WebApi使用OAuth2认证

本篇文章实现了四种认证方式中的客户端模式和密码模式，未实现token持久化

未介绍OAuth2的相关概念，全部是干货，可自己在网上搜索OAuth2相关知识，在这不做过多阐述

• 一、引用OAuth2所需的dll,使用nuget下载以下依赖项

       Microsoft.AspNet.WebApi.Owin
       Microsoft.Owin.Host.SystemWeb
       Microsoft.Owin.Security.OAuth
       Microsoft.AspNet.Identity.Owin

• 二、重载OAuth2相应的验证方法

public class OAuthServerProvider : OAuthAuthorizationServerProvider
    {
        /// <summary>
        /// 验证OAuth请求
        /// </summary>
        /// <param name="context"></param>
        /// <returns></returns>
        public override Task ValidateClientAuthentication(OAuthValidateClientAuthenticationContext context)
        {
            string clientId;
            string clientSecret;

            //获取客户端凭证
            if (!context.TryGetBasicCredentials(out clientId, out clientSecret))
                context.TryGetFormCredentials(out clientId, out clientSecret);

            //保存客户端凭证
            context.OwinContext.Set<string>("clientId", clientId);
            context.OwinContext.Set<string>("clientSecret", clientSecret);
            //验证通过
            context.Validated(clientId);

            return base.ValidateClientAuthentication(context);
        }

        /// <summary>
        /// 客户端模式 验证
        /// </summary>
        /// <param name="context"></param>
        /// <returns></returns>
        public override Task GrantClientCredentials(OAuthGrantClientCredentialsContext context)
        {
            var clientSecret = context.OwinContext.Get<string>("clientSecret");
            if (context.ClientId == "admin" && clientSecret == "123")
            {
                var oAuthIdentity = new ClaimsIdentity(context.Options.AuthenticationType);
                oAuthIdentity.AddClaim(new Claim(ClaimTypes.Name, "Clear App"));
                var ticket = new AuthenticationTicket(oAuthIdentity, new AuthenticationProperties());
                context.Validated(ticket);
            }
            else
            {
                context.SetError("invalid_grant", "The username or password is incorrect.");
            }
            return base.GrantClientCredentials(context);
        }

        /// <summary>
        /// 密码模式验证
        /// </summary>
        /// <param name="context"></param>
        /// <returns></returns>
        public override Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
        {
            if (context.UserName == "admin" && context.Password == "123456")
            {
                var oAuthIdentity = new ClaimsIdentity(context.Options.AuthenticationType);
                oAuthIdentity.AddClaim(new Claim(ClaimTypes.Name, context.UserName));
                var ticket = new AuthenticationTicket(oAuthIdentity, new AuthenticationProperties());
                //替换上下文中票证信息，并将其标记为已验证
                context.Validated(ticket);
            }
            else
            {
                context.SetError("invalid_grant", "The username or password is incorrect.");
            }
            return base.GrantResourceOwnerCredentials(context);
        }

    }

• 三、添加Startup类

 public class Startup
    {
        public void Configuration(IAppBuilder app)
        {
            var options = new OAuthAuthorizationServerOptions()
            {
                TokenEndpointPath = new PathString("/oauth2/token"),//获取token访问路径
                Provider = new OAuthServerProvider(),//oauth2服务配置
                AccessTokenExpireTimeSpan = TimeSpan.FromDays(15),//token有效期
                AllowInsecureHttp = true
            };
            app.UseOAuthBearerTokens(options);
        }
    }

• 四、验证OAuth请求

 密码模式

客户端模式