito:SaveToken"]);
                    options.UseTokenLifetime = true;
                    options.Events = new OpenIdConnectEvents
                    {
                        OnTokenValidated = async context =>
                        {
                            var authService = context.HttpContext.RequestServices
                                .GetRequiredService<IUserAuthenticationService>();
                            await authService.OnTokenValidated(context,
                                Configuration["Authentication:Cognito:SignedOutRedirectUri"]);
                        },
                        OnRedirectToIdentityProvider = async context =>
                        {
                            var authService = context.HttpContext.RequestServices
                                .GetRequiredService<IUserAuthenticationService>();
                            await authService.OnRedirectToIdentityProvider(context,
                                Configuration["Authentication:Cognito:ClientId"]);
                        },
                        OnRedirectToIdentityProviderForSignOut = context =>
                        {
                            var logoutUri =
                                HttpUtility.UrlEncode(Configuration["Authentication:Cognito:SignedOutRedirectUri"]);
                            var issuerAddress =
                                $"{Configuration["Authentication:Cognito:LogoutEndpoint"]}/logout?logout_uri={logoutUri}";
                            var authService = context.HttpContext.RequestServices
                                .GetRequiredService<IUserAuthenticationService>();