Dotnetopenauth .NET Core（對於開發者的運行原理）

在.NET專案中設置DotNetOpenAuth .NET Core

要在您的.NET專案中開始使用DotNetOpenAuth .NET Core，透過微軟技術支持，請按以下步驟進行：

1. 在Visual Studio中打開您的專案。
2. 轉到解決方案總管。
3. 右鍵點擊您的專案名稱。
4. 選擇Manage NuGet Packages。
5. 在NuGet Package Manager中，搜尋DotNetOpenAuth.NetCore和其他NuGet套件。
6. 點擊Install將其添加到您的專案中。

這將把DotNetOpenAuth .NET Core程式庫添加到您的專案中，提供集成驗證功能的支持。

使用DotNetOpenAuth .NET Core的基本代碼示例

這是一個簡單的示例，展示如何使用DotNetOpenAuth .NET Core在您的應用程式中設置OAuth2驗證：

using DotNetOpenAuth.OAuth2;

// Initialize the OAuth2 client with the authorization server details
var client = new WebServerClient(new AuthorizationServerDescription
{
    TokenEndpoint = new Uri("https://your-auth-server.com/token"),
    AuthorizationEndpoint = new Uri("https://your-auth-server.com/authorize")
}, "your-client-id", "your-client-secret");

// Start the authentication process and get the authorization state
IAuthorizationState state = client.ProcessUserAuthorization();
if (state != null && state.IsAuthorized)
{
    // Authorized successfully, now you can access protected resources
}

using DotNetOpenAuth.OAuth2;

// Initialize the OAuth2 client with the authorization server details
var client = new WebServerClient(new AuthorizationServerDescription
{
    TokenEndpoint = new Uri("https://your-auth-server.com/token"),
    AuthorizationEndpoint = new Uri("https://your-auth-server.com/authorize")
}, "your-client-id", "your-client-secret");

// Start the authentication process and get the authorization state
IAuthorizationState state = client.ProcessUserAuthorization();
if (state != null && state.IsAuthorized)
{
    // Authorized successfully, now you can access protected resources
}

此代碼片段使用DotNetOpenAuth .NET Core設置OAuth2客戶端，連接到授權伺服器，並處理使用者授權。

集成OpenID Connect

要使用DotNetOpenAuth .NET Core集成OpenID Connect，您可以遵循此基本方法：

using DotNetOpenAuth.OAuth2;

// Configure the OpenID Connect client with authority details
var openIdClient = new WebServerClient(new AuthorizationServerDescription
{
    TokenEndpoint = new Uri("https://your-openid-provider.com/token"),
    AuthorizationEndpoint = new Uri("https://your-openid-provider.com/authorize")
}, "your-client-id");

// Redirect user for authentication
Uri authUri = openIdClient.GetAuthorizationRequestUri("openid email profile");
Response.Redirect(authUri.AbsoluteUri);

using DotNetOpenAuth.OAuth2;

// Configure the OpenID Connect client with authority details
var openIdClient = new WebServerClient(new AuthorizationServerDescription
{
    TokenEndpoint = new Uri("https://your-openid-provider.com/token"),
    AuthorizationEndpoint = new Uri("https://your-openid-provider.com/authorize")
}, "your-client-id");

// Redirect user for authentication
Uri authUri = openIdClient.GetAuthorizationRequestUri("openid email profile");
Response.Redirect(authUri.AbsoluteUri);

此代碼配置一個OpenID Connect客戶端，並將用戶重定向到OpenID提供商的驗證頁面。

處理訪問令牌

以下是您可以使用DotNetOpenAuth .NET Core處理訪問令牌的方法：

// After the user is authenticated, process the authorization response to retrieve the token
IAuthorizationState authState = openIdClient.ProcessUserAuthorization();
if (authState != null && authState.IsAuthorized)
{
    // Access token is available, and you can use it to make authenticated requests
    string accessToken = authState.AccessToken;
}

// After the user is authenticated, process the authorization response to retrieve the token
IAuthorizationState authState = openIdClient.ProcessUserAuthorization();
if (authState != null && authState.IsAuthorized)
{
    // Access token is available, and you can use it to make authenticated requests
    string accessToken = authState.AccessToken;
}

此片段處理使用者授權響應以檢索和使用訪問令牌。

刷新令牌

要在令牌過期時刷新令牌，請使用以下代碼：

// Check if the access token is expired and refresh it
if (authState.AccessTokenExpirationUtc <= DateTime.UtcNow)
{
    if (openIdClient.RefreshAuthorization(authState))
    {
        // Token refreshed successfully
    }
}

// Check if the access token is expired and refresh it
if (authState.AccessTokenExpirationUtc <= DateTime.UtcNow)
{
    if (openIdClient.RefreshAuthorization(authState))
    {
        // Token refreshed successfully
    }
}

此代碼檢查當前令牌是否已過期並嘗試刷新它。

撤銷令牌

如果您需要撤銷令牌，請按如下所示實現：

// Revoke the access token
bool success = openIdClient.RevokeAuthorization(authState);
if (success)
{
    // Token revoked successfully
}

// Revoke the access token
bool success = openIdClient.RevokeAuthorization(authState);
if (success)
{
    // Token revoked successfully
}

此片段撤銷授權，有效地使訪問令牌失效。

自訂令牌請求

要針對特定需求定製令牌請求，例如添加額外參數：

// Customize the token request with additional parameters
var additionalParams = new Dictionary<string, string>
{
    {"custom_parameter", "value"}
};
IAuthorizationState customizedState = openIdClient.ProcessUserAuthorization(additionalParams);
if (customizedState != null && customizedState.IsAuthorized)
{
    // Token request customized and processed successfully
}

// Customize the token request with additional parameters
var additionalParams = new Dictionary<string, string>
{
    {"custom_parameter", "value"}
};
IAuthorizationState customizedState = openIdClient.ProcessUserAuthorization(additionalParams);
if (customizedState != null && customizedState.IsAuthorized)
{
    // Token request customized and processed successfully
}

此代碼向令牌請求添加自訂參數，這對於處理特定授權伺服器的需求非常有用。

將IronPDF與DotNetOpenAuth .NET Core合併的使用案例

IronPDF與DotNetOpenAuth .NET Core合併實際用例是在網頁應用中，已驗證用戶需要生成和下載個人化報告。 例如，假設使用者登入您的應用程式並以PDF格式存取他們的財務報告。 DotNetOpenAuth確保使用者獲得適當的驗證和授權來訪問他們的文件，而IronPDF負責創建和傳送這些個性化的PDF。

用例的代碼範例

接下來讓我們看看一個完整的代碼示例，展示如何實現這一點。 我們將在.NET Core中創建一個簡單的Web API，認證用戶並使用IronPDF生成PDF報告：

using IronPdf;
using Microsoft.AspNetCore.Mvc;
using Microsoft.AspNetCore.Authorization;

[Route("api/[controller]")]
[ApiController]
public class ReportController : ControllerBase
{
    [Authorize]
    [HttpGet("download-pdf")]
    public IActionResult DownloadPdfReport()
    {
        // Authentication is handled by DotNetOpenAuth .NET Core
        var currentUser = HttpContext.User.Identity.Name;

        // Generate PDF content using IronPDF
        var Renderer = new ChromePdfRenderer();
        var PDF = Renderer.RenderHtmlAsPdf($"<h1>Report for {currentUser}</h1><p>This is your personalized financial report.</p>");

        // Set file name and content type for the PDF
        var outputFileName = $"Report-{currentUser}.pdf";
        Response.Headers.Add("Content-Disposition", $"attachment; filename={outputFileName}");
        Response.ContentType = "application/pdf";

        // Return the generated PDF file
        return File(PDF.Stream.ToArray(), "application/pdf");
    }
}

using IronPdf;
using Microsoft.AspNetCore.Mvc;
using Microsoft.AspNetCore.Authorization;

[Route("api/[controller]")]
[ApiController]
public class ReportController : ControllerBase
{
    [Authorize]
    [HttpGet("download-pdf")]
    public IActionResult DownloadPdfReport()
    {
        // Authentication is handled by DotNetOpenAuth .NET Core
        var currentUser = HttpContext.User.Identity.Name;

        // Generate PDF content using IronPDF
        var Renderer = new ChromePdfRenderer();
        var PDF = Renderer.RenderHtmlAsPdf($"<h1>Report for {currentUser}</h1><p>This is your personalized financial report.</p>");

        // Set file name and content type for the PDF
        var outputFileName = $"Report-{currentUser}.pdf";
        Response.Headers.Add("Content-Disposition", $"attachment; filename={outputFileName}");
        Response.ContentType = "application/pdf";

        // Return the generated PDF file
        return File(PDF.Stream.ToArray(), "application/pdf");
    }
}

在這個示例中，我們使用[Authorize]屬性來確保只有已驗證的使用者可以訪問PDF生成端點。 IronPDF中的ChromePdfRenderer類用於從HTML內容中創建PDF，在這種情況下，是動態個性化的用戶姓名。