Dotnetopenauth .NET Core (How It Works For Developers)

在 .NET 專案中設定 DotNetOpenAuth .NET Core

若要在 Microsoft 技術支援的 .NET 專案中開始使用 DotNetOpenAuth .NET Core，請遵循下列步驟：

1.在 Visual Studio 中開啟您的專案。 2.前往解決方案總管。 3.在專案名稱上按一下滑鼠右鍵。 4.選擇 Manage NuGet Packages。 5.在 NuGet 套件管理員中，搜尋 DotNetOpenAuth.NetCore 及其他 NuGet 套件。 6.按一下 Install 將其新增至您的專案。

這將會在您的專案中加入 DotNetOpenAuth .NET Core 函式庫，提供整合驗證功能的支援。

使用 DotNetOpenAuth .NET Core 的基本程式碼範例

以下是一個簡單的範例，說明如何使用 DotNetOpenAuth .NET Core 在應用程式中設定 OAuth2 驗證：

using DotNetOpenAuth.OAuth2;

// Initialize the OAuth2 client with the authorization server details
var client = new WebServerClient(new AuthorizationServerDescription
{
    TokenEndpoint = new Uri("https://your-auth-server.com/token"),
    AuthorizationEndpoint = new Uri("https://your-auth-server.com/authorize")
}, "your-client-id", "your-client-secret");

// Start the authentication process and get the authorization state
IAuthorizationState state = client.ProcessUserAuthorization();
if (state != null && state.IsAuthorized)
{
    // Authorized successfully, now you can access protected resources
}

using DotNetOpenAuth.OAuth2;

// Initialize the OAuth2 client with the authorization server details
var client = new WebServerClient(new AuthorizationServerDescription
{
    TokenEndpoint = new Uri("https://your-auth-server.com/token"),
    AuthorizationEndpoint = new Uri("https://your-auth-server.com/authorize")
}, "your-client-id", "your-client-secret");

// Start the authentication process and get the authorization state
IAuthorizationState state = client.ProcessUserAuthorization();
if (state != null && state.IsAuthorized)
{
    // Authorized successfully, now you can access protected resources
}

此程式碼片段使用 DotNetOpenAuth .NET Core 設定 OAuth2 用戶端，連接到授權伺服器，並處理使用者授權。

整合 OpenID Connect

要使用 DotNetOpenAuth .NET Core 整合 OpenID Connect，您可以遵循以下基本方法：

using DotNetOpenAuth.OAuth2;

// Configure the OpenID Connect client with authority details
var openIdClient = new WebServerClient(new AuthorizationServerDescription
{
    TokenEndpoint = new Uri("https://your-openid-provider.com/token"),
    AuthorizationEndpoint = new Uri("https://your-openid-provider.com/authorize")
}, "your-client-id");

// Redirect user for authentication
Uri authUri = openIdClient.GetAuthorizationRequestUri("openid email profile");
Response.Redirect(authUri.AbsoluteUri);

using DotNetOpenAuth.OAuth2;

// Configure the OpenID Connect client with authority details
var openIdClient = new WebServerClient(new AuthorizationServerDescription
{
    TokenEndpoint = new Uri("https://your-openid-provider.com/token"),
    AuthorizationEndpoint = new Uri("https://your-openid-provider.com/authorize")
}, "your-client-id");

// Redirect user for authentication
Uri authUri = openIdClient.GetAuthorizationRequestUri("openid email profile");
Response.Redirect(authUri.AbsoluteUri);

此程式碼會設定 OpenID Connect 客戶端，並將使用者重定向至 OpenID 提供者的驗證頁面。

處理存取代號

以下是如何使用 DotNetOpenAuth .NET Core 處理存取權標：

// After the user is authenticated, process the authorization response to retrieve the token
IAuthorizationState authState = openIdClient.ProcessUserAuthorization();
if (authState != null && authState.IsAuthorized)
{
    // Access token is available, and you can use it to make authenticated requests
    string accessToken = authState.AccessToken;
}

// After the user is authenticated, process the authorization response to retrieve the token
IAuthorizationState authState = openIdClient.ProcessUserAuthorization();
if (authState != null && authState.IsAuthorized)
{
    // Access token is available, and you can use it to make authenticated requests
    string accessToken = authState.AccessToken;
}

此片段會處理使用者授權回應，以擷取並使用存取標記。

刷新代幣

若要在代幣過期時刷新代幣，請使用下列程式碼：

// Check if the access token is expired and refresh it
if (authState.AccessTokenExpirationUtc <= DateTime.UtcNow)
{
    if (openIdClient.RefreshAuthorization(authState))
    {
        // Token refreshed successfully
    }
}

// Check if the access token is expired and refresh it
if (authState.AccessTokenExpirationUtc <= DateTime.UtcNow)
{
    if (openIdClient.RefreshAuthorization(authState))
    {
        // Token refreshed successfully
    }
}

此程式碼會檢查目前的標記是否已過期，並嘗試刷新它。

撤銷代幣

如果您需要撤銷代號，請如下所示執行：

// Revoke the access token
bool success = openIdClient.RevokeAuthorization(authState);
if (success)
{
    // Token revoked successfully
}

// Revoke the access token
bool success = openIdClient.RevokeAuthorization(authState);
if (success)
{
    // Token revoked successfully
}

此片段撤銷授權，有效地使存取標記失效。

自訂令牌請求

針對特定需求客製化令牌請求，例如新增額外參數：

// Customize the token request with additional parameters
var additionalParams = new Dictionary<string, string>
{
    {"custom_parameter", "value"}
};
IAuthorizationState customizedState = openIdClient.ProcessUserAuthorization(additionalParams);
if (customizedState != null && customizedState.IsAuthorized)
{
    // Token request customized and processed successfully
}

// Customize the token request with additional parameters
var additionalParams = new Dictionary<string, string>
{
    {"custom_parameter", "value"}
};
IAuthorizationState customizedState = openIdClient.ProcessUserAuthorization(additionalParams);
if (customizedState != null && customizedState.IsAuthorized)
{
    // Token request customized and processed successfully
}

此代碼會在令牌請求中加入自訂參數，有助於處理授權伺服器的特定需求。

將 IronPDF 與 DotNetOpenAuth .NET Core 合併的使用案例

將 IronPDF 與 DotNetOpenAuth .NET Core 合併的一個實際用例是在一個 Web 應用程式中，經過驗證的使用者需要產生並下載個人化的報告。 例如，假設使用者登入您的應用程式，並以 PDF 格式存取財務報告。 DotNetOpenAuth 可確保使用者經過正確的驗證與授權，才能存取他們的文件，而 IronPDF 則負責這些個人化 PDF 的建立與傳送。

使用個案的程式碼範例

讓我們來看看一個完整的程式碼範例，看看如何實作。 我們將在 .NET Core 中建立一個簡單的 Web API，驗證使用者身份，然後用 IronPDF for .NET 產生 PDF 報告：

using IronPdf;
using Microsoft.AspNetCore.Mvc;
using Microsoft.AspNetCore.Authorization;

[Route("api/[controller]")]
[ApiController]
public class ReportController : ControllerBase
{
    [Authorize]
    [HttpGet("download-pdf")]
    public IActionResult DownloadPdfReport()
    {
        // Authentication is handled by DotNetOpenAuth .NET Core
        var currentUser = HttpContext.User.Identity.Name;

        // Generate PDF content using IronPDF
        var Renderer = new ChromePdfRenderer();
        var PDF = Renderer.RenderHtmlAsPdf($"<h1>Report for {currentUser}</h1><p>This is your personalized financial report.</p>");

        // Set file name and content type for the PDF
        var outputFileName = $"Report-{currentUser}.pdf";
        Response.Headers.Add("Content-Disposition", $"attachment; filename={outputFileName}");
        Response.ContentType = "application/pdf";

        // Return the generated PDF file
        return File(PDF.Stream.ToArray(), "application/pdf");
    }
}

using IronPdf;
using Microsoft.AspNetCore.Mvc;
using Microsoft.AspNetCore.Authorization;

[Route("api/[controller]")]
[ApiController]
public class ReportController : ControllerBase
{
    [Authorize]
    [HttpGet("download-pdf")]
    public IActionResult DownloadPdfReport()
    {
        // Authentication is handled by DotNetOpenAuth .NET Core
        var currentUser = HttpContext.User.Identity.Name;

        // Generate PDF content using IronPDF
        var Renderer = new ChromePdfRenderer();
        var PDF = Renderer.RenderHtmlAsPdf($"<h1>Report for {currentUser}</h1><p>This is your personalized financial report.</p>");

        // Set file name and content type for the PDF
        var outputFileName = $"Report-{currentUser}.pdf";
        Response.Headers.Add("Content-Disposition", $"attachment; filename={outputFileName}");
        Response.ContentType = "application/pdf";

        // Return the generated PDF file
        return File(PDF.Stream.ToArray(), "application/pdf");
    }
}

在這個範例中，我們使用 [Authorize] 屬性來確保只有經過認證的使用者才能存取 PDF 產生端點。 IronPDF 中的 ChromePdfRenderer 類用於從 HTML 內容建立 PDF，在本例中，會動態個人化使用者的姓名。