问使用API .net核心进行身份验证

EN

        //
    // POST: /Account/Login
    [HttpPost]
    [AllowAnonymous]
    [ValidateAntiForgeryToken]
    public async Task<IActionResult> Login(LoginViewModel model)
    {
        if (ModelState.IsValid)
        {
            // Do a rest call to the API
            Uri _baseUri = new Uri("http://localhost:8000/");
            var client = new RestClient(_baseUri + "api/Account/login");
            var request = new RestRequest(Method.POST);
            request.AddHeader("postman-token", "7ee2a21b-70d5-8a68-f0dd-518b8a61ddbf");
            request.AddHeader("cache-control", "no-cache");
            request.AddHeader("content-type", "application/x-www-form-urlencoded");
            request.AddParameter("application/x-www-form-urlencoded", "Email=blah%40gmail.com&password=a1Aa1Aa1A!&=", ParameterType.RequestBody);
            IRestResponse response = client.Execute(request);

            // Check the response
            if (response.StatusCode == HttpStatusCode.OK) {
                // Grab the cookie for the Identity
                // this can be replaced by a token in the future
                String cookie = response.Cookies.Where(c => c.Name == ".AspNetCore.Identity.Application").First().Value;
                // Store the cookie value to use it in sub-sequent requests                
                HttpContext.Session.SetString("IdentityCookieId", cookie);


                // Add claims to our new user, an example Name and an example Role 
                const string Issuer = "http://blah.com";
                var claims = new List<Claim>();
                claims.Add(new Claim(ClaimTypes.Name, "AnonymUser", ClaimValueTypes.String, Issuer));
                claims.Add(new Claim(ClaimTypes.Role, "Administrator", ClaimValueTypes.String, Issuer));

                var userIdentity = new ClaimsIdentity("SecuredLoggedIn");
                userIdentity.AddClaims(claims);
                var userPrincipal = new ClaimsPrincipal(userIdentity);

                // Sign in the user creating a cookie with X ammount of Expiry
                await HttpContext.Authentication.SignInAsync("Cookie", userPrincipal,
                    new AuthenticationProperties
                    {
                        ExpiresUtc = DateTime.UtcNow.AddMinutes(1),
                        IsPersistent = false,
                        AllowRefresh = false
                    });

                // Move back to the ReturnUrl or for me always to the dashboard
                return RedirectToLocal("/dashboard");
            }
        }

        return View(model);
    }

        app.UseCookieAuthentication(new CookieAuthenticationOptions
        {
            AuthenticationScheme = "Cookie",
            LoginPath = new PathString("/account/login/"),
            AccessDeniedPath = new PathString("/Account/Forbidden/"),
            AutomaticAuthenticate = true,
            AutomaticChallenge = true
        });