问在MVVM应用程序中的密匙遮盖:我如何在一个普通的C# WPF应用程序中访问C#中给定用户/密码的角色？

EN

using RestSharp;
using System.IdentityModel.Tokens;
using Newtonsoft.Json;
using System.Security.Claims;
using System.Web;
using System.Security.Principal;
using Microsoft.AspNet.Identity;
[..]

    
[..]
    public String GetAccessAndRefreshToken()
    {
        RestClient client = new RestClient("http://YourKeycloakServer:YourKCPort/auth/realms/YourRealm/protocol/openid-connect/token");

        RestRequest request = new RestRequest(Method.POST);
        request.AddHeader("cache-control", "no-cache");
        request.AddHeader("content-type", "application/x-www-form-urlencoded");
        request.AddParameter("grant_type", "password");
        request.AddParameter("client_id", "YourAppsNameInKeycloak");
        request.AddParameter("username", AuthenticationViewModel.UserName);
        request.AddParameter("password", AuthenticationViewModel.Pass);
        request.AddParameter("client_secret", "YourSecretinKeycloak");
        IRestResponse response = client.Execute(request);
        String content = response.Content;
        return content;
    }

    public List<String> GetRoles(String content)
    {
        JwtSecurityTokenHandler jwtHandler = new JwtSecurityTokenHandler();
        //string pattern = @"{\n.* ""(.*)"",";
        String pattern = @".*access_token\"":\""(.*)\"",\""expires.*";
        MatchCollection accessTokenMatch = Regex.Matches(content, pattern, RegexOptions.IgnoreCase);
        var group1 = (String)accessTokenMatch[0].Groups[1].ToString();
        JwtSecurityToken token = (JwtSecurityToken)jwtHandler.ReadToken((String)accessTokenMatch[0].Groups[1].ToString());

        Claim realmAccessClaim = token.Claims.First((claim) => claim.Type == "realm_access");
        Dictionary<string, string[]> realmAccessAsDict = JsonConvert.DeserializeObject<Dictionary<string, string[]>>(realmAccessClaim.Value);
        List<String> roles = realmAccessAsDict.FirstOrDefault().Value.ToList();
        return roles;
    }
[..]