Question

当我在启动时使用google身份验证登录时，我可以获取访问令牌。

启动：

app.UseGoogleAuthentication(new GoogleOAuth2AuthenticationOptions()
{
    ClientId = "",
    ClientSecret = "",
    Scope = { "" },
    Provider = new GoogleOAuth2AuthenticationProvider
    {
        OnAuthenticated = async context =>
        {
            context.Identity.AddClaim(new Claim("googletoken", context.AccessToken));
            context.Identity.AddClaim(new Claim(ClaimTypes.Name, context.Name, "http://www.w3.org/2001/XMLSchema#string"));
            context.Identity.AddClaim(new Claim(ClaimTypes.Email, context.Email, "http://www.w3.org/2001/XMLSchema#string"));
        }
    }
});

我的自定义理赔经理：

public class ClaimManager
{
    private readonly ClaimsIdentity _user;

    public ClaimManager(ClaimsIdentity user)
    {
        this._user = user;
    }
    public static string GetAccessToken(ClaimsIdentity user)
    {
        var claim = user.Claims.Select(c => new { Type = c.Type, Value = c.Value }).FirstOrDefault(c => c.Type == "googletoken");
        return claim == null ? null : claim.Value;
    }
    public static string GetName(ClaimsIdentity user)
    {
        var claim = user.Claims.Select(c => new { Type = c.Type, Value = c.Value }).FirstOrDefault(c => c.Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name");
        return claim == null ? null : claim.Value;
    }
    public static string GetEmail(ClaimsIdentity user)
    {
        var claim = user.Claims.Select(c => new { Type = c.Type, Value = c.Value }).FirstOrDefault(c => c.Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress");
        return claim == null ? null : claim.Value;
    }
}

访问令牌不会保留在用户声明中。如何保留声明以便他们留在用户会话中？

Answer 1

这是我提出的解决方案。我正在存储访问令牌，就像数据库中的常规声明一样。

在帐户控制器中：

public async Task StoreAccessToken(ExternalLoginInfo loginInfo)
{
    var user = await UserManager.FindAsync(loginInfo.Login);
    if (user != null)
    {
        var newClaim = loginInfo.ExternalIdentity.Claims.Select(c => new Claim(c.Type, c.Value)).FirstOrDefault(c => c.Type == "googletoken");

        if (newClaim != null)
        {
            var userClaims = await UserManager.GetClaimsAsync(user.Id);
            foreach (var userClaim in userClaims.Where(c => c.Type == newClaim.Type).ToList())
                await UserManager.RemoveClaimAsync(user.Id, userClaim);

            await UserManager.AddClaimAsync(user.Id, newClaim);
        }
    }
}

ExternalLoginCallback（）：

    var loginInfo = await AuthenticationManager.GetExternalLoginInfoAsync();
    if (loginInfo == null)
    {
        return RedirectToAction("Login");
    }

    await StoreAccessToken(loginInfo);

ExternalLoginConfirmation（）：

if (result.Succeeded)
{
    result = await UserManager.AddLoginAsync(user.Id, info.Login);
    if (result.Succeeded)
    {
        await StoreAccessToken(info);
        await SignInManager.SignInAsync(user, isPersistent: false, rememberBrowser: false);
        return RedirectToLocal(returnUrl);
    }
}

存储外部声明

1 个答案: