.net core 使用ClaimsIdentity实现登录授权

一、新建用户

1、先新建一个用户表，用户存储用户信息。

     public class UserInfo
     {
         public const string Salt = "cesi";
         [Key]
         [DatabaseGenerated(DatabaseGeneratedOption.Identity)]
         public Guid Id { get; set; }
         [Required]
         public string UserName { get; set; }
         [Required]
         public string PassWord { get; set; }
         public string CreateTime { get; set; }
     }

2、新建一个添加用户的接口，添加一个用户，方便后面测试。

         [HttpPost]
         public async Task<IActionResult> AddUser([FromForm]UserInfo model)
         {
             if (_context.UserInfo.Any(s => model.UserName.Equals(s.UserName)))
             {
                 return Ok(new
                 {
                     code = ResultCode.Error,
                     message = "用户名称已存在，请确认!"
                 });
             }
             model.CreateTime = DateTime.Now.ToString("yyyy-MM-dd HH:mm:ss");
             var pwd = model.PassWord;
             var passWordAndSaltBytes = Encoding.UTF8.GetBytes(pwd + UserInfo.Salt);
             var hashBytes = new SHA256Managed().ComputeHash(passWordAndSaltBytes);
             string hashString = Convert.ToBase64String(hashBytes);
             model.PassWord = hashString;
             await _context.AddAsync(model);
             await _context.SaveChangesAsync();
             return Ok(new
             {
                 code = ResultCode.Success,
                 message = "创建用户信息成功!"
             });
         }

3、调用接口添加用户信息。

二、实现用户登录

1、实现用户登录

         [HttpPost("login")]
         public async Task<IActionResult> Login([FromForm]LoginModel model)
         {
             var passWordAndSaltBytes = Encoding.UTF8.GetBytes(model.PassWord + UserInfo.Salt);
             var hashBytes = new SHA256Managed().ComputeHash(passWordAndSaltBytes);
             string hashString = Convert.ToBase64String(hashBytes);
             var userInfo = _context.UserInfo.AsNoTracking().FirstOrDefault(p => p.UserName == model.UserName && p.PassWord == hashString);
             if (userInfo == null)
             {
                 return Ok(new { code = ResultCode.NotLogin, message = "用户名或密码错误" });
             }
             var httpcontext = _httpContextAccessor.HttpContext;
             var claimsIdentity = new ClaimsIdentity("Cookie");
             claimsIdentity.AddClaim(new Claim(ClaimTypes.NameIdentifier, userInfo.Id.ToString()));
             claimsIdentity.AddClaim(new Claim(ClaimTypes.Name, model.UserName));
             var claimsPrincipal = new ClaimsPrincipal(claimsIdentity);
             await HttpContext.SignInAsync(CookieAuthenticationDefaults.AuthenticationScheme, claimsPrincipal);
             return Ok(new { code = ResultCode.Success, message = "登录成功", data = userInfo });
         }

2、调用登录接口，测试

三、Setup配置

         public void ConfigureServices(IServiceCollection services)
         {
             services.Configure<CookiePolicyOptions>(options =>
             {
                 options.CheckConsentNeeded = context => true;
                 options.MinimumSameSitePolicy = SameSiteMode.None;
             });
             services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
             .AddCookie(options =>
             {
                 options.LoginPath = "/api/Login/Index";
                 options.AccessDeniedPath = "/api/Login/Denied";
             });
             services.AddSession(options =>
             {
                 options.IdleTimeout = TimeSpan.FromSeconds();
                 options.Cookie.HttpOnly = true;
             });
             services.AddCors(options =>
             {
                 string[] CorsOrigins = Configuration["CorsOrigins"].Split(';');
                 options.AddPolicy("AnyCors",
                     policy => policy.WithOrigins(CorsOrigins)
                     .AllowAnyHeader()
                     .AllowAnyMethod()
                     .AllowCredentials());
             });
             string connecttext = Configuration.GetConnectionString("Sqlite");
             services.AddDbContext<SqlContext>(options => options.UseSqlite(connecttext), ServiceLifetime.Singleton);
             services.AddSingleton<IHttpContextAccessor, HttpContextAccessor>();
             services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_2);
         }

         public void Configure(IApplicationBuilder app, IHostingEnvironment env)
         {
             if (env.IsDevelopment())
             {
                 app.UseDeveloperExceptionPage();
             }
             else
             {
                app.UseHsts();
             }
             app.UseAuthentication();
             app.UseCors("AnyCors");
             app.UseHttpsRedirection();
             app.UseCookiePolicy();
             app.UseStaticFiles();
             app.UseMvc();
         }