未經授權的例外，ServiceStack

Question

我想讓服務堆服務只有授權用戶纔可訪問。這是我的註冊方法var authResponse = client.Post(new Authenticate { provider = CredentialsAuthProvider.Name, //= credentials UserName = model.Username, Password = model.Password, RememberMe = true, }); client.UserName = model.Username; client.Password = model.Password;

這是登錄方法

[HttpPost] 
    [ActionName("LogIn")] 
    public ActionResult Login(LogInModel model) 
    { 
     var authResponse = client.Post(new Authenticate 
     { 
      provider = CredentialsAuthProvider.Name, //= credentials 
      UserName = model.Username, 
      Password = model.Password, 
      RememberMe = true, 
     }); 
     client.UserName = model.Username; 
     client.Password = model.Password; 

     return RedirectToAction("RefundPayment"); 
    } 

APPHOST：

public override void Configure(Container container) 
    { 
     SetConfig(new HostConfig 
     { 
      HandlerFactoryPath = "api", 
     }); 
     //Config examples 
     //this.Plugins.Add(new PostmanFeature()); 
     //this.Plugins.Add(new CorsFeature()); 

     //Set MVC to use the same Funq IOC as ServiceStack 
     ControllerBuilder.Current.SetControllerFactory(new FunqControllerFactory(container)); 

     Plugins.Add(new AuthFeature(() => new AuthUserSession(), 
      new IAuthProvider[] { 
      new BasicAuthProvider(), //Sign-in with HTTP Basic Auth 
      new CredentialsAuthProvider(), //HTML Form post of UserName/Password credentials 
      })); 

     Plugins.Add(new RegistrationFeature()); 

     container.Register<ICacheClient>(new MemoryCacheClient()); 
     var userRep = new InMemoryAuthRepository() ; 
     container.Register<IUserAuthRepository>(userRep); 
    } 

爲什麼會出現這種異常，儘管我在登錄驗證用戶在方法？我必須在AppHost中更改一些代碼嗎？謝謝。

Answer 1

看一看在ServiceStack MVC documentation爲例如何從MVC使用ServiceStack認證，如而是採用了ServiceClient你可以調用ServiceStack的AuthenticateService直接：

using (var authService = ResolveService<AuthenticateService>()) 
{ 
    var response = authService.Authenticate(new Authenticate { 
     provider = CredentialsAuthProvider.Name, 
     UserName = userName, 
     Password = password, 
     RememberMe = true, 
    }); 

    // add ASP.NET auth cookie 
    FormsAuthentication.SetAuthCookie(userName, true); 

    return Redirect(string.IsNullOrEmpty(redirect) ? "/" : redirect); 
} 

然後你可以使用ServiceStack的Authentication Attributes到將對您的服務的訪問權限限制爲經過身份驗證的客戶