IdentityServer4：如何在 API 控制器中包含附加声明并获取值？

Question

如何在声明中包含电子邮件并通过 API Controller 获取电子邮件值？

IdentityServer4 示例：https://github.com/IdentityServer/IdentityServer4.Samples/tree/release/Quickstarts/8_EntityFrameworkStorage

API 身份控制器https://github.com/IdentityServer/IdentityServer4.Samples/blob/release/Quickstarts/8_EntityFrameworkStorage/src/Api/Controllers/IdentityController.cs

测试用户https://github.com/IdentityServer/IdentityServer4.Samples/blob/release/Quickstarts/8_EntityFrameworkStorage/src/QuickstartIdentityServer/Quickstart/TestUsers.cs

Answer 1

当您定义一个 api 资源时（查看 Config.cs），您可以这样做：

new ApiResource
{
    Name = "api",
    DisplayName = "My API",

    UserClaims =
    {
        JwtClaimTypes.Id,
        JwtClaimTypes.Subject,
        JwtClaimTypes.Email
    }
}

它定义您的 API 将接收这些声明。

编辑：

最好将关联资源添加到 GetIdentityResources 函数中（参见 Config.cs）

浏览官方文档以获得更好的图片 http://docs.identityserver.io/en/release/topics/resources.html.

我给你一个来自个人项目的完整例子：

    public static IEnumerable<IdentityResource> GetIdentityResources()
    {
        //>Declaration
        var lIdentityResources = new List<IdentityResource>
        {
            new IdentityResources.OpenId(),
            new IdentityResources.Profile(),
            new IdentityResources.Email()
        };

        //>Processing
        foreach (var lAPIResource in GetApiResources())
        {
            lIdentityResources.Add(new IdentityResource(lAPIResource.Name,
                                                        lAPIResource.UserClaims));
        }

        //>Return
        return lIdentityResources;
    }

    public static IEnumerable<ApiResource> GetApiResources()
    {
        return new List<ApiResource>
        {
            new ApiResource
            {
                Name = "api1",
                DisplayName = "api1 API",

                UserClaims =
                {
                    JwtClaimTypes.Id,
                    JwtClaimTypes.Subject,
                    JwtClaimTypes.Email
                }
            }
        };
    }