Asp.Net Core Identity
1.特点：
1）身份认证和授权系统
2）成员管理
3）默认使用MSSQL
4）支持外部的Provider
2.Asp.Net Core Identity重点类
1）SignInManager<IdentityUser>
2）UserManager<IdentityUser>
3.使用
1）结构：
①控制器：AccountController.cs
②模型：LoginViewModel.cs、RegisterViewModel.cs
③页面：Login.cshtml、Register.cshtml
④生成配置：Startup.cs
2）代码：
①AccountController.cs
使用： SignInManager<IdentityUser>和UserManager<IdentityUser>
using System; using System.Collections.Generic; using System.Linq; using System.Threading.Tasks; using CoreTest.Web.ViewModel; using Microsoft.AspNetCore.Identity; using Microsoft.AspNetCore.Mvc; namespace CoreTest.Web.Controllers { public class AccountController : Controller { private readonly SignInManager<IdentityUser> _signInManager; private readonly UserManager<IdentityUser> _userManager; public AccountController(SignInManager<IdentityUser> signInManager, UserManager<IdentityUser> userManager) { _signInManager = signInManager; _userManager = userManager; } [HttpGet] public IActionResult Login() { return View(); } /// <summary> /// 登录 /// </summary> /// <param name="login"></param> /// <returns></returns> [HttpPost] public async Task<IActionResult> Login(LoginViewModel login) { if (!ModelState.IsValid) { return View(login); } //通过用户名获取用户信息 var user = await _userManager.FindByNameAsync(login.UserName); //验证密码 if (user != null) { var result = await _signInManager .PasswordSignInAsync(user,login.Password,false,false); if (result.Succeeded) { return RedirectToAction("Index","Home"); } } ModelState.AddModelError("","用户名/密码不正确！"); return View(login); } [HttpGet] public IActionResult Register() { return View(); } /// <summary> /// 注册 /// </summary> /// <param name="register"></param> /// <returns></returns> [HttpPost] public async Task<IActionResult> Register(RegisterViewModel register) { if (ModelState.IsValid) { //创建用户注册 var user = new IdentityUser { UserName = register.UserName }; var result = await _userManager.CreateAsync(user,register.Password); if (result.Succeeded) { return RedirectToAction("Index", "Home"); } } return View(register); } /// <summary> /// 登出 /// </summary> /// <returns></returns> [HttpPost] public async Task<IActionResult> Logout() { await _signInManager.SignOutAsync(); return RedirectToAction("Index", "Home"); } } }
②模型：
LoginViewModel.cs
using System; using System.Collections.Generic; using System.ComponentModel.DataAnnotations; using System.Linq; using System.Threading.Tasks; namespace CoreTest.Web.ViewModel { /// <summary> /// 登录 /// </summary> public class LoginViewModel { /// <summary> /// 用户名 /// </summary> [Required] [Display(Name = "用户名")] public string UserName {get;set;} /// <summary> /// 密码 /// </summary> [Required] [DataType(DataType.Password)] [Display(Name = "密码")] public string Password { get; set; } } }
RegisterViewModel.cs
using System; using System.Collections.Generic; using System.ComponentModel.DataAnnotations; using System.Linq; using System.Threading.Tasks; namespace CoreTest.Web.ViewModel { /// <summary> /// 注册 /// </summary> public class RegisterViewModel { /// <summary> /// 用户名 /// </summary> [Required] [Display(Name = "用户名")] public string UserName { get; set; } /// <summary> /// 密码 /// </summary> [Required] [Display(Name = "密码")] public string Password { get; set; } } }
③页面：
Login.cshtml
@model LoginViewModel <h2>请您登录或<a asp-action="Register" asp-controller="Account">注册</a></h2> <form asp-action="Login" asp-controller="Account" method="post"> <div> <label asp-for="UserName"></label> <input asp-for="UserName" /> <span asp-validation-for="UserName"></span> </div> <div> <label asp-for="Password"></label> <input asp-for="Password" /> <span asp-validation-for="Password"></span> </div> <input type="submit" value="提交" /> <div asp-validation-summary="All"></div> </form>
Register.cshtml
@model RegisterViewModel <h2>注册</h2> <form asp-action="Register" asp-controller="Account" method="post"> <div> <label asp-for="UserName"></label> <input asp-for="UserName" /> <span asp-validation-for="UserName"></span> </div> <div> <label asp-for="Password"></label> <input asp-for="Password" /> <span asp-validation-for="Password"></span> </div> <input type="submit" value="提交" /> <div asp-validation-summary="All"></div> </form>
④生成配置：
修改Startup.cs（授权配置：红色部分）
using System; using System.Collections.Generic; using System.IO; using System.Linq; using System.Threading.Tasks; using CoreTest.Web.Data; using CoreTest.Web.Model; using CoreTest.Web.Service; using CoreTest.Web.Setting; using Microsoft.AspNetCore.Builder; using Microsoft.AspNetCore.Hosting; using Microsoft.AspNetCore.Http; using Microsoft.AspNetCore.Identity; using Microsoft.AspNetCore.Identity.EntityFrameworkCore; using Microsoft.EntityFrameworkCore; using Microsoft.Extensions.Configuration; using Microsoft.Extensions.DependencyInjection; using Microsoft.Extensions.FileProviders; namespace CoreTest.Web { public class Startup { private readonly IConfiguration _configuration; public Startup(IConfiguration configuration) { _configuration = configuration; } // This method gets called by the runtime. Use this method to add services to the container. // For more information on how to configure your application, visit https://go.microsoft.com/fwlink/?LinkID=398940 public void ConfigureServices(IServiceCollection services) { services.AddMvc(); //只有一个实例 services.AddSingleton<IWelcome,IWelcomeService>(); //每次一个新的Http请求，产生一个新的实例 services.AddScoped<IRepository<Student>,InMemoryRepository>(); //使用数据连接 services.AddDbContext<CoreTestDbContext>(options => { //获取数据连接 options.UseSqlServer(_configuration.GetConnectionString("DefaultConnection")); }); //授权注册 services.AddDefaultIdentity<IdentityUser>() .AddEntityFrameworkStores<IdentityDbContext>(); //授权表生成 services.AddDbContext<IdentityDbContext>(options => options.UseSqlServer( _configuration.GetConnectionString("DefaultConnection"), b => b.MigrationsAssembly("CoreTest.Web")//作用的程序集 )); //授权密码设定 services.Configure<IdentityOptions>(options => { // Password settings. options.Password.RequireDigit = false; options.Password.RequireLowercase = false; options.Password.RequireNonAlphanumeric = false; options.Password.RequireUppercase = false; options.Password.RequiredLength = 1; options.Password.RequiredUniqueChars = 1; // Lockout settings. options.Lockout.DefaultLockoutTimeSpan = TimeSpan.FromMinutes(5); options.Lockout.MaxFailedAccessAttempts = 5; options.Lockout.AllowedForNewUsers = true; // User settings. options.User.AllowedUserNameCharacters = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._@+"; options.User.RequireUniqueEmail = false; }); } // This method gets called by the runtime. Use this method to configure the HTTP request pipeline. public void Configure(IApplicationBuilder app, IHostingEnvironment env,IConfiguration configuration, IWelcome welcomeService) { if (env.IsDevelopment()) { app.UseDeveloperExceptionPage(); } else { app.UseExceptionHandler(); } app.UseMvc(); app.UseStaticFiles(); //app.UseDefaultFiles(); app.UseStaticFiles(new StaticFileOptions { RequestPath= "/node_modules", FileProvider = new PhysicalFileProvider(Path.Combine(env.ContentRootPath, "node_modules")) }); //app.UseMvcWithDefaultRoute(); //app.UseWelcomePage(); app.UseAuthentication(); app.UseMvc(route => { route.MapRoute("Default", "{Controller=Home}/{Action=Index}/{id?}"); }); //app.Run(async (context) => //{ // var hell = configuration["DZW"]; // var hell2 = welcomeService.GetMessage(); // await context.Response.WriteAsync(hell2); //}); } } }
3）数据库生成
①打开程序包管理器控制台
②执行 add-migration CoreTest2 生成数据库执行文件语句（注：这个时候会报错，因为项目配置中有两个不同烦人数据库链接--Identity和appsettings.json的数据库链接）
提示：
这个时候，我们将指明具体的声称对象，执行：add-migration CoreTest3 -Context IdentityDbContext
③生成数据库
执行：Update-database -Context IdentityDbContext
4）Layout判断是否登录显示用户名
使用
@using Microsoft.AspNetCore.Identity
@inject SignInManager<IdentityUser> SignInManager
@using Microsoft.AspNetCore.Identity <!DOCTYPE html> @inject SignInManager<IdentityUser> SignInManager <html> <head> <meta name="viewport" content="width=device-width" /> <title>@ViewBag.Title</title> </head> <body> @*判断是否登录*@ @if (SignInManager.IsSignedIn(User)) { <form asp-controller="Account" asp-action="Logout" method="post" id="logoutForm"> <ul class="navbar-nav mr-auto"> <li class="nav-item"> <a href="javascript:document.getElementById('logoutForm').submit()">登出</a> </li> </ul> </form> } else { <a asp-action="Register" asp-controller="Account">注册</a> <a asp-action="Login" asp-controller="Account">登录</a> } <h1>11111</h1> <div> @RenderBody() </div> <hr /> @RenderSection("bottom", required: false) <vc:welcome-student-components></vc:welcome-student-components> <script src="~/node_modules/jquery/dist/jquery.min.js"></script> <script src="~/node_modules/jquery-validation/dist/jquery.validate.min.js"></script> <script src="~/node_modules/jquery-validation-unobtrusive/dist/jquery.validate.unobtrusive.min.js"></script> </body> </html>
5）使用展示
①登录前：
②登录后：
③授权验证限制：在对应调用的控制器或页面前面加上[Authorize]
感谢：杨老师
参阅：https://www.bilibili.com/video/av38392956/?p=14
