Add RequireHttpsMetadata to ProviderOptions to allow modify Discovery policy RequireHttps value

src/Microsoft.MobileBlazorBindings.Authentication/Options/OidcProviderOptions.cs

@@ -62,5 +62,10 @@ public class OidcProviderOptions
         /// </summary>
         [JsonPropertyName("response_mode")]
         public string ResponseMode { get; set; }
+
+        /// <summary>
+        /// Gets or sets a value indicating whether require https for request metadata.
+        /// </summary>
+        public bool RequireHttpsMetadata { get; set; } = true;
     }
 }

src/Microsoft.MobileBlazorBindings.Authentication/Services/OidcAuthenticationService.cs

@@ -313,16 +313,19 @@ protected virtual async Task<OidcClient> CreateOidcClientFromOptions()
                 throw new OptionsValidationException("ResponseMode", typeof(OidcProviderOptions), new string[] { $"{oidcProviderOptions.ResponseMode} is not a valid response mode." });
             }
 
-            return new OidcClient(new OidcClientOptions()
-            {
-                Authority = oidcProviderOptions.Authority,
-                ClientId = oidcProviderOptions.ClientId,
-                PostLogoutRedirectUri = oidcProviderOptions.PostLogoutRedirectUri,
-                RedirectUri = oidcProviderOptions.RedirectUri,
-                ResponseMode = responseMode,
-                LoadProfile = false,
-                Scope = string.Join(" ", oidcProviderOptions.DefaultScopes),
-            });
+            var oidcClientOptions = new OidcClientOptions
+                                    {
+                                        Authority = oidcProviderOptions.Authority,
+                                        ClientId = oidcProviderOptions.ClientId,
+                                        PostLogoutRedirectUri = oidcProviderOptions.PostLogoutRedirectUri,
+                                        RedirectUri = oidcProviderOptions.RedirectUri,
+                                        ResponseMode = responseMode,
+                                        LoadProfile = false,
+                                        Scope = string.Join(" ", oidcProviderOptions.DefaultScopes),
+                                    };
+
+            oidcClientOptions.Policy.Discovery.RequireHttps = oidcProviderOptions.RequireHttpsMetadata;
+            return new OidcClient(oidcClientOptions);
         }
 
         /// <summary>