OAuth2 .net MVC实现获取token

OAuth2 的原理这里不多讲，可以看：https://www.cnblogs.com/icebutterfly/p/8066548.html

直奔主题：这里要实现的功能为，统计微软的Owin程序集实现本地获取token，完成token工作。

上代码：

第一步：配置Startup.Auth.cs

    public partial class Startup
    {

        public void ConfigureAuth(IAppBuilder app)
        {
            app.UseOAuthAuthorizationServer(new OAuthAuthorizationServerOptions
            {
                AllowInsecureHttp = true,
                TokenEndpointPath = new PathString("/oauth2/token"),//设置获取token地址
                Provider = new MyOAuthAuthorizationServerProvider(),//自定义token验证
                AccessTokenExpireTimeSpan = TimeSpan.FromSeconds(300)//定义token过期时间
            });

            //下面必须加用bearer方式
            app.UseOAuthBearerAuthentication(new OAuthBearerAuthenticationOptions()
            {
            });
        }
    }

第二步：继承OAuthAuthorizationServerProvider接口，重新里面的严重方法。我只实现通过用户名密码获取token，所以只重写两个方法即可

public class MyOAuthAuthorizationServerProvider : OAuthAuthorizationServerProvider
    {
        public override Task ValidateClientAuthentication(OAuthValidateClientAuthenticationContext context)
        {
            string clientId;
            string clientSecret;
            if (!context.TryGetBasicCredentials(out clientId, out clientSecret))
            {
                context.TryGetFormCredentials(out clientId, out clientSecret);
            }

            if (context.ClientId == null)
            {
                context.SetError("invalid_clientId", "client_Id is not set");
                return Task.FromResult<object>(null);
            }
            if (!string.IsNullOrEmpty(clientSecret))
            {
                context.OwinContext.Set("clientSecret", clientSecret);
            }
            var client = ClientRepository.Clients.Where(c => c.Id == clientId).FirstOrDefault();
            if (client != null)
            {
                context.Validated();
            }
            else
            {
                context.SetError("invalid_clientId", string.Format("Invalid client_id '{0}'", context.ClientId));
                return Task.FromResult<object>(null);
            }
            return Task.FromResult<object>(null);
        }

        public override Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
        {
            //这里写验证代码
            if (context.UserName=="admin"&&context.Password=="123456")
            {
                var identity = new ClaimsIdentity(
                    new GenericIdentity(context.UserName,
                    OAuthDefaults.AuthenticationType),
                    context.Scope.Select(x => new Claim("urn:oauth:scope", x)));
                context.Validated(identity);
            }
            else
            {
                context.SetError("invalid_grant", "The user name or password is incorrect");
                return Task.FromResult<object>(null);
            }
            return Task.FromResult(0);
        }
    }

第三步：定义Client实体

    public class Client
    {
        public string Id { get; set; }
    }

    public class ClientRepository
    {
        public static List<Client> Clients = new List<Client>() {
            new Client{
                 Id = "test1"
            },
            new Client{
                 Id = "test2",
            }
        };
    }

第四步：编写测试方法

    public class HomeController : Controller
    {

        [Authorize]//授权标签
        public ActionResult Test()
        {
            //获取到授权登陆用户
            var authentication = HttpContext.GetOwinContext().Authentication;
            string name= authentication.User.Identity.Name;

            return Json(new { Message="Hello world",name= name });
        }

    }

View Code

OK，就这么简单完成。

现在来测试：

第一步：获取token，我用的POSTMan。成功获取到token

第二步：用postman测试也行，这里贴出用ajax请求的结果

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
    <title></title>
    <meta charset="utf-8" />
    <script src="Scripts/jquery-1.10.2.js"></script>
    <script>
        function ajax() {
            $.ajax({
                url: '/home/test',
                type: 'POST',
                contentType: 'application/x-www-form-urlencoded',
                headers: {
                    'Authorization': 'Bearer ' + $('#token').val(),
                },
                data: {},
                success: function (data) {
                    console.log(data);
                },
            })
        }
    </script>
</head>
<body>
    <input type="text" id="token" />
    <input type="button" value="提交" onclick="ajax()" />
</body>
</html>

测试结果为：

{
    "Message": "Hello world",
    "name": "admin"
}

相关阅读:
[树状数组]H千万别用树套树
 [可持久化权值线段树上二分] Just h-index
[大数] 组合数
 [模板]离散化
 [树状数组] Galahad
[可持久化权值线段树] hdu 6703 array
python Web抓取（二）selenium模块的使用、对浏览器的按键操作及错误处理
 python 调试大法-大笨蛋的笔记
 从终端运行python程序模块内变量的作用域、添加模块的搜索路径
 Python组织文件实践：查找大文件、用Mb、kb显示文件尺寸、计算程序运行时间
原文地址：https://www.cnblogs.com/zhuyapeng/p/10520523.html