WebApi使用OAuth2认证

本篇文章实现了四种认证方式中的客户端模式和密码模式，未实现token持久化

未介绍OAuth2的相关概念，全部是干货，可自己在网上搜索OAuth2相关知识，在这不做过多阐述

• 一、引用OAuth2所需的dll,使用nuget下载以下依赖项

Microsoft.AspNet.WebApi.Owin
       Microsoft.Owin.Host.SystemWeb
       Microsoft.Owin.Security.OAuth
       Microsoft.AspNet.Identity.Owin

• 二、重载OAuth2相应的验证方法

 public class OAuthServerProvider : OAuthAuthorizationServerProvider
     {
         /// <summary>
         /// 验证OAuth请求
         /// </summary>
         /// <param name="context"></param>
         /// <returns></returns>
         public override Task ValidateClientAuthentication(OAuthValidateClientAuthenticationContext context)
         {
             string clientId;
             string clientSecret;

             //获取客户端凭证
             if (!context.TryGetBasicCredentials(out clientId, out clientSecret))
                 context.TryGetFormCredentials(out clientId, out clientSecret);

             //保存客户端凭证
             context.OwinContext.Set<string>("clientId", clientId);
             context.OwinContext.Set<string>("clientSecret", clientSecret);
             //验证通过
             context.Validated(clientId);

             return base.ValidateClientAuthentication(context);
         }

         /// <summary>
         /// 客户端模式 验证
         /// </summary>
         /// <param name="context"></param>
         /// <returns></returns>
         public override Task GrantClientCredentials(OAuthGrantClientCredentialsContext context)
         {
             var clientSecret = context.OwinContext.Get<string>("clientSecret");
             if (context.ClientId == "admin" && clientSecret == "")
             {
                 var oAuthIdentity = new ClaimsIdentity(context.Options.AuthenticationType);
                 oAuthIdentity.AddClaim(new Claim(ClaimTypes.Name, "Clear App"));
                 var ticket = new AuthenticationTicket(oAuthIdentity, new AuthenticationProperties());
                 context.Validated(ticket);
             }
             else
             {
                 context.SetError("invalid_grant", "The username or password is incorrect.");
             }
             return base.GrantClientCredentials(context);
         }

         /// <summary>
         /// 密码模式验证
         /// </summary>
         /// <param name="context"></param>
         /// <returns></returns>
         public override Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
         {
             if (context.UserName == "admin" && context.Password == "")
             {
                 var oAuthIdentity = new ClaimsIdentity(context.Options.AuthenticationType);
                 oAuthIdentity.AddClaim(new Claim(ClaimTypes.Name, context.UserName));
                 var ticket = new AuthenticationTicket(oAuthIdentity, new AuthenticationProperties());
                 //替换上下文中票证信息，并将其标记为已验证
                 context.Validated(ticket);
             }
             else
             {
                 context.SetError("invalid_grant", "The username or password is incorrect.");
             }
             return base.GrantResourceOwnerCredentials(context);
         }

     }

重写OAuth验证方法

• 三、添加Startup类

  public class Startup
     {
         public void Configuration(IAppBuilder app)
         {
             var options = new OAuthAuthorizationServerOptions()
             {
                 TokenEndpointPath = new PathString("/oauth2/token"),//获取token访问路径
                 Provider = new OAuthServerProvider(),//oauth2服务配置
                 AccessTokenExpireTimeSpan = TimeSpan.FromDays(),//token有效期
                 AllowInsecureHttp = true
             };
             app.UseOAuthBearerTokens(options);
         }
     }

Startup配置OAuth2服务

• 四、验证OAuth请求

密码模式

客户端模式