yescent/yes.blog
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

1

Browse Source
This commit is contained in:
xiang
2025-05-12 23:57:05 +08:00
parent 10a344f6d6
commit 4fa451be97
57 changed files with 344 additions and 106 deletions
Download Patch File Download Diff File Expand all files Collapse all files

43
Yes.Infrastructure/Authorizations/AuthenticationExtensions.cs
View File

@@ -1,15 +1,16 @@

namespace Yes.Infrastructure.Authorizations
namespace Yes.Infrastructure.Authorizations
{
public static class AuthenticationExtensions
{
public static IServiceCollection AddUserAuthentication(this IServiceCollection services)
public static IServiceCollection AddAdminAuthentication(this IServiceCollection services,IConfiguration configuration)
{
services.AddAuthentication(AuthenticationScheme.UserScheme)
.AddCookie(AuthenticationScheme.UserScheme, options =>
var securityKeyBase64 = JwtHelper.GenerateKey(configuration["SecretKey"] ?? "");
services.AddAuthentication(AuthenticationScheme.AdminScheme)
.AddCookie(AuthenticationScheme.AdminScheme, options =>
{
options.Cookie.Name = AuthenticationScheme.UserScheme;
options.Cookie.Name = AuthenticationScheme.AdminScheme;
options.LoginPath = "/admin/login";
options.LogoutPath = "/admin/logout";
options.ExpireTimeSpan = TimeSpan.FromDays(3);
@@ -18,7 +19,7 @@ namespace Yes.Infrastructure.Authorizations
options.Events.OnRedirectToAccessDenied =
options.Events.OnRedirectToLogin = c =>
{
if(c.Request.GetDisplayUrl().Contains("/api"))
if (c.Request.GetDisplayUrl().Contains("/api"))
{
c.Response.ContentType = "application/json";
c.Response.StatusCode = StatusCodes.Status401Unauthorized;
@@ -30,18 +31,32 @@ namespace Yes.Infrastructure.Authorizations
return Task.CompletedTask;
}
};
});
}).AddJwtBearer(AuthenticationScheme.ApiScheme, options =>
{
options.TokenValidationParameters = new TokenValidationParameters
{
ValidateLifetime = true,
RequireSignedTokens = false,
RequireExpirationTime = false,
ValidateIssuer = true,
ValidateIssuerSigningKey = true,
ValidIssuer = "hyrule",
IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(securityKeyBase64))
};
});
return services;
}
public static async Task SignIn(this HttpContext context, IdentityInfo account)
public static async Task SignIn(this HttpContext context, IdentityInfo account, int tokenLifetimeMinutes)
{
await context.SignIn(AuthenticationScheme.UserScheme, account);
await context.SignIn(AuthenticationScheme.AdminScheme, account, tokenLifetimeMinutes);
}
public static async Task SignIn(this HttpContext context, string authenticationScheme, IdentityInfo account)
public static async Task SignIn(this HttpContext context, string authenticationScheme, IdentityInfo account, int tokenLifetimeMinutes)
{
var claims = new List<Claim>
{
@@ -59,7 +74,7 @@ namespace Yes.Infrastructure.Authorizations
new AuthenticationProperties()
{
IsPersistent = true,
ExpiresUtc = DateTimeOffset.UtcNow.AddHours(24 * 30),//有效时间
ExpiresUtc = DateTimeOffset.UtcNow.AddMinutes(tokenLifetimeMinutes),//有效时间
AllowRefresh = true
}
);
@@ -74,7 +89,7 @@ namespace Yes.Infrastructure.Authorizations
public static async Task SignOut(this HttpContext context)
{
await context.SignOutAsync(AuthenticationScheme.UserScheme);
await context.SignOutAsync(AuthenticationScheme.AdminScheme);
}
public static async Task<bool> HasLogin(this HttpContext context)