NetCore 获取 IdentityServer4 获取Token信息

第一步：安装 NuGet包 IdentityServer4.AccessTokenValidation

 第二步：配置（Program.cs）

?

1 2 3 4 5 6 7 8 9 10 11 12 13 14

// 注册认证相关组件和配置defaultScheme为Bearer builder.Services.AddAuthentication("Bearer")     .AddJwtBearer("Bearer", options =>     {         // 指定要接入的授权服务器地址         options.Authority = "http://127.0.0.1:5001";         // 在验证token时，不验证Audience         options.TokenValidationParameters = new TokenValidationParameters         {             ValidateAudience = false         };         // 不适用Https         options.RequireHttpsMetadata = false;     });

 

?

1 2 3

app.UseAuthentication();   app.UseAuthorization();

 第三步：获取Token相关信息

接口类：

?

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27

public interface ITokenService {     /// <summary>     /// 获取当前登录客户端ID     /// </summary>     Task<string> GetClientIdAsync();       /// <summary>     /// 判断是否为管理员     /// </summary>     Task<bool> IsAdminRoleAsync();       /// <summary>     /// 获取当前登录角色ID     /// </summary>     Task<string> GetRoleIdAsync();       /// <summary>     /// 获取当前登录用户ID     /// </summary>     Task<string> GetUserIdAsync();       /// <summary>     /// 获取当前登录用户名     /// </summary>     Task<string?> GetUserNameAsync(); }

 实现类：

?

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87

public class TokenService : ITokenService {     private readonly IHttpContextAccessor _httpContextAccessor;     public TokenService(IHttpContextAccessor httpContextAccessor)     {         _httpContextAccessor = httpContextAccessor;     }       /// <summary>     /// 获取当前登录客户端ID     /// </summary>     public async Task<string> GetClientIdAsync()     {         if (_httpContextAccessor.HttpContext.User.FindFirst(d => d.Type == "client_id") == null)         {             throw new ResponseException($"未授权，操作失败");         }           if (string.IsNullOrEmpty(_httpContextAccessor.HttpContext.User.FindFirst(d => d.Type == "client_id")?.Value))         {             throw new ResponseException($"您未登录，操作失败");         }         return _httpContextAccessor.HttpContext.User.FindFirst(d => d.Type == "client_id")?.Value;     }       /// <summary>     /// 判断当前登录用户是否为管理员     /// </summary>     public async Task<bool> IsAdminRoleAsync()     {         if (_httpContextAccessor.HttpContext.User.FindFirst(ClaimTypes.Role) == null)         {             return false;         }         if (UserType.Admin.ToString() == _httpContextAccessor.HttpContext.User.FindFirst(ClaimTypes.Role)?.Value)         {             return true;         }         return false;     }       /// <summary>     /// 判断当前登录用户是否为管理员     /// </summary>     public async Task<string> GetRoleIdAsync()     {         if (_httpContextAccessor.HttpContext.User.FindFirst(ClaimTypes.Role) == null)         {             throw new ResponseException($"未授权，操作失败");         }           return _httpContextAccessor.HttpContext.User.FindFirst(ClaimTypes.Role)?.Value;     }       /// <summary>     /// 获取当前登录用户ID     /// </summary>     public async Task<string> GetUserIdAsync()     {         if (_httpContextAccessor.HttpContext.User.FindFirst(ClaimTypes.NameIdentifier) == null)         {             throw new ResponseException($"您未登录，操作失败");         }         if (string.IsNullOrEmpty(_httpContextAccessor.HttpContext.User.FindFirst(ClaimTypes.NameIdentifier)?.Value))         {             throw new ResponseException($"您未登录，操作失败");         }         return _httpContextAccessor.HttpContext.User.FindFirst(ClaimTypes.NameIdentifier)?.Value;     }       /// <summary>     /// 获取当前登录用户名     /// </summary>     public async Task<string?> GetUserNameAsync()     {           if (_httpContextAccessor.HttpContext.User == null)         {             throw new ResponseException($"您未登录，操作失败");         }         if (string.IsNullOrEmpty(_httpContextAccessor.HttpContext.User.FindFirst(d => d.Type == "preferred_username")?.Value))         {             throw new ResponseException($"您未登录，操作失败");         }         return _httpContextAccessor.HttpContext.User.FindFirst(d => d.Type == "preferred_username")?.Value;     } }