.Net Core 无法读取 Azure 可选声明 - ipaddr答案

【问题标题】：.Net Core cannot read Azure Optional Claim - ipaddr.Net Core 无法读取 Azure 可选声明 - ipaddr
【发布时间】：2020-10-09 05:02:31
【问题描述】：

在 .Net Core 3.1 中，我发现它无法读取来自 Azure AD - ipaddr 的可选声明。有人知道吗？

Identity token: XXX
Identity token: System.Security.Claims.Claim[]
Claim type: acct - Claim value: 0
Claim type: http://schemas.microsoft.com/claims/authnmethodsreferences - Claim value: pwd
Claim type: auth_time - Claim value: 1592477364
Claim type: name - Claim value: tester
Claim type: http://schemas.microsoft.com/identity/claims/objectidentifier - Claim value: 9190dd08-eb99-4def-8b0e-a0a9488c650a
Claim type: sid - Claim value: dd60ea4e-cc4f-4668-aee0-393ffb3e4dc0
Claim type: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier - Claim value: IUUXhcy8YnK-X5x4Mxwvtxdi8H74eANcTnZj2ZmQxV4
Claim type: tenant_ctry - Claim value: HK
Claim type: tenant_region_scope - Claim value: AS
Claim type: http://schemas.microsoft.com/identity/claims/tenantid - Claim value: xxx30ae3-9092-49c9-bf6d-d74f680615e4
Claim type: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name - Claim value: tester01@xxx.onmicrosoft.com
Claim type: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn - Claim value: tester01@xxx.onmicrosoft.com
Claim type: uti - Claim value: YHjG3-pwckizlnGrWZhzAA
Claim type: xms_pl - Claim value: zh-HK
Claim type: xms_tpl - Claim value: en

【问题讨论】：

@Vincent VC: Ctrl + K 将选择格式化为代码。

标签： .net-core asp.net-identity identityserver4 identity

【解决方案1】：

正如你在这里看到的OpenIdConnectOptions.cs，它说：

ClaimActions.DeleteClaim("ipaddr");

这意味着它将被处理程序删除。你需要做像这样写：

options.ClaimActions.Remove("ipaddr");

确保 OpenIDConnect 处理程序不会删除该声明。

【讨论】：