yes.blog/Yes.Infrastructure/Authorizations/AuthenticationExtensions.cs

namespace Yes.Infrastructure.Authorizations
{
    public static class AuthenticationExtensions
    {
        public static IServiceCollection AddUserAuthentication(this IServiceCollection services)
        {
            services.AddAuthentication(AuthenticationScheme.UserScheme)
              .AddCookie(AuthenticationScheme.UserScheme, options =>
              {
                  options.Cookie.Name = AuthenticationScheme.UserScheme;
                  options.LoginPath = "/admin/login";
                  options.LogoutPath = "/admin/logout";
                  options.ExpireTimeSpan = TimeSpan.FromDays(3);
                  options.SlidingExpiration = true;

                  options.Events.OnRedirectToAccessDenied =
                  options.Events.OnRedirectToLogin = c =>
                  {
                      if(c.Request.GetDisplayUrl().Contains("/api"))
                      {
                          c.Response.ContentType = "application/json";
                          c.Response.StatusCode = StatusCodes.Status401Unauthorized;
                          return Task.FromResult(Result.Error("请登录后操作！"));
                      }
                      else
                      {
                          c.Response.Redirect(c.RedirectUri);
                          return Task.CompletedTask;
                      }
                  };
              });


            return services;
        }

        public static async Task SignIn(this HttpContext context, IdentityInfo account)
        {
            await context.SignIn(AuthenticationScheme.UserScheme, account);
        }

        public static async Task SignIn(this HttpContext context, string authenticationScheme, IdentityInfo account)
        {
            var claims = new List<Claim>
            {
                new(ClaimTypes.Name, account.Name),
                new("Id", account.Id.ToString()),
                new("Name", account.Name),
                new("Role", account.Role.ToString())
            };

            var claimsIdentity = new ClaimsIdentity(authenticationScheme);
            claimsIdentity.AddClaims(claims);

            await context.SignInAsync(authenticationScheme,
                new ClaimsPrincipal(claimsIdentity),
                new AuthenticationProperties()
                {
                    IsPersistent = true,
                    ExpiresUtc = DateTimeOffset.UtcNow.AddHours(24 * 30),//有效时间
                    AllowRefresh = true
                }
            );


        }

        public static async Task SignOut(this HttpContext context, string authenticationScheme)
        {
            await context.SignOutAsync(authenticationScheme);
        }

        public static async Task SignOut(this HttpContext context)
        {
            await context.SignOutAsync(AuthenticationScheme.UserScheme);
        }

        public static async Task<bool> HasLogin(this HttpContext context)
        {
            return await Task.FromResult(context.User.Identity?.IsAuthenticated ?? false);
        }
    }
}