Asp.net 生成本地 oauth 令牌

Question

我正在尝试将外部 oauth 访问令牌交换为本地令牌。

似乎一切正常。但是我无法成功生成当地的誓言令牌。

我明白了：

An exception of type 'System.ArgumentNullException' occurred in mscorlib.dll but was not handled in user code

Additional information: Value cannot be null.

在这行代码上：

var accessToken = AltaiStartup.OAuthBearerOptions.AccessTokenFormat.Protect(ticket);

这是负责生成本地令牌的代码： 私有 JObject GenerateLocalAccessTokenResponse(string userName, string userId) {

        var tokenExpiration = TimeSpan.FromDays(1);

        ClaimsIdentity identity = new ClaimsIdentity();

        identity.AddClaim(new Claim(ClaimTypes.Name, userName));
        identity.AddClaim(new Claim(ClaimTypes.Sid, userId));
        identity.AddClaim(new Claim("role", "user"));


        var props = new AuthenticationProperties()
        {
            IssuedUtc = DateTime.UtcNow,
            ExpiresUtc = DateTime.UtcNow.Add(tokenExpiration),
        };

        var ticket = new AuthenticationTicket(identity, props);

        var accessToken = AltaiStartup.OAuthBearerOptions.AccessTokenFormat.Protect(ticket);

        JObject tokenResponse = new JObject(
                                    new JProperty("userName", userName),
              new JProperty("access_token", accessToken),
                                    new JProperty("token_type", "bearer"),
                                    new JProperty("expires_in", tokenExpiration.TotalSeconds.ToString()),
                                    new JProperty(".issued", ticket.Properties.IssuedUtc.ToString()),
                                    new JProperty(".expires", ticket.Properties.ExpiresUtc.ToString())
    );

        return tokenResponse;
    }

这是我的创业班：

  public class AltaiStartup
{

    public static OAuthBearerAuthenticationOptions OAuthBearerOptions { get; private set; }

    public void Configuration(IAppBuilder app)
    {


        // WebApi config
        HttpConfiguration config = new HttpConfiguration();

        config.MapHttpAttributeRoutes();

        // SimpleInjector
        var container = new SimpleInjector.Container();
        container.Options.PropertySelectionBehavior = new ImportPropertySelectionBehavior();

        container.Verify();
        config.DependencyResolver = new SimpleInjectorWebApiDependencyResolver(container);

        // Setup Oauth
        ConfigureOAuth(app, container.GetInstance<IAuthModule>());

        WebApiConfig.Register(config);

        app.UseCors(Microsoft.Owin.Cors.CorsOptions.AllowAll);
        app.UseWebApi(config);

    }

    public void ConfigureOAuth(IAppBuilder app, IAuthModule AuthModule)
    {

        OAuthBearerOptions = new OAuthBearerAuthenticationOptions();


        OAuthAuthorizationServerOptions OAuthServerOptions = new OAuthAuthorizationServerOptions()
        {
            AllowInsecureHttp = true,
            TokenEndpointPath = new PathString("/token"),
            AccessTokenExpireTimeSpan = TimeSpan.FromDays(1),
            Provider = new AltaiAuthorizationServerProvider(AuthModule)
        };

        OAuthBearerOptions.AccessTokenFormat = OAuthServerOptions.AccessTokenFormat;
        OAuthBearerOptions.AccessTokenFormat = OAuthServerOptions.AccessTokenFormat;
        OAuthBearerOptions.AccessTokenProvider = OAuthServerOptions.AccessTokenProvider;
        OAuthBearerOptions.AuthenticationMode = OAuthServerOptions.AuthenticationMode;
        OAuthBearerOptions.AuthenticationType = OAuthServerOptions.AuthenticationType;
        OAuthBearerOptions.Description = OAuthServerOptions.Description;
        OAuthBearerOptions.SystemClock = OAuthServerOptions.SystemClock;

        // Token Generation
        app.UseOAuthAuthorizationServer(OAuthServerOptions);
        app.UseOAuthBearerAuthentication(OAuthBearerOptions);

    }

}

Answer 1

这似乎解决了它：

ClaimsIdentity identity = new ClaimsIdentity(OAuthDefaults.AuthenticationType);