溫馨提示×

如何在C#項(xiàng)目中集成OAuth

c#
小樊
83
2024-09-02 13:36:05
欄目: 編程語言

在C#項(xiàng)目中集成OAuth，通常需要使用OAuth庫（例如：Microsoft.AspNetCore.Authentication.OAuth）和遵循OAuth 2.0協(xié)議

  1. 安裝必要的NuGet包：

    對于ASP.NET Core項(xiàng)目，您需要安裝以下NuGet包：

    Microsoft.AspNetCore.Authentication.OAuth

    使用以下命令安裝：

    dotnet add package Microsoft.AspNetCore.Authentication.OAuth

  2. 在Startup.cs文件中配置OAuth認(rèn)證：

    在ConfigureServices方法中添加OAuth認(rèn)證服務(wù)：

    public void ConfigureServices(IServiceCollection services)
{
    // ...

    services.AddAuthentication().AddOAuth("OAuth", options =>
    {
        options.ClientId = "your_client_id";
        options.ClientSecret = "your_client_secret";
        options.CallbackPath = new PathString("/callback");
        options.AuthorizationEndpoint = "https://example.com/oauth/authorize";
        options.TokenEndpoint = "https://example.com/oauth/token";
        options.UserInformationEndpoint = "https://example.com/oauth/userinfo";

        options.SaveTokens = true;

        options.ClaimActions.MapJsonKey(ClaimTypes.NameIdentifier, "id");
        options.ClaimActions.MapJsonKey(ClaimTypes.Name, "name");
        options.ClaimActions.MapJsonKey(ClaimTypes.Email, "email");
    });

    // ...
}

    請確保將上述代碼中的"your_client_id"、“your_client_secret”、“https://example.com/oauth/authorize”、"https://example.com/oauth/token"和"https://example.com/oauth/userinfo"替換為您的OAuth提供商提供的實(shí)際值。

  3. 配置中間件：

    在Configure方法中添加UseAuthentication中間件：

    public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
{
    // ...

    app.UseAuthentication();
    app.UseAuthorization();

    // ...
}

  4. 創(chuàng)建一個控制器來處理OAuth登錄：

    using System;
using System.Threading.Tasks;
using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Mvc;

[Route("[controller]/[action]")]
public class AccountController : Controller
{
    [HttpGet]
    public IActionResult Login()
    {
        var redirectUrl = Url.Action(nameof(HomeController.Index), "Home");
        return Challenge(
            new AuthenticationProperties { RedirectUri = redirectUrl },
            "OAuth");
    }

    [HttpGet]
    public async Task<IActionResult> Callback()
    {
        var authenticateResult = await HttpContext.AuthenticateAsync("OAuth");
        if (!authenticateResult.Succeeded)
        {
            return RedirectToAction(nameof(Login));
        }

        var claimsPrincipal = authenticateResult.Principal;

        // 在此處處理用戶登錄，例如創(chuàng)建會話或?qū)⑵浯鎯Φ綌?shù)據(jù)庫

        await HttpContext.SignInAsync(
            CookieAuthenticationDefaults.AuthenticationScheme,
            claimsPrincipal);

        return RedirectToAction(nameof(HomeController.Index), "Home");
    }

    [HttpPost]
    public async Task<IActionResult> Logout()
    {
        await HttpContext.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
        return RedirectToAction(nameof(HomeController.Index), "Home");
    }
}

  5. 更新視圖和布局以顯示登錄/注銷按鈕：

    在視圖中添加登錄和注銷按鈕，例如在_Layout.cshtml中：

    @if (User.Identity.IsAuthenticated)
{
    <form asp-controller="Account" asp-action="Logout" method="post">
       <button type="submit">注銷</button>
    </form>
}
else
{
    <a asp-controller="Account" asp-action="Login">登錄</a>
}

現(xiàn)在，您已經(jīng)在C#項(xiàng)目中集成了OAuth。用戶可以使用OAuth提供商進(jìn)行身份驗(yàn)證，并在您的應(yīng)用程序中登錄和注銷。

0 踩