asp.net core 3.x 微信小程序登录库（也可用于abp）

视频教程（使用+实现原理）：https://share.weiyun.com/57HKopT 建议直接看视频

源码地址：https://github.com/bxjg1987/abpGeneralModules

库版本.net core 3.1

我的abp版本：abp5.3 .net core 3.1

请先看微信小程序官方文档。下面说说abp中如何使用。原生asp.net core可以参考实现

服务端配置

1、安装nuget包

Install-Package BXJG.WeChart -Version

2、修改配置文件 abp.web.host/appsettings.json

3、修改启动配置类abp.web.host//StartupAuthConfigurer.cs

因为startup中是通过这个类中的静态方法注册身份验证相关服务的

 public static void Configure(IServiceCollection services, IConfiguration configuration)
         {
             var authBuilder = services.AddAuthentication(options =>
             {
                 options.DefaultAuthenticateScheme = "JwtBearer";
                 options.DefaultChallengeScheme = "JwtBearer";
             });

             if (bool.Parse(configuration["Authentication:JwtBearer:IsEnabled"]))
             {
                 authBuilder.AddJwtBearer("JwtBearer", options =>
                 {
                     options.Audience = configuration["Authentication:JwtBearer:Audience"];

                     options.TokenValidationParameters = new TokenValidationParameters
                     {
                         // The signing key must match!
                         ValidateIssuerSigningKey = true,
                         IssuerSigningKey = new SymmetricSecurityKey(Encoding.ASCII.GetBytes(configuration["Authentication:JwtBearer:SecurityKey"])),

                         // Validate the JWT Issuer (iss) claim
                         ValidateIssuer = true,
                         ValidIssuer = configuration["Authentication:JwtBearer:Issuer"],

                         // Validate the JWT Audience (aud) claim
                         ValidateAudience = true,
                         ValidAudience = configuration["Authentication:JwtBearer:Audience"],

                         // Validate the token expiry
                         ValidateLifetime = true,

                         // If you want to allow a certain amount of clock drift, set that here
                         ClockSkew = TimeSpan.Zero
                     };

                     options.Events = new JwtBearerEvents
                     {
                         OnMessageReceived = QueryStringTokenResolver
                     };
                 });
             }

             if (bool.Parse(configuration["Authentication:WeChartMiniProgram:IsEnabled"]))
             {
                 authBuilder.AddWeChartMiniProgram(opt =>
                 {
                     opt.AppId = configuration["Authentication:WeChartMiniProgram:AppId"];
                     opt.Secret = configuration["Authentication:WeChartMiniProgram:Secret"];

                     opt.ClaimActions.MapJsonKey("nickName", "nickName");
                     opt.ClaimActions.MapJsonKey("avatarUrl", "avatarUrl");
                     opt.ClaimActions.MapJsonKey("gender", "gender");
                     opt.ClaimActions.MapJsonKey("country", "country");
                     opt.ClaimActions.MapJsonKey("province", "province");
                     opt.ClaimActions.MapJsonKey("city", "city");
                     opt.ClaimActions.MapJsonKey("language", "language");
                 });
             }
         }

更多配置请参考视频

4、实现abp集成

找到abp.web.core/controllers/TokenAuthController

先注入UserManager

然后添加下面的方法

         [HttpPost]
         public async Task<ExternalAuthenticateResultModel> WeChartMiniProgramLoginAsync()
         {

             //从第三方登录拿到当前用户（包含openId、sessionKey）
             var t = await base.HttpContext.AuthenticateAsync(MiniProgramConsts.AuthenticationScheme);//间接使用第三方身份验证方案获取信息
             //拿到openId
             var openid = t.Principal.Claims.Single(c => c.Type == ClaimTypes.NameIdentifier).Value;
             var tenancyName = GetTenancyNameOrNull();
             //尝试做第三发登录（内部通过openid找到本地账号做登录），
             var loginResult = await _logInManager.LoginAsync(new UserLoginInfo(MiniProgramConsts.AuthenticationScheme, openid, MiniProgramConsts.AuthenticationSchemeDisplayName), tenancyName);
             //根据登录结果，若成功则直接返回jwtToken 或者自动注册后返回
             switch (loginResult.Result)
             {
                 case AbpLoginResultType.Success:
                     {
                         //更新微信用户信息
                         foreach (var item in t.Principal.Claims)
                         {
                             await userManager.ReplaceClaimAsync(loginResult.User, new Claim(item.Type, ""), item);
                         }

                         //返回jwtToken
                         var accessToken = CreateAccessToken(CreateJwtClaims(loginResult.Identity));
                         return new ExternalAuthenticateResultModel
                         {
                             AccessToken = accessToken,
                             EncryptedAccessToken = GetEncryptedAccessToken(accessToken),
                             ExpireInSeconds = (int)_configuration.Expiration.TotalSeconds
                         };
                     }
                 case AbpLoginResultType.UnknownExternalLogin:
                     {
                         //若未找到关联的本地账号则自动注册，再返回jwtToken
                         var newUser = await RegisterExternalUserAsync(new ExternalAuthUserInfo
                         {
                             Provider = MiniProgramConsts.AuthenticationScheme,
                             ProviderKey = openid,
                             Name = t.Principal.Claims.SingleOrDefault(c => c.Type == "nickName")?.Value,
                             EmailAddress = Guid.NewGuid().ToString("N") + "@mp.com",
                             Surname = "a"
                         });
                         if (!newUser.IsActive)
                         {
                             return new ExternalAuthenticateResultModel
                             {
                                 WaitingForActivation = true
                             };
                         }

                         // Try to login again with newly registered user!
                         loginResult = await _logInManager.LoginAsync(new UserLoginInfo(MiniProgramConsts.AuthenticationScheme, openid, MiniProgramConsts.AuthenticationSchemeDisplayName), tenancyName);
                         if (loginResult.Result != AbpLoginResultType.Success)
                         {
                             throw _abpLoginResultTypeHelper.CreateExceptionForFailedLoginAttempt(
                                 loginResult.Result,
                                 openid,
                                 tenancyName
                             );
                         }
                         //保存微信用户信息（排出openid，因为它存储在userlogins里）
                         await userManager.AddClaimsAsync(loginResult.User, t.Principal.Claims.Where(c=>c.Type!= ClaimTypes.NameIdentifier));

                         return new ExternalAuthenticateResultModel
                         {
                             AccessToken = CreateAccessToken(CreateJwtClaims(loginResult.Identity)),
                             ExpireInSeconds = (int)_configuration.Expiration.TotalSeconds
                         };
                     }
                 default:
                     {
                         throw _abpLoginResultTypeHelper.CreateExceptionForFailedLoginAttempt(
                             loginResult.Result,
                             openid,
                             tenancyName
                         );
                     }
             }
         }

小程序端处理

小程序调用wx.login拿到code，然后调用wx.getUserInfo拿到用户昵称、头像、性别.....等数据

将上面的数据组成json Post提交到我方服务器/wechart-miniProgram-signin

此时会返回一个加密的cookie字符串，小程序端需要想法从响应的cookie中拿到此字符串

用上面的字符串作为cookie Post请求我方服务器/api/TokenAuth/WeChartMiniProgramLogin

此时服务端会返回jwtToken

后续请求跟之前的处理就一样了。