asp.net core2.2多用户验证与授权示例详解_实用技巧_

 public class DemoController : Controller { /// 
 /// 企业微信用户使用的模块 /// 
 ///  public IActionResult Work() { return Content(User.Identity.Name +User.IsInRole("Admin")); } /// 
 /// 企业微信管理员使用的模块 /// 
 ///  public IActionResult WorkAdmin() { return Content(User.Identity.Name + User.IsInRole("Admin")); } /// 
 /// 微信公众号用户使用的模块 /// 
 ///  public IActionResult Mp() { return Content(User.Identity.Name + User.IsInRole("Admin")); } /// 
 /// 微信公众号管理员使用的模块 /// 
 ///  public IActionResult MpAdmin() { return Content(User.Identity.Name + User.IsInRole("Admin")); } }

 services.AddAuthentication ( "Work" //就是设置一个缺省的cookie验证的名字，缺省的意思就是需要写的时候可以不写。另外很多时候用CookieAuthenticationDefaults.AuthenticationScheme，这玩意就是字符串常量“Cookies”, ) .AddCookie ( "Work", //cookie验证的名字，“Work”可以省略，因为是缺省名 option => { option.LoginPath = new PathString("/Demo/WorkLogin"); //设置验证的路径 option.AccessDeniedPath= new PathString("/Demo/WorkDenied");//设置无授权访问跳转的路径 }).AddCookie("Mp", option => { option.LoginPath = new PathString("/Demo/MpLogin"); option.AccessDeniedPath = new PathString("/Demo/MpDenied"); });

 app.UseAuthentication();

 public async Task WorkLogin(string returnUrl) { var claims = new List { new Claim(ClaimTypes.Name, "UserId"), new Claim(ClaimTypes.Role, "Admin") //如果是管理员 }; var claimsIdentity = new ClaimsIdentity(claims, "Work");//“,"Work"”可以省略，因为是缺省名 var authProperties = new AuthenticationProperties { AllowRefresh = true, //ExpiresUtc = DateTimeOffset.UtcNow.AddMinutes(10), // The time at which the authentication ticket expires. A // value set here overrides the ExpireTimeSpan option of // CookieAuthenticationOptions set with AddCookie. IsPersistent = false, //持久化保存，到底什么意思我也不太清楚，哪位兄弟清楚的话，盼解释 //IssuedUtc = , // The time at which the authentication ticket was issued. RedirectUri = returnUrl ?? "/Demo/Work" }; await HttpContext.SignInAsync("Work", new ClaimsPrincipal(claimsIdentity), authProperties); } public IActionResult WorkDenied() { return Forbid(); } public async Task MpLogin(string returnUrl) { var claims = new List { new Claim(ClaimTypes.Name, "OpenId"), new Claim(ClaimTypes.Role, "Admin") //如果是管理员 }; var claimsIdentity = new ClaimsIdentity(claims, "Mp");//“,"Mp"”不能省略，因为不是缺省名 var authProperties = new AuthenticationProperties { AllowRefresh = true, IsPersistent = false, RedirectUri = returnUrl ?? "/Demo/Mp" }; await HttpContext.SignInAsync("Mp", new ClaimsPrincipal(claimsIdentity), authProperties); } public IActionResult MpDenied() { return Forbid(); }

 /// 
 /// 企业微信用户使用的模块 /// 
 ///  [Authorize( AuthenticationSchemes ="Work" //缺省名可以省略 )] public IActionResult Work() { return Content(User.Identity.Name + User.IsInRole("Admin")); } /// 
 /// 企业微信管理员使用的模块 /// 
 ///  [Authorize(AuthenticationSchemes ="Work",Roles ="Admin")] public IActionResult WorkAdmin() { return Content(User.Identity.Name + User.IsInRole("Admin")); } /// 
 /// 微信公众号用户使用的模块 /// 
 ///  [Authorize(AuthenticationSchemes ="Mp")] public IActionResult Mp() { return Content(User.Identity.Name + User.IsInRole("Admin")); } /// 
 /// 微信公众号管理员使用的模块 /// 
 ///  [Authorize(AuthenticationSchemes ="Mp",Roles ="Admin")] public IActionResult MpAdmin() { return Content(User.Identity.Name + User.IsInRole("Admin")); }

 public async Task Login(string returnUrl) { var claims = new List { new Claim(ClaimTypes.Name, "UserId"), new Claim(ClaimTypes.Role, "Admin") //如果是管理员 }; var claimsIdentity = new ClaimsIdentity(claims, "Work");//“,"Work"”可以省略，因为是缺省名 var authProperties = new AuthenticationProperties { //AllowRefresh = true, //IsPersistent = false, //RedirectUri }; await HttpContext.SignInAsync("Work", new ClaimsPrincipal(claimsIdentity), authProperties); return Content("OK"); }