.Net Framework WebApi使用OAuth2.0

参考资料：https://olepetterdahlmann.com/2016/08/08/implement-an-oauth-2-0-authorization-server-using-owin-oauth-middleware-on-asp-net-web-api/  

1.新建webapi项目，并添加以下三个库引用：

Microsoft.AspNet.WebApi.Owin
Microsoft.Owin.Host.SystemWeb

Microsoft ASP.NET Identity Owin

2.App_Start目录下新建类：Startup.Auth.cs

  

   

    

     

    
    

     

      using Microsoft.Owin;
     
    
   

    

     

    
    

     

      using Microsoft.Owin.Security.OAuth;
     
    
   

    

     

    
    

     

      using Owin;
     
    
   

    

     

    
    

     

      using System;
     
    
   

    

     

    
    

     

      using System.Collections.Generic;
     
    
   

    

     

    
    

     

      using System.Linq;
     
    
   

    

     

    
    

     

      using System.Web;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

      namespace YFAPICommon
     
    
   

    

     

    
    

     

      {
     
    
   

    

     

    
    

     
    //Startup.Auth.cs
     
    
   

    

     

    
    

     
    public partial class Startup
     
    
   

    

     

    
    

     

          {
     
    
   

    

     

    
    

     
        public static OAuthAuthorizationServerOptions OAuthOptions { get; private set; }
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
        static Startup()
     
    
   

    

     

    
    

     

              {
     
    
   

    

     

    
    

     

                  OAuthOptions = new OAuthAuthorizationServerOptions
     
    
   

    

     

    
    

     

                  {
     
    
   

    

     

    
    

     

                      TokenEndpointPath = new PathString("/token"),
     
    
   

    

     

    
    

     
                //Provider = new OAuthAppProvider(),
     
    
   

    

     

    
    

     

                      AccessTokenExpireTimeSpan = TimeSpan.FromDays(2),
     
    
   

    

     

    
    

     

                      AllowInsecureHttp = true
     
    
   

    

     

    
    

     

                  };
     
    
   

    

     

    
    

     

              }
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
        public void ConfigureAuth(IAppBuilder app)
     
    
   

    

     

    
    

     

              {
     
    
   

    

     

    
    

     

                  app.UseOAuthBearerTokens(OAuthOptions);
     
    
   

    

     

    
    

     

              }
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
        public void Configuration(IAppBuilder app)
     
    
   

    

     

    
    

     

              {
     
    
   

    

     

    
    

     

                  ConfigureAuth(app);
     
    
   

    

     

    
    

     

              }
     
    
   

    

     

    
    

     

          }
     
    
   

    

     

    
    

     

      }
     
    
  
 

  
 
 

3.新建用来创建Token的控制器：AuthenticateController.cs

  

   

    

     

    
    

     

      using Microsoft.Owin.Security;
     
    
   

    

     

    
    

     

      using Microsoft.Owin.Security.OAuth;
     
    
   

    

     

    
    

     

      using Newtonsoft.Json.Linq;
     
    
   

    

     

    
    

     

      using System;
     
    
   

    

     

    
    

     

      using System.Collections.Generic;
     
    
   

    

     

    
    

     

      using System.Linq;
     
    
   

    

     

    
    

     

      using System.Net;
     
    
   

    

     

    
    

     

      using System.Net.Http;
     
    
   

    

     

    
    

     

      using System.Security.Claims;
     
    
   

    

     

    
    

     

      using System.Web.Http;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

      namespace YFAPICommon.Controllers
     
    
   

    

     

    
    

     

      {
     
    
   

    

     

    
    

     
    public class LoginInput
     
    
   

    

     

    
    

     

          {
     
    
   

    

     

    
    

     
        public string account { set; get; }
     
    
   

    

     

    
    

     
        public string pass { set; get; }
     
    
   

    

     

    
    

     

          }
     
    
   

    

     

    
    

     
    public class AuthenticateController : ApiController
     
    
   

    

     

    
    

     

          {
     
    
   

    

     

    
    

     

              [HttpPost]
     
    
   

    

     

    
    

     
        public JObject GetAccessTokenByPass(LoginInput input)
     
    
   

    

     

    
    

     

              {
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
            var tokenExpiration = TimeSpan.FromDays(14);
     
    
   

    

     

    
    

     

                  ClaimsIdentity identity = new ClaimsIdentity(OAuthDefaults.AuthenticationType);
     
    
   

    

     

    
    

     

                  identity.AddClaim(new Claim(ClaimTypes.Name, "zzzili"));
     
    
   

    

     

    
    

     

                  identity.AddClaim(new Claim(ClaimTypes.Sid, "1"));
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
            var props = new AuthenticationProperties()
     
    
   

    

     

    
    

     

                  {
     
    
   

    

     

    
    

     

                      IssuedUtc = DateTime.UtcNow,
     
    
   

    

     

    
    

     

                      ExpiresUtc = DateTime.UtcNow.Add(tokenExpiration),
     
    
   

    

     

    
    

     

                  };
     
    
   

    

     

    
    

     
            var ticket = new AuthenticationTicket(identity, props);
     
    
   

    

     

    
    

     
            var accessToken = Startup.OAuthOptions.AccessTokenFormat.Protect(ticket);
     
    
   

    

     

    
    

     

                  JObject tokenResponse = new JObject(
     
    
   

    

     

    
    

     
                                        new JProperty("userName", "zzzili"),
     
    
   

    

     

    
    

     
                                        new JProperty("access_token", accessToken),
     
    
   

    

     

    
    

     
                                        new JProperty("token_type", "bearer"),
     
    
   

    

     

    
    

     
                                        new JProperty("expires_in", tokenExpiration.TotalSeconds.ToString()),
     
    
   

    

     

    
    

     
                                        new JProperty(".issued", ticket.Properties.IssuedUtc.ToString()),
     
    
   

    

     

    
    

     
                                        new JProperty(".expires", ticket.Properties.ExpiresUtc.ToString()));
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
            return tokenResponse;
     
    
   

    

     

    
    

     

              }
     
    
   

    

     

    
    

     

          }
     
    
   

    

     

    
    

     

      }
     
    
  
 

  
 
 

4.添加Swagger支持：

参看：https://www.cnblogs.com/daxnet/p/6181366.html

5.添加swagger对OAuth的支持，可以在swagger页面上输入token：

在SwaggerConfig.cs文件中修改如下代码：

c.EnableApiKeySupport("Authorization", "header");
 

6.项目启动后可以在Swagger页面的右上角api_key处输入access_Token，例如：

Bearer NfHlhFRSf78Ig9cIQ7H2l0P9nxMpaU4H53j_h2PFf2PlqPnIJ**************

7.添加完成后，即可在控制器内对方法添加Auth身份认证：

  

   

    

     

    
    

     

              [Authorize]
     
    
   

    

     

    
    

     

              [HttpPost]
     
    
   

    

     

    
    

     
        public string Test1()
     
    
   

    

     

    
    

     

              {
     
    
   

    

     

    
    

     
            var ident = this.User.Identity;
     
    
   

    

     

    
    

     
            return "test";
     
    
   

    

     

    
    

     

              }
     
    
  
 

  

   

    

     

    
    

     
        protected int GetAuthUserId()
     
    
   

    

     

    
    

     

              {
     
    
   

    

     

    
    

     
            var ident = (ClaimsIdentity)User.Identity;
     
    
   

    

     

    
    

     
            return int.Parse(ident.FindFirst(ClaimTypes.Sid).Value);
     
    
   

    

     

    
    

     

              }
     
    
  
 

工程git地址：https://github.com/zzzili/YFAPICommon

文章来源: zzzili.blog.csdn.net，作者：清雨小竹，版权归原作者所有，如需转载，请联系作者。

原文链接：zzzili.blog.csdn.net/article/details/79297800