webapi core2.1 IdentityServer4.EntityFramework Core进行配置和操作数据

https://identityserver4.readthedocs.io/en/release/quickstarts/8_entity_framework.html 此连接的实践

vscode 下面命令

dotnet new webapi -o is4ef
cd is4ef
dotnet add package IdentityServer4.EntityFramework
dotnet add package Microsoft.EntityFrameworkCore.SqlServer
dotnet add package Microsoft.EntityFrameworkCore.Tools

增加Config.cs

 // Copyright (c) Brock Allen & Dominick Baier. All rights reserved.
 // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.

 using IdentityServer4;
 using IdentityServer4.Models;
 using IdentityServer4.Test;
 using System.Collections.Generic;
 using System.Security.Claims;

 namespace is4ef
 {
     public class Config
     {
         // scopes define the resources in your system
         public static IEnumerable<IdentityResource> GetIdentityResources()
         {
             return new List<IdentityResource>
             {
                 new IdentityResources.OpenId(),
                 new IdentityResources.Profile(),
             };
         }

         public static IEnumerable<ApiResource> GetApiResources()
         {
             return new List<ApiResource>
             {
                 new ApiResource("api1", "My API")
             };
         }

         // clients want to access resources (aka scopes)
         public static IEnumerable<Client> GetClients()
         {
             // client credentials client
             return new List<Client>
             {
                 new Client
                 {
                     ClientId = "client",
                     AllowedGrantTypes = GrantTypes.ClientCredentials,

                     ClientSecrets =
                     {
                         new Secret("secret".Sha256())
                     },
                     AllowedScopes = { "api1" }
                 },

                 // resource owner password grant client
                 new Client
                 {
                     ClientId = "ro.client",
                     AllowedGrantTypes = GrantTypes.ResourceOwnerPassword,

                     ClientSecrets =
                     {
                         new Secret("secret".Sha256())
                     },
                     AllowedScopes = { "api1" }
                 },

                 // OpenID Connect hybrid flow and client credentials client (MVC)
                 new Client
                 {
                     ClientId = "mvc",
                     ClientName = "MVC Client",
                     AllowedGrantTypes = GrantTypes.HybridAndClientCredentials,

                     ClientSecrets =
                     {
                         new Secret("secret".Sha256())
                     },

                     RedirectUris = { "http://localhost:5002/signin-oidc" },
                     PostLogoutRedirectUris = { "http://localhost:5002/signout-callback-oidc" },

                     AllowedScopes =
                     {
                         IdentityServerConstants.StandardScopes.OpenId,
                         IdentityServerConstants.StandardScopes.Profile,
                         "api1"
                     },
                     AllowOfflineAccess = true
                 }
             };
         }

         public static List<TestUser> GetUsers()
         {
             return new List<TestUser>
             {
                 new TestUser
                 {
                     SubjectId = "",
                     Username = "alice",
                     Password = "password",

                     Claims = new List<Claim>
                     {
                         new Claim("name", "Alice"),
                         new Claim("website", "https://alice.com")
                     }
                 },
                 new TestUser
                 {
                     SubjectId = "",
                     Username = "bob",
                     Password = "password",

                     Claims = new List<Claim>
                     {
                         new Claim("name", "Bob"),
                         new Claim("website", "https://bob.com")
                     }
                 }
             };
         }
     }
 }

Startup.cs->ConfigureServices

using Microsoft.EntityFrameworkCore;
using System.Reflection;

 const string connectionString = @"Data Source=(LocalDb)\MSSQLLocalDB;database=IdentityServer4.Quickstart.EntityFramework-2.0.0;trusted_connection=yes;";
 var migrationsAssembly = typeof(Startup).GetTypeInfo().Assembly.GetName().Name;

 // configure identity server with in-memory stores, keys, clients and scopes
 services.AddIdentityServer()
     .AddDeveloperSigningCredential()
     .AddTestUsers(Config.GetUsers())
     // this adds the config data from DB (clients, resources)
     .AddConfigurationStore(options =>
     {
         options.ConfigureDbContext = builder =>
             builder.UseSqlServer(connectionString,
                 sql => sql.MigrationsAssembly(migrationsAssembly));
     })
     // this adds the operational data from DB (codes, tokens, consents)
     .AddOperationalStore(options =>
     {
         options.ConfigureDbContext = builder =>
             builder.UseSqlServer(connectionString,
                 sql => sql.MigrationsAssembly(migrationsAssembly));

         // this enables automatic token cleanup. this is optional.
         options.EnableTokenCleanup = true;
         options.TokenCleanupInterval = ;
     });

然后是生成数据库映像文件

 dotnet ef migrations add InitialIdentityServerPersistedGrantDbMigration -c PersistedGrantDbContext -o Data/Migrations/IdentityServer/PersistedGrantDb
 dotnet ef migrations add InitialIdentityServerConfigurationDbMigration -c ConfigurationDbContext -o Data/Migrations/IdentityServer/ConfigurationDb

然后是插入种子数据

 private void InitializeDatabase(IApplicationBuilder app)
 {
     using (var serviceScope = app.ApplicationServices.GetService<IServiceScopeFactory>().CreateScope())
     {
         serviceScope.ServiceProvider.GetRequiredService<PersistedGrantDbContext>().Database.Migrate();

         var context = serviceScope.ServiceProvider.GetRequiredService<ConfigurationDbContext>();
         context.Database.Migrate();
         if (!context.Clients.Any())
         {
             foreach (var client in Config.GetClients())
             {
                 context.Clients.Add(client.ToEntity());
             }
             context.SaveChanges();
         }

         if (!context.IdentityResources.Any())
         {
             foreach (var resource in Config.GetIdentityResources())
             {
                 context.IdentityResources.Add(resource.ToEntity());
             }
             context.SaveChanges();
         }

         if (!context.ApiResources.Any())
         {
             foreach (var resource in Config.GetApiResources())
             {
                 context.ApiResources.Add(resource.ToEntity());
             }
             context.SaveChanges();
         }
     }
 }

Startup.cs->Configure 配置注入

 InitializeDatabase(app);

最后还有两个要引用

using IdentityServer4.EntityFramework.DbContexts;
using IdentityServer4.EntityFramework.Mappers;