blocks|key|107229|text|在搜索了很多次之后，我发现我可以创建一些自定义属性，并可以使用身份验证票证设置它们。通过这种方式，您可以定制响应，使其具有调用方可能需要的定制值。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|107230|下面是将用户角色与令牌一起发送的代码。这是我的要求。可以修改代码以发送所需的数据。|107231|public+override+async+Task+GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext+context)
++++{
++++++++using+(UserManager<ApplicationUser>+userManager+=+_userManagerFactory())
++++++++{
++++++++++++ApplicationUser+user+=+await+userManager.FindAsync(context.UserName,+context.Password);

++++++++++++if+(user+==+null)
++++++++++++{
++++++++++++++++context.SetError("invalid_grant",+"The+user+name+or+password+is+incorrect.");
++++++++++++++++return;
++++++++++++}

++++++++++++ClaimsIdentity+oAuthIdentity+=+await+userManager.CreateIdentityAsync(user,
++++++++++++++++context.Options.AuthenticationType);

++++++++++++ClaimsIdentity+cookiesIdentity+=+await+userManager.CreateIdentityAsync(user,
++++++++++++++++CookieAuthenticationDefaults.AuthenticationType);
++++++++++++List<Claim>+roles+=+oAuthIdentity.Claims.Where(c+=>+c.Type+==+ClaimTypes.Role).ToList();
++++++++++++AuthenticationProperties+properties+=+CreateProperties(user.UserName,+Newtonsoft.Json.JsonConvert.SerializeObject(roles.Select(x=>x.Value)));

++++++++++++AuthenticationTicket+ticket+=+new+AuthenticationTicket(oAuthIdentity,+properties);
++++++++++++context.Validated(ticket);
++++++++++++context.Request.Context.Authentication.SignIn(cookiesIdentity);
++++++++}
++++}


+public+static+AuthenticationProperties+CreateProperties(string+userName,+string+Roles)
++++{
++++++++IDictionary<string,+string>+data+=+new+Dictionary<string,+string>
++++++++{
++++++++++++{+"userName",+userName+},
++++++++++++{"roles",Roles}
++++++++};
++++++++return+new+AuthenticationProperties(data);
++++}|code-block|syntax|javascript|107232|这将返回输出为|107233|`{"access_token":"Vn2kwVz...",
+"token_type":"bearer",
+"expires_in":1209599,
+"userName":"username",
+".issued":"Sat,+07+Jun+2014+10:43:05+GMT",
+".expires":"Sat,+21+Jun+2014+10:43:05+GMT"
+"roles"=["Role1","Role2"]+}`|107234|希望这些信息能对某些人有所帮助。:)|107235|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|S|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|T|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|U|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|V|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|P|$]]

After searching a lot i found that i can create some custom properties and can set them with the authentication ticket. In this way you can customize the response so that it can have the custom values which may be required at the caller end. 

Here is the code to send the user roles along with the token. which was my requirement. one can modify the code to send the required data.

<pre><code>public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
 {
 using (UserManager&lt;ApplicationUser&gt; userManager = _userManagerFactory())
 {
 ApplicationUser user = await userManager.FindAsync(context.UserName, context.Password);

 if (user == null)
 {
 context.SetError("invalid_grant", "The user name or password is incorrect.");
 return;
 }

 ClaimsIdentity oAuthIdentity = await userManager.CreateIdentityAsync(user,
 context.Options.AuthenticationType);

 ClaimsIdentity cookiesIdentity = await userManager.CreateIdentityAsync(user,
 CookieAuthenticationDefaults.AuthenticationType);
 List&lt;Claim&gt; roles = oAuthIdentity.Claims.Where(c =&gt; c.Type == ClaimTypes.Role).ToList();
 AuthenticationProperties properties = CreateProperties(user.UserName, Newtonsoft.Json.JsonConvert.SerializeObject(roles.Select(x=&gt;x.Value)));

 AuthenticationTicket ticket = new AuthenticationTicket(oAuthIdentity, properties);
 context.Validated(ticket);
 context.Request.Context.Authentication.SignIn(cookiesIdentity);
 }
 }


 public static AuthenticationProperties CreateProperties(string userName, string Roles)
 {
 IDictionary&lt;string, string&gt; data = new Dictionary&lt;string, string&gt;
 {
 { "userName", userName },
 {"roles",Roles}
 };
 return new AuthenticationProperties(data);
 }
</code></pre>

This will return me the out put as

<pre><code>`{"access_token":"Vn2kwVz...",
 "token_type":"bearer",
 "expires_in":1209599,
 "userName":"username",
 ".issued":"Sat, 07 Jun 2014 10:43:05 GMT",
 ".expires":"Sat, 21 Jun 2014 10:43:05 GMT"
 "roles"=["Role1","Role2"] }`
</code></pre>

Hope this information will be helpful to some one. :)

blocks|key|107246|text|上面的更改可以通过AuthorizationProvider中的另一个方法按预期返回角色，如下所示：(添加此方法并使用角色摇摆...)|type|unstyled|depth|inlineStyleRanges|entityRanges|data|107247|public+override+Task+TokenEndpoint(OAuthTokenEndpointContext+context)
++++++++{
++++++++++++foreach+(KeyValuePair<string,+string>+property+in+context.Properties.Dictionary)
++++++++++++{
++++++++++++++++context.AdditionalResponseParameters.Add(property.Key,+property.Value);
++++++++++++}

++++++++++++return+Task.FromResult<object>(null);
++++++++}|code-block|syntax|javascript|107248|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Above changes are good to return roles as expected with one additional method in AuthorizationProvider as below: (Add this method and rock with roles...)

<pre><code>public override Task TokenEndpoint(OAuthTokenEndpointContext context)
 {
 foreach (KeyValuePair&lt;string, string&gt; property in context.Properties.Dictionary)
 {
 context.AdditionalResponseParameters.Add(property.Key, property.Value);
 }

 return Task.FromResult&lt;object&gt;(null);
 }
</code></pre>

I am developing a Web API 2 project. For authentication I am using bearer token. On successful authentication the API returns a JSON object.

<pre><code>{"access_token":"Vn2kwVz...",
 "token_type":"bearer",
 "expires_in":1209599,
 "userName":"username",
 ".issued":"Sat, 07 Jun 2014 10:43:05 GMT",
 ".expires":"Sat, 21 Jun 2014 10:43:05 GMT"}
</code></pre>

Now I want to return the user roles as well in this JSON object. What changes do I need to make in order to get the user roles from JSON response?

Return user roles from bearer token of Web API

身份验证

JSON

我正在开发一个Web API 2项目。对于身份验证，我使用的是持有者令牌。如果身份验证成功，API将返回一个JSON对象。{"access_token":"Vn2kwVz...",   "token_type":"bearer",   "expires_in":1209599,   "userName":"userna...

问从Web API的持有者令牌返回用户角色
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问从Web API的持有者令牌返回用户角色EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问从Web API的持有者令牌返回用户角色
EN