.net core 3.1 Identity Server4 (NSwag Api授权)

• .net core 3.1 Identity Server4 (NSwag Api授权)
  • 创建ApiDemo3接口项目
  • 引入NSwag库
  • 修改接口项目
  • 访问测试

创建ApiDemo3接口项目

引入NSwag库

Install-Package NSwag.AspNetCore -Version 13.10.1

修改接口项目

{
  "profiles": {
    "ApIDemo2": {
      "commandName": "Project",
      "launchBrowser": true,
      "launchUrl": "weatherforecast",
      "applicationUrl": "http://localhost:9001",
      "environmentVariables": {
        "ASPNETCORE_ENVIRONMENT": "Development"
      }
    }
  }
}

new Client
{
    ClientId = "apidemo2_swagger",
    ClientName = "Swagger UI for ApIDemo2",
    ClientSecrets = {new Secret("secret".Sha256())}, 
    AllowedGrantTypes = GrantTypes.Code,
    // 启动Pkce
    RequirePkce = true,
    RequireClientSecret = false,
    RedirectUris = {
        "http://localhost:9001/swagger/oauth2-redirect.html",
        "http://localhost:9200/swagger/oauth2-redirect.html",
    },
    AllowedCorsOrigins = {
        "http://localhost:9001",
        "http://localhost:9200"
    },
    AllowedScopes = { "ApiTwo" }
},

Install-Package IdentityServer4.AccessTokenValidation -Version 3.0.1

services.AddAuthentication("Bearer")
    .AddJwtBearer("Bearer", options =>
    {
        options.Authority = "https://localhost:7200"; // 授权服务器地址
        //确定自己是哪个资源(资源名称)
        options.Audience = "ApiTwo";
        options.RequireHttpsMetadata = false; // 是否使用https进行通信
        //取消验证用户以及验证角色
        options.TokenValidationParameters = new Microsoft.IdentityModel.Tokens.TokenValidationParameters()
        {
            ValidateIssuer = false,
            ValidateAudience = false
        };
    });

services.AddOpenApiDocument(options =>
{
    options.DocumentName = "v1";
    options.Title = "Protected API";
    options.Version = "v1";
    // 接着我们在下面进行添加代码
});

options.AddSecurity("bearer", Enumerable.Empty<string>(), new OpenApiSecurityScheme
{
    Type = OpenApiSecuritySchemeType.OAuth2,
    Description = "My Authentication",
    Flow = OpenApiOAuth2Flow.AccessCode,
    Flows = new OpenApiOAuthFlows()
    {
        AuthorizationCode = new OpenApiOAuthFlow
        {
            AuthorizationUrl = "https://localhost:7200/connect/authorize",
            TokenUrl = "https://localhost:7200/connect/token",
            Scopes = new Dictionary<string, string>
            {
                {"ApiTwo", "Swagger UI for ApIDemo2"}
            }
        },
    }
});
options.OperationProcessors.Add(new AspNetCoreOperationSecurityScopeProcessor("bearer"));

app.UseAuthentication();
app.UseAuthorization();
app.UseOpenApi();
app.UseSwaggerUi3(options =>
{
    options.OAuth2Client = new OAuth2ClientSettings();
    options.OAuth2Client.ClientId = "apidemo2_swagger";
    options.OAuth2Client.ClientSecret = "secret";
    options.OAuth2Client.AppName = "Demo API - Swagger";
    options.OAuth2Client.UsePkceWithAuthorizationCodeGrant = true;
});

访问测试