淺談如何在ASP.NET Core中實現(xiàn)一個基礎(chǔ)的身份認證

services.AddAuthorization(); 

app.UseCookieAuthentication(new CookieAuthenticationOptions 
{ 
 AuthenticationScheme = "Cookie", 
 LoginPath = new PathString("/Account/Login"), 
 AccessDeniedPath = new PathString("/Account/Forbidden"), 
 AutomaticAuthenticate = true, 
 AutomaticChallenge = true 
});

public void ConfigureServices(IServiceCollection services) 
{ 
 services.AddMvc(); 
 
 services.AddAuthorization(); 
} 
 
public void Configure(IApplicationBuilder app, IHostingEnvironment env, ILoggerFactory loggerFactory) 
{ 
 app.UseCookieAuthentication(new CookieAuthenticationOptions 
 { 
 AuthenticationScheme = "Cookie", 
 LoginPath = new PathString("/Account/Login"), 
 AccessDeniedPath = new PathString("/Account/Forbidden"), 
 AutomaticAuthenticate = true, 
 AutomaticChallenge = true 
 }); 
 
 app.UseMvc(routes => 
 { 
 routes.MapRoute( 
 name: "default", 
 template: "{controller=Home}/{action=Index}/{id?}"); 
 }); 
}

public class User
{
 public string UserName { get; set; }
 public string Password { get; set; }
}

[HttpGet] 
public IActionResult Login() 
{ 
 return View(); 
} 
 
[HttpPost] 
public async Task<IActionResult> Login(User userFromFore) 
{ 
 var userFromStorage = TestUserStorage.UserList 
 .FirstOrDefault(m => m.UserName == userFromFore.UserName && m.Password == userFromFore.Password); 
 
 if (userFromStorage != null) 
 { 
 //you can add all of ClaimTypes in this collection 
 var claims = new List<Claim>() 
 { 
 new Claim(ClaimTypes.Name,userFromStorage.UserName) 
 //,new Claim(ClaimTypes.Email,"emailaccount@microsoft.com") 
 }; 
 
 //init the identity instances 
 var userPrincipal = new ClaimsPrincipal(new ClaimsIdentity(claims, "SuperSecureLogin")); 
 
 //signin 
 await HttpContext.Authentication.SignInAsync("Cookie", userPrincipal, new AuthenticationProperties 
 { 
 ExpiresUtc = DateTime.UtcNow.AddMinutes(20), 
 IsPersistent = false, 
 AllowRefresh = false 
 }); 
 
 return RedirectToAction("Index", "Home"); 
 } 
 else 
 { 
 ViewBag.ErrMsg = "UserName or Password is invalid"; 
 
 return View(); 
 } 
} 
 
public async Task<IActionResult> Logout() 
{ 
 await HttpContext.Authentication.SignOutAsync("Cookie"); 
 
 return RedirectToAction("Index", "Home"); 
}

//for simple, I'm not using the database to store the user data, just using a static class to replace it.
public static class TestUserStorage
{
 public static List<User> UserList { get; set; } = new List<User>() {
 new User { UserName = "User1",Password = "112233"}
 };
}

using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
using Microsoft.AspNetCore.Mvc;
using TestBasicAuthor.Model;
using System.Security.Claims;
using Microsoft.AspNetCore.Http.Authentication;

// For more information on enabling MVC for empty projects, visit http://go.microsoft.com/fwlink/?LinkID=397860

namespace TestBasicAuthor.Controllers
{
 public class AccountController : Controller
 {
 [HttpGet]
 public IActionResult Login()
 {
 return View();
 }

 [HttpPost]
 public async Task<IActionResult> Login(User userFromFore)
 {
 var userFromStorage = TestUserStorage.UserList
 .FirstOrDefault(m => m.UserName == userFromFore.UserName && m.Password == userFromFore.Password);

 if (userFromStorage != null)
 {
 //you can add all of ClaimTypes in this collection 
 var claims = new List<Claim>()
 {
 new Claim(ClaimTypes.Name,userFromStorage.UserName) 
 //,new Claim(ClaimTypes.Email,"emailaccount@microsoft.com") 
 };

 //init the identity instances 
 var userPrincipal = new ClaimsPrincipal(new ClaimsIdentity(claims, "SuperSecureLogin"));

 //signin 
 await HttpContext.Authentication.SignInAsync("Cookie", userPrincipal, new AuthenticationProperties
 {
 ExpiresUtc = DateTime.UtcNow.AddMinutes(20),
 IsPersistent = false,
 AllowRefresh = false
 });

 return RedirectToAction("Index", "Home");
 }
 else
 {
 ViewBag.ErrMsg = "UserName or Password is invalid";

 return View();
 }
 }

 public async Task<IActionResult> Logout()
 {
 await HttpContext.Authentication.SignOutAsync("Cookie");

 return RedirectToAction("Index", "Home");
 }
 }

 //for simple, I'm not using the database to store the user data, just using a static class to replace it.
 public static class TestUserStorage
 {
 public static List<User> UserList { get; set; } = new List<User>() {
 new User { UserName = "User1",Password = "112233"}
 };
 }
}

@model TestBasicAuthor.Model.User

<html xmlns="http://www.w3.org/1999/xhtml">
<head>
 <title></title>
</head>
<body>
 @using (Html.BeginForm())
 {
 <table>
 <tr>
 <td></td>
 <td>@ViewBag.ErrMsg</td>
 </tr>
 <tr>
 <td>UserName</td>
 <td>@Html.TextBoxFor(m => m.UserName)</td>
 </tr>
 <tr>
 <td>Password</td>
 <td>@Html.PasswordFor(m => m.Password)</td>
 </tr>
 <tr>
 <td></td>
 <td><button>Login</button></td>
 </tr>
 </table>
 }
</body>
</html>

[Authorize]
[HttpGet]
public IActionResult AuthPage()
{
 return View();
}

<html xmlns="http://www.w3.org/1999/xhtml">
<head>
 <title></title>
</head>
<body>
 <h1>Auth page</h1>

 <p>if you are not authorized, you can't visit this page.</p>
</body>
</html>

await HttpContext.Authentication.SignInAsync("Cookie", userPrincipal, new AuthenticationProperties
{
 ExpiresUtc = DateTime.UtcNow.AddMinutes(20),
 IsPersistent = false,
 AllowRefresh = false
});

public void Configure(IApplicationBuilder app, IHostingEnvironment env, ILoggerFactory loggerFactory)
{
 app.UseCookieAuthentication(new CookieAuthenticationOptions
 {
 AuthenticationScheme = "Cookie",
 LoginPath = new PathString("/Account/Login"),
 AccessDeniedPath = new PathString("/Account/Forbidden"),
 AutomaticAuthenticate = true,
 AutomaticChallenge = true
 });
}