IdentityServer4简单入门demo系列（二）API资源端

续上篇

二、API资源端

1、新建项目 ApiReSource 用来存放需要被保护的API，如下图

2、引用nuget里的 IdentityServer4.AccessTokenValidation类库

3、新增一个Controller名叫 TestController

　　内容如下：

using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;

namespace ApiReSource.Controllers
{
    [Route("Test")]
    [Authorize]
    public class TestController : ControllerBase
    {
        [HttpGet]
        public IActionResult Get()
        {
            //这里输出测试数据
            return new JsonResult(new { data = "ddd", password = "11223344" });
        }
    }
}

4、修改Startup.cs的内容至如下：

using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Hosting;
using Microsoft.AspNetCore.Http;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.Configuration;
using Microsoft.Extensions.DependencyInjection;

namespace ApiReSource
{
    public class Startup
    {
        public Startup(IConfiguration configuration)
        {
            Configuration = configuration;
        }

        public IConfiguration Configuration { get; }

        // This method gets called by the runtime. Use this method to add services to the container.
        public void ConfigureServices(IServiceCollection services)
        {
            services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_1);


            services.AddMvcCore()
            //将认证服务添加到DI,配置"Bearer"作为默认方案
            .AddAuthorization()
            .AddJsonFormatters();

            services.AddAuthentication("Bearer")
                //将IdentityServer访问令牌验证处理程序添加到DI中以供身份验证服务使用
                .AddIdentityServerAuthentication(options =>
                {
                    //用于授权的地址
                    options.Authority = "http://localhost:5000/";
                    options.RequireHttpsMetadata = false;
                    //该Api项目对应的IdentityServer的Api资源,与GetApiResources方法里面的Api名称对应
                    options.ApiName = "api1";
                });

        }

        // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
        public void Configure(IApplicationBuilder app, IHostingEnvironment env)
        {
            if (env.IsDevelopment())
            {
                app.UseDeveloperExceptionPage();
            }
            else
            {
                app.UseHsts();
            }

            app.UseAuthentication();

            app.UseHttpsRedirection();
            app.UseMvc();
        }
    }
}