Shulou(Shulou.com)06/01 Report--

This article shows you how to add user authentication to OpenID Connect in IdentityServer4. The content is concise and easy to understand, which will definitely brighten your eyes. I hope you can get something through the detailed introduction of this article.

We want to use OpenID Connect to verify our MVC program (we need to have IdentityServer4). What do we need to do first? That is to build a UI, so that you can see the effect of our authentication, so IdentityServer officials have provided us with a set of UI, where can we get it?

You can use this address to clone and install it locally and attach it to your MVC program, address. Of course, we can pull remotely according to PowerShell (the following command Code in the project root directory)

Our command in Windows is as follows:

Iex ((New-Object System.Net.WebClient) .Downloadstring ('https://raw.githubusercontent.com/IdentityServer/IdentityServer4.Quickstart.UI/master/getmaster.ps1')))

Or use bash one-line on macOS or Linux:

\ curl-L https://raw.githubusercontent.com/IdentityServer/IdentityServer4.Quickstart.UI/master/getmaster.sh | bash

The following figure shows that I pulled remotely in Windows Powershell.

After installing the project, we will add a folder of Quickstart, which contains the code written by IdentityServer for us, controllers, models, views, static files, and so on.

Of course, you also need to configure your MVC in the Startup class, which requires adding MVC to the DI in ConfigureService and adding MVC middleware to the pipe in the Configure method.

First we add the authentication service to our DI through AddAuthentication. There are three parameters. The first DefaultScheme, uh, can be set up for us to save login information through Cookies. Then there is our DefaultChallengeScheme, whose parameter is oidc, which means that when we need a user to log in, we will use the OpenID Connect protocol. Then AddCookie, we use to add handlers that can handle cookie. Finally, AddOpenIdConnect is used to configure handlers that execute the OpenID Connect protocol. This Authority shows that we trust IdentityServer. And then we pass the ClientId. Identify this client. SaveTokens is used to keep tokens from IdentityServer in cookie, and I also turned off the JWT declaration mapping, which allows our application to flow smoothly through: JwtSecurityTokenHandler.DefaultInboundClaimTypeMap.Clear ();.

Finally, we need to make our authentication request responsive, and we should add authentication middleware before MVC in the pipeline.

To trigger validation, we add a feature [Authorize] to HomeController. Also modify the View of the Action to display the user's information, for example:

If you start now, an internal error will occur because the MVC client is not registered with the authentication platform server.

Now let's go back to our certification service center and add the following code to Config.cs (the scope represents what you want to protect and what customers want to access. Compared with OAuth, the scope in OIDC does not represent API, but represents identity data such as user ID, name, or e-mail address. )

You then need to add these identity resources to the IdentityServer configuration in Startup.cs. Call AddIdentityServer () using the AddInMemoryIdentityResources extension method.

The final step is to add the configuration of the MVC client to IdentityServer. The OpenID Connect-based client is very similar to the OAuth 2.0 client we have added so far. But because the process in OIDC is always interactive, we need to add some redirecting URL to the configuration. Add the following to your client configuration:

In this way, we start the project, and now there is no problem with starting the project.

Among them, we used the Quickstart of IdentityServer, although we have written a lot of related controllers and so on, this Ui is better to write or transform!

The above is how to add user authentication to OpenID Connect in IdentityServer4. Have you learned any knowledge or skills? If you want to learn more skills or enrich your knowledge reserve, you are welcome to follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.