WEBAPI 增加身份驗證（OAUTH 2.0方式）

1，在Webapi項目下添加如下引用：

Microsoft.AspNet.WebApi.Owin

Owin

Microsoft.Owin.Host.SystemWeb

Microsoft.Owin.Security.OAuth

Microsoft.Owin.Security.Cookies

Microsoft.AspNet.Identity.Owin

Microsoft.Owin.Cors

2，在項目下新建Startup類，這個類將作為owin的啟動入口，添加下面的代碼

3，修改?Startup類中方法

public?class?Startup
{
????public?void?Configuration(IAppBuilder app)
????{
????????// 有關如何配置應用程序的詳細信息，請訪問 http://go.microsoft.com/fwlink/?LinkID=316888
????????ConfigAuth(app);
????????HttpConfiguration config =?new?HttpConfiguration();
????????WebApiConfig.Register(config);
????????app.UseCors(CorsOptions.AllowAll);
????????app.UseWebApi(config);
????}
????public?void?ConfigAuth(IAppBuilder app)
????{
????????OAuthAuthorizationServerOptions option =?new?OAuthAuthorizationServerOptions()
????????{
????????????AllowInsecureHttp =?true,
????????????TokenEndpointPath =?new?PathString("/token"),?//獲取 access_token 授權服務請求地址
????????????AccessTokenExpireTimeSpan = TimeSpan.FromDays(1),?//access_token 過期時間
????????????Provider =?new?SimpleAuthorizationServerProvider(),?//access_token 相關授權服務
????????????RefreshTokenProvider =?new?SimpleRefreshTokenProvider()?//refresh_token 授權服務
????????};
????????app.UseOAuthAuthorizationServer(option);
????????app.UseOAuthBearerAuthentication(new?OAuthBearerAuthenticationOptions());
????}
}

4， OAuth身份認證，新建SimpleAuthorizationServerProvider類

public?class?SimpleAuthorizationServerProvider : OAuthAuthorizationServerProvider
{
????public?override?Task ValidateClientAuthentication(OAuthValidateClientAuthenticationContext context)
????{
????????context.Validated();
????????return?Task.FromResult<object>(null);
????}
????public?override?async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
????{
????????context.OwinContext.Response.Headers.Add("Access-Control-Allow-Origin",?new[] {?"*"?});
????????AccountService accService =?new?AccountService();
????????string?md5Pwd = LogHelper.MD5CryptoPasswd(context.Password);
????????IList<object[]> ul = accService.Login(context.UserName, md5Pwd);
????????if?(ul.Count() == 0)
????????{
????????????context.SetError("invalid_grant",?"The username or password is incorrect");
????????????return;
????????}
????????var?identity =?new?ClaimsIdentity(context.Options.AuthenticationType);
????????identity.AddClaim(new?Claim("sub", context.UserName));
????????identity.AddClaim(new?Claim("role",?"user"));
????????context.Validated(identity);
????}
}

5，?新建SimpleRefreshTokenProvider類

public?class?SimpleRefreshTokenProvider : AuthenticationTokenProvider
{
????private?static?ConcurrentDictionary<string,?string> _refreshTokens =?new?ConcurrentDictionary<string,?string>();
????/// <summary>
????/// 生成 refresh_token
????/// </summary>
????public?override?void?Create(AuthenticationTokenCreateContext context)
????{
????????context.Ticket.Properties.IssuedUtc = DateTime.UtcNow;
????????context.Ticket.Properties.ExpiresUtc = DateTime.UtcNow.AddDays(60);
????????context.SetToken(Guid.NewGuid().ToString("n"));
????????_refreshTokens[context.Token] = context.SerializeTicket();
????}
????/// <summary>
????/// 由 refresh_token 解析成 access_token
????/// </summary>
????public?override?void?Receive(AuthenticationTokenReceiveContext context)
????{
????????string?value;
????????if?(_refreshTokens.TryRemove(context.Token,?out?value))
????????{
????????????context.DeserializeTicket(value);
????????}
????}
}

6，在要加驗證的接口上加上[Authorize]標記

[Authorize]
public?class?EmployeeController : ApiController
{
????//查詢所有員工
????[HttpGet]
????public?IList<UC_Employee> GetAllEmps()
????{
　　????return?new?List<UC_Employee>();
????}
}

7，調用api程序

8,傳入參數，獲取token

9，傳入access_token

本文版權歸作者和博客園共有，歡迎轉載，但未經作者同意需保留此段聲明，且在文章頁面明顯位置給出原文連接。

作者：Lnice
出處：http://www.cnblogs.com/lnice

本文來自互聯網用戶投稿，該文觀點僅代表作者本人，不代表本站立場。本站僅提供信息存儲空間服務，不擁有所有權，不承擔相關法律責任。
如若轉載，請注明出處：http://www.pswp.cn/news/286439.shtml
繁體地址，請注明出處：http://hk.pswp.cn/news/286439.shtml
英文地址，請注明出處：http://en.pswp.cn/news/286439.shtml

如若內容造成侵權/違法違規/事實不符，請聯系多彩編程網進行投訴反饋email:809451989@qq.com，一經查實，立即刪除！