.Net Core 3.0 IdentityServer4 快速入门

using IdentityServer4;	
using IdentityServer4.Models;	
using IdentityServer4.Test;	
using System.Collections.Generic;	namespace IdentityServer02	
{	public static class Config	{	/// <summary>	/// 需要保护的api资源	/// </summary>	public static IEnumerable<ApiResource> Apis =>	new List<ApiResource>	{	new ApiResource("api1","My Api")	};	public static IEnumerable<Client> Clients =>	new List<Client>	{	//客户端	new Client	{	ClientId="client",	ClientSecrets={ new Secret("aju".Sha256())},	AllowedGrantTypes=GrantTypes.ResourceOwnerPassword,	//如果要获取refresh_tokens ,必须在scopes中加上OfflineAccess	AllowedScopes={ "api1", IdentityServerConstants.StandardScopes.OfflineAccess},	AllowOfflineAccess=true	}	};	public static List<TestUser> Users = new List<TestUser>	{	new TestUser	{	SubjectId="001",	Password="Aju_001",	Username="Aju_001"	},	new TestUser	{	SubjectId="002",	Password="Aju_002",	Username="Aju_002"	}	};	}	
}

using Microsoft.AspNetCore.Builder;	
using Microsoft.AspNetCore.Hosting;	
using Microsoft.Extensions.DependencyInjection;	
using Microsoft.Extensions.Hosting;	namespace IdentityServer02	
{	public class Startup	{	// This method gets called by the runtime. Use this method to add services to the container.	// For more information on how to configure your application, visit https://go.microsoft.com/fwlink/?LinkID=398940	public void ConfigureServices(IServiceCollection services)	{	var builder = services.AddIdentityServer()	.AddInMemoryApiResources(Config.Apis)	.AddInMemoryClients(Config.Clients)	.AddTestUsers(Config.Users);19             builder.AddDeveloperSigningCredential();	}	// This method gets called by the runtime. Use this method to configure the HTTP request pipeline.	public void Configure(IApplicationBuilder app, IWebHostEnvironment env)	{	if (env.IsDevelopment())	{	app.UseDeveloperExceptionPage();	}	// app.UseRouting();	app.UseIdentityServer();	}	}	
}

using Microsoft.AspNetCore.Authorization;	
using Microsoft.AspNetCore.Mvc;	
using System.Linq;	namespace Api02.Controllers	
{	[Route("Api")]	[Authorize]	public class ApiController : ControllerBase	{	public IActionResult Get()	{	return new JsonResult(from c in User.Claims select new { c.Type, c.Value });	}	}	
}

using Microsoft.AspNetCore.Builder;	
using Microsoft.AspNetCore.Hosting;	
using Microsoft.Extensions.Configuration;	
using Microsoft.Extensions.DependencyInjection;	
using Microsoft.Extensions.Hosting;	namespace Api02	
{	public class Startup	{	public Startup(IConfiguration configuration)	{	Configuration = configuration;	}	public IConfiguration Configuration { get; }	// This method gets called by the runtime. Use this method to add services to the container.	public void ConfigureServices(IServiceCollection services)	{	services.AddControllers();	services.AddAuthentication("Bearer").AddJwtBearer("Bearer", options =>	{	options.Authority = "http://localhost:5000";	options.RequireHttpsMetadata = false;	options.Audience = "api1";	});	}	// This method gets called by the runtime. Use this method to configure the HTTP request pipeline.	public void Configure(IApplicationBuilder app, IWebHostEnvironment env)	{	if (env.IsDevelopment())	{	app.UseDeveloperExceptionPage();	}	app.UseRouting();	app.UseAuthentication();//认证	app.UseAuthorization();//授权	app.UseEndpoints(endpoints =>	{	endpoints.MapControllers();	});	}	}	
}

using IdentityModel.Client;	
using Newtonsoft.Json.Linq;	
using System;	
using System.Net.Http;	
using System.Threading.Tasks;	namespace Client02	
{	class Program	{	static async Task Main(string[] args)	{	// Console.WriteLine("Hello World!");	var client = new HttpClient();	var disco = await client.GetDiscoveryDocumentAsync("http://localhost:5000");	if (disco.IsError)	{	Console.WriteLine(disco.Error);	return;	}	var tokenResponse = await client.RequestPasswordTokenAsync(	new PasswordTokenRequest	{	Address = disco.TokenEndpoint,	ClientId = "client",	ClientSecret = "aju",	Scope = "api1 offline_access",	UserName = "Aju",	Password = "Aju_password"	});	if (tokenResponse.IsError)	{	Console.WriteLine(tokenResponse.Error);	return;	}	Console.WriteLine(tokenResponse.Json);	Console.WriteLine("\n\n");	//call api	var apiClient = new HttpClient();	apiClient.SetBearerToken(tokenResponse.AccessToken);	var response = await apiClient.GetAsync("http://localhost:5001/api");	if (!response.IsSuccessStatusCode)	{	Console.WriteLine(response.StatusCode);	}	else	{	var content = await response.Content.ReadAsStringAsync();	Console.WriteLine(JArray.Parse(content));	}	Console.ReadLine();	}	}	
}

using IdentityModel;	
using IdentityServer4.Models;	
using IdentityServer4.Validation;	
using System.Threading.Tasks;	namespace IdentityServer02	
{	public class ResourceOwnerValidator : IResourceOwnerPasswordValidator	{	public Task ValidateAsync(ResourceOwnerPasswordValidationContext context)	{	if (context.UserName == "Aju" && context.Password == "Aju_password")	{	context.Result = new GrantValidationResult(	subject: context.UserName,	authenticationMethod: OidcConstants.AuthenticationMethods.Password);	}	else	{	context.Result = new GrantValidationResult(TokenRequestErrors.InvalidGrant, "无效的秘钥");	}	return Task.FromResult("");	}	}	
}