ASP.net的資源授權使用身份服務器的WEP API

我有一個使用身份服務器進行身份驗證的ASP.net MVC5客戶端（WEBAPP）。我使用下面的代碼來訪問web api。從Identity Server的ASP.net的資源授權使用身份服務器的WEP API

private async Task<TokenResponse> GetTokenAsync() 
    { 
     var client = new TokenClient(
      "https://localhost:44301/identity/connect/token", 
      "mvc_service", 
      "secret"); 

     return await client.RequestClientCredentialsAsync("sampleApi"); 
    }

而且使用訪問令牌

1.Get訪問令牌，我打電話的WebAPI

  var client = new HttpClient();     
      client.SetBearerToken(token); 
      var gg = this.HttpContext; 
      var json = await client.GetStringAsync("http://localhost:50990/jarvis"); 
      var jsonStr = JArray.Parse(json).ToString(); 
      var model = JsonConvert.DeserializeObject<List<User>>(jsonStr);

的網絡API由身份提供服務器和資源Authotization擔保由IdentityServer（Thinktecture.IdentityModel.Owin.ResourceAuthorization.WebApi）

APIController如下

[Authorize] 
public class AuthorizationController : ApiController 
{ 
    [ResourceAuthorize(AuthorizationResources.AdminActions.Create, AuthorizationResources.Admin)] 
    public async Task<IHttpActionResult> Get() 
    { 
     var user = User as ClaimsPrincipal; 

     List<User> usersList = await GetUsers(); 
     return Json(usersList); 
    } 
}

而且我ResourceAuthorize是如下

ResourceAuthorize

public class APIAuthorization: ResourceAuthorizationManager 
{ 
    public override Task<bool> CheckAccessAsync(ResourceAuthorizationContext context) 
    { 
     var resource = context.Resource.First().Value; 

     if (resource == AuthorizationResources.Admin) 
     { 
      return CheckAdminAccessAsync(context); 
     } 

     if (resource == AuthorizationResources.Editor) 
     { 
      return CheckEditorAccessAsync(context); 
     } 

     if (resource == AuthorizationResources.Reader) 
     { 
      return CheckReaderAccessAsync(context); 
     } 

     return Nok(); 
    } 

    private Task<bool> CheckReaderAccessAsync(ResourceAuthorizationContext context) 
    { 
     return Eval(context.Principal.IsInRole("Admin")); 
    } 

    private Task<bool> CheckEditorAccessAsync(ResourceAuthorizationContext context) 
    { 
     return Eval(context.Principal.IsInRole("Admin")); 
    } 

    private Task<bool> CheckAdminAccessAsync(ResourceAuthorizationContext context) 
    { 
     return Eval(context.Principal.IsInRole("Admin")); 
    } 
}

我的問題是

我如何通過索賠到的WebAPI這樣我就可以做一次檢查中APIA授權： Eval（context.Principal.IsInRole（「Admin」））
這是做資源授權的正確方法嗎？

來源

2016-07-21 Naveen Kumar

基本上我是一個桌面開發。我是新來的網絡應用程序 –

 app.UseIdentityServerBearerTokenAuthentication(new IdentityServerBearerTokenAuthenticationOptions 
     { 
      Authority = "https://localhost:44333/core", 
      RequiredScopes = new[] { "profile", "openid" }, 
     });**This is what i was looking for , This solved my problem**

來源

2016-10-05 18:37:40

ASP.net的資源授權使用身份服務器的WEP API

回答

相關問題