微服务（入门学习五）：identityServer4+ocelot+consul实现简单客户端模式

简介

主要是采用identity Server4 和ocelot 加上consul 实现简单的客户端模式

开发准备

 环境准备

• 下载并安装Consul具体请参考前几篇的内容

项目介绍

• 创建ocelotServerTest项目
• 创建IdentityServer4Test项目
• 创建consulServer项目（API项目）  

1.创建Consulserver项目

   参考该地址进行创建：微服务（入门二）：netcore通过consul注册服务

2.创建identityServer项目

  参考该地址进行创建：微服务（入门四）：identityServer的简单使用（客户端授权）

3.创建ocelotServerTest项目

 3.1创建一个webAPI项目

3.2 修改startUP配置，添加authentication认证

using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
using IdentityServer4.AccessTokenValidation;
using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Hosting;
using Microsoft.AspNetCore.HttpsPolicy;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.Configuration;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Logging;
using Microsoft.Extensions.Options;
using netCore;
using Ocelot.DependencyInjection;
using Ocelot.Middleware;
using Ocelot.Provider.Consul;
using Ocelot.Provider.Polly;
namespace IdentityServer4Test
{
    public class Startup
    {
        public Startup(IConfiguration configuration)
        {
            Configuration = configuration;
        }

        public IConfiguration Configuration { get; }

        // This method gets called by the runtime. Use this method to add services to the container.
        public void ConfigureServices(IServiceCollection services)
        {
            services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_1);
            services
                .AddAuthentication(JwtBearerDefaults.AuthenticationScheme)//添加认证
                .AddIdentityServerAuthentication("TestKey", o =>
                {
                    o.Authority = "http://127.0.0.1:3322";//要认证的服务器地址
                    o.RequireHttpsMetadata = false;//不启用https
                    o.ApiName = "api1";//要认证的服务名称
                });
            services.AddOcelot(Configuration).AddConsul().AddPolly();
        }

        // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
        public void Configure(IApplicationBuilder app, IHostingEnvironment env)
        {
            if (env.IsDevelopment())
            {
                app.UseDeveloperExceptionPage();
            }
            else
            {
                app.UseHsts();
            }
            app.UseMvc();

            app.UseOcelot().Wait();
            app.UseAuthentication();
        }
    }
}

3.3创建ocelot.json文件并且添加AuthenticationOptions

 "AuthenticationOptions": {
        "AuthenticationProviderKey": "TestKey",
        "AllowedScopes": []
      }

{
  "ReRoutes": [

    {
      //下游路由模板，真实请求的路径
      "DownstreamPathTemplate": "/api/{everything}",
      //请求的方式，例如：http,https
      "DownstreamScheme": "http",
      //服务器名称
      "ServiceName": "zyz1",
      //启用consul服务
      "UseServiceDiscovery": true,
      //服务熔断
      "QoSOptions": {
        "ExceptionsAllowedBeforeBreaking": , //允许多少次异常请求
        "DurationOfBreak": , //熔断时间，单位为秒
        "TimeoutValue":  //如果下游请求的处理时间超过多少则自动设置超时
      },
      //"RateLimitOptions": {
      //  "ClientWhitelist": [ "admin" ], // 白名单
      //  "EnableRateLimiting": true, // 是否启用限流
      //  "Period": "1m", // 统计时间段：1s, 5m, 1h, 1d
      //  "PeriodTimespan": 15, // 多少秒之后客户端可以重试
      //  "Limit": 5 // 在统计时间段内允许的最大请求数量
      //},//负载均衡：
      //RoundRobin轮流发送;
      //LeastConnection – 将请求发往最空闲的那个服务器
      //NoLoadBalance – 总是发往第一个请求或者是服务发现
      "LoadBalancerOptions": {
        "Type": "RoundRobin"
      },

      //上游地址配置
      "UpstreamPathTemplate": "/test/{everything}",
      //上游支持的请求类型
      "UpstreamHttpMethod": [ "GET", "POST" ],
      "AuthenticationOptions": {
        "AuthenticationProviderKey": "TestKey",
        "AllowedScopes": []
      }
    },
    {
      "DownstreamPathTemplate": "/api/Token",
      "DownstreamScheme": "http",
      "DownstreamHostAndPorts": [
        {
          "Host": "127.0.0.1",
          "Port":
        }
      ],
      "UpstreamPathTemplate": "/GetToken",
      "UpstreamHttpMethod": [ "Get" ]
    }
  ],
  "GlobalConfiguration": {
    "BaseUrl": "https://localhost:8596",
    //consul服务器地址和ip
    "ServiceDiscoveryProvider": {
      "Host": "localhost",
      "Port":
    }

  }
}

3.4 修改program文件，添加访问地址，以及ocelot的配置文件

using System;
using System.Collections.Generic;
using System.IO;
using System.Linq;
using System.Threading.Tasks;
using Microsoft.AspNetCore;
using Microsoft.AspNetCore.Hosting;
using Microsoft.Extensions.Configuration;
using Microsoft.Extensions.Logging;

namespace IdentityServer4Test
{
    public class Program
    {
        public static void Main(string[] args)
        {
            CreateWebHostBuilder(args).Build().Run();
        }

        public static IWebHostBuilder CreateWebHostBuilder(string[] args) =>
            WebHost.CreateDefaultBuilder(args)
            .UseUrls("http://localhost:8596")
            .ConfigureAppConfiguration(conf =>
            {
                conf.AddJsonFile("ocelot.json", optional: false, reloadOnChange: true);
            })
           .UseStartup<Startup>();
    }
}

测试

1.首先开启consul服务

 2.接下来把服务注册到consul当中，启动ConsulServer

3.启动IdentityServer4Test和ocelotServerTest服务

4.通过postMan获取token（正式开发中不会如此使用）

 5.根据获取的token去请求Consulserver当中的数据，可正常返回数据