only show home page (and error description) in development #2211

src/Host/Quickstart/Home/HomeController.cs

@@ -4,6 +4,7 @@
 
 using IdentityServer4.Services;
 using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Hosting;
 using Microsoft.AspNetCore.Mvc;
 using System.Threading.Tasks;
 
@@ -14,15 +15,23 @@ namespace IdentityServer4.Quickstart.UI
     public class HomeController : Controller
     {
         private readonly IIdentityServerInteractionService _interaction;
+        private readonly IHostingEnvironment _environment;
 
-        public HomeController(IIdentityServerInteractionService interaction)
+        public HomeController(IIdentityServerInteractionService interaction, IHostingEnvironment environment)
         {
             _interaction = interaction;
+            _environment = environment;
         }
 
         public IActionResult Index()
         {
-            return View();
+            if (_environment.IsDevelopment())
+            {
+                // only show in development
+                return View();
+            }
+
+            return NotFound();
         }
 
         /// <summary>
@@ -37,6 +46,12 @@ public async Task<IActionResult> Error(string errorId)
             if (message != null)
             {
                 vm.Error = message;
+
+                if (!_environment.IsDevelopment())
+                {
+                    // only show in development
+                    message.ErrorDescription = null;
+                }
             }
 
             return View("Error", vm);

src/Host/Views/Home/Index.cshtml

@@ -1,4 +1,4 @@
-<div class="welcome-page">
+<div class="welcome-page">
     <div class="row page-header">
         <div class="col-sm-10">
             <h1>

src/Host/Views/Shared/Error.cshtml

@@ -1,10 +1,8 @@
-@using Microsoft.AspNetCore.Hosting
 @model ErrorViewModel
-@inject IHostingEnvironment host
 
 @{
     var error = Model?.Error?.Error;
-    var errorDescription = host.IsDevelopment() ? Model?.Error?.ErrorDescription : null;
+    var errorDescription = Model?.Error?.ErrorDescription;
     var request_id = Model?.Error?.RequestId;
 }