使用 Identity Server 4 asp.net core 2.2 实现 Swagger 授权

Question

尝试使用身份服务器 4 实现 Swagger 授权。出现错误但不知道我在哪里做错了。

身份服务器设置

public IEnumerable<Client> GetClients()
    {
        var client = new List<Client>
        {
            new Client
            {
                 ClientId = ConstantValue.ClientId,
                ClientName = ConstantValue.ClientName,
                AllowedGrantTypes = GrantTypes.Implicit,
                AllowAccessTokensViaBrowser = true,
                RequireConsent = false,
                RedirectUris =           { string.Format("{0}/{1}", Configuration["IdentityServerUrls:ClientUrl"], "assets/oidc-login-redirect.html"), string.Format("{0}/{1}", Configuration["IdentityServerUrls:ClientUrl"], "assets/silent-redirect.html") },
                PostLogoutRedirectUris = { string.Format("{0}?{1}", Configuration["IdentityServerUrls:ClientUrl"] , "postLogout=true") },
                AllowedCorsOrigins =     { Configuration["IdentityServerUrls: ClientUrl"] },

                AllowedScopes =
                {
                    IdentityServerConstants.StandardScopes.OpenId,
                    IdentityServerConstants.StandardScopes.Profile,
                    ConstantValue.ClientDashApi
                },
                IdentityTokenLifetime=120,
                AccessTokenLifetime=120
            },
            new Client
            {
                ClientId = "swaggerui",
                ClientName = "Swagger UI",
                AllowedGrantTypes = GrantTypes.Implicit,
                AllowAccessTokensViaBrowser = true,

                RedirectUris =
                {
                    string.Format("{0}/{1}", Configuration["IdentityServerUrls:ClientApiUrl"], "swagger/oauth2-redirect.html"),
                    string.Format("{0}/{1}", Configuration["IdentityServerUrls:ClientApiUrl"], "swagger/o2c.html")
                },
                AllowedCorsOrigins =     { Configuration["IdentityServerUrls: ClientApiUrl"] },

                AllowedScopes = {ConstantValue.ClientDashApi},
            },
        };
        return client;
    }

API 代码

services.AddSwaggerGen(options =>
            {
                options.AddSecurityDefinition("oauth2", new OAuth2Scheme
                {
                    Type = "oauth2",
                    Flow = "implicit",
                    AuthorizationUrl = "http://localhost:44305/connect/authorize",
                    TokenUrl = "http://localhost:44305/connect/token",
                    Scopes = new Dictionary<string, string>()
                    {
                        { "mero-rental-client-api", "mero-rental-client-api" }

                    }
                });
            });


app.UseSwagger();
            app.UseSwaggerUI(options =>
            {
                options.SwaggerEndpoint("/swagger/v1/swagger.json", "Mero Rental API V1");
                options.OAuthClientId("swaggerui");
                options.OAuthAppName("Swagger UI");
            });

这是重定向网址

http://localhost:44305/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dtoken%26client_id%3Dswaggerui%26redirect_uri%3Dhttp%253A%252F%252Flocalhost%253A44333%252Fswagger%252Foauth2-redirect.html%26scope%3Dmero-rental-client-api%26state%3DV2VkIEphbiAwOSAyMDE5IDE0OjUzOjMzIEdNVCsxMTAwIChBdXN0cmFsaWFuIEVhc3Rlcm4gRGF5bGlnaHQgVGltZSk%253D

这是我在控制台中遇到的错误。 在浏览器上。

参考

https://www.scottbrady91.com/Identity-Server/ASPNET-Core-Swagger-UI-Authorization-using-IdentityServer4

https://dave.vanherten.ca/2017/03/swagger-identityserver4-part2/

Answer 1

您使用RedirectUris = { string.Format("{0}/{1}", Configuration["IdentityServerUrls:ClientUrl"], "swagger/o2c.html") } 为Client 配置RedirectUris，这将生成http://localhost:4200/swagger/o2c.html。但是对于您的请求，它会发送带有http://localhost:44333/swagger/oauth2-redirect.html 的requesturl。

尝试检查您的客户端配置并将其更改为http://localhost:4200/swagger/o2c.html。

app.UseOpenIdConnectAuthentication(new OpenIdConnectAuthenticationOptions
    {            
        RedirectUri = "http://localhost:4200/swagger/o2c.html",
    });