Dotnetopenauth .NET Core（开发人员如何使用）

在 .NET 项目中设置 DotNetOpenAuth .NET Core

要开始在 Microsoft 技术支持的 .NET 项目中使用 DotNetOpenAuth .NET Core，请按照以下步骤操作：

1.在 Visual Studio 中打开您的项目。

2. 转到解决方案资源管理器。
3. 右键单击您的项目名称。
4. 选择 管理 NuGet 包。
5. 在 NuGet 包管理器中，搜索 DotNetOpenAuth.NetCore 和其他 NuGet 包。
6. 单击 安装 以将其添加到您的项目中。

这将向您的项目中添加 DotNetOpenAuth .NET Core 库，提供集成身份验证功能的支持。

使用 DotNetOpenAuth .NET Core 的基本代码示例

这是一个简单的示例，显示了如何使用 DotNetOpenAuth .NET Core 在您的应用程序中设置 OAuth2 身份验证：

using DotNetOpenAuth.OAuth2;

// Initialize the OAuth2 client with the authorization server details
var client = new WebServerClient(new AuthorizationServerDescription
{
    TokenEndpoint = new Uri("https://your-auth-server.com/token"),
    AuthorizationEndpoint = new Uri("https://your-auth-server.com/authorize")
}, "your-client-id", "your-client-secret");

// Start the authentication process and get the authorization state
IAuthorizationState state = client.ProcessUserAuthorization();
if (state != null && state.IsAuthorized)
{
    // Authorized successfully, now you can access protected resources
}

using DotNetOpenAuth.OAuth2;

// Initialize the OAuth2 client with the authorization server details
var client = new WebServerClient(new AuthorizationServerDescription
{
    TokenEndpoint = new Uri("https://your-auth-server.com/token"),
    AuthorizationEndpoint = new Uri("https://your-auth-server.com/authorize")
}, "your-client-id", "your-client-secret");

// Start the authentication process and get the authorization state
IAuthorizationState state = client.ProcessUserAuthorization();
if (state != null && state.IsAuthorized)
{
    // Authorized successfully, now you can access protected resources
}

此代码片段使用 DotNetOpenAuth .NET Core 设置 OAuth2 客户端，连接到授权服务器并处理用户授权。

集成 OpenID Connect

要使用 DotNetOpenAuth .NET Core 集成 OpenID Connect，您可以按照这种基本方法：

using DotNetOpenAuth.OAuth2;

// Configure the OpenID Connect client with authority details
var openIdClient = new WebServerClient(new AuthorizationServerDescription
{
    TokenEndpoint = new Uri("https://your-openid-provider.com/token"),
    AuthorizationEndpoint = new Uri("https://your-openid-provider.com/authorize")
}, "your-client-id");

// Redirect user for authentication
Uri authUri = openIdClient.GetAuthorizationRequestUri("openid email profile");
Response.Redirect(authUri.AbsoluteUri);

using DotNetOpenAuth.OAuth2;

// Configure the OpenID Connect client with authority details
var openIdClient = new WebServerClient(new AuthorizationServerDescription
{
    TokenEndpoint = new Uri("https://your-openid-provider.com/token"),
    AuthorizationEndpoint = new Uri("https://your-openid-provider.com/authorize")
}, "your-client-id");

// Redirect user for authentication
Uri authUri = openIdClient.GetAuthorizationRequestUri("openid email profile");
Response.Redirect(authUri.AbsoluteUri);

该代码配置了一个 OpenID Connect 客户端，并将用户重定向到 OpenID 提供者的身份验证页面。

处理访问令牌

以下是如何使用 DotNetOpenAuth .NET Core 处理访问令牌：

// After the user is authenticated, process the authorization response to retrieve the token
IAuthorizationState authState = openIdClient.ProcessUserAuthorization();
if (authState != null && authState.IsAuthorized)
{
    // Access token is available, and you can use it to make authenticated requests
    string accessToken = authState.AccessToken;
}

// After the user is authenticated, process the authorization response to retrieve the token
IAuthorizationState authState = openIdClient.ProcessUserAuthorization();
if (authState != null && authState.IsAuthorized)
{
    // Access token is available, and you can use it to make authenticated requests
    string accessToken = authState.AccessToken;
}

此代码片段处理用户授权响应以检索并使用访问令牌。

刷新令牌

要在令牌过期时刷新令牌，请使用以下代码：

// Check if the access token is expired and refresh it
if (authState.AccessTokenExpirationUtc <= DateTime.UtcNow)
{
    if (openIdClient.RefreshAuthorization(authState))
    {
        // Token refreshed successfully
    }
}

// Check if the access token is expired and refresh it
if (authState.AccessTokenExpirationUtc <= DateTime.UtcNow)
{
    if (openIdClient.RefreshAuthorization(authState))
    {
        // Token refreshed successfully
    }
}

此代码检查当前令牌是否已过期，并尝试刷新它。

撤销令牌

如果需要撤销令牌，请按照如下显示的方式实现：

// Revoke the access token
bool success = openIdClient.RevokeAuthorization(authState);
if (success)
{
    // Token revoked successfully
}

// Revoke the access token
bool success = openIdClient.RevokeAuthorization(authState);
if (success)
{
    // Token revoked successfully
}

此代码片段撤销了授权，有效地使访问令牌失效。

自定义令牌请求

要根据特定需求自定义令牌请求，例如添加额外的参数：

// Customize the token request with additional parameters
var additionalParams = new Dictionary<string, string>
{
    {"custom_parameter", "value"}
};
IAuthorizationState customizedState = openIdClient.ProcessUserAuthorization(additionalParams);
if (customizedState != null && customizedState.IsAuthorized)
{
    // Token request customized and processed successfully
}

// Customize the token request with additional parameters
var additionalParams = new Dictionary<string, string>
{
    {"custom_parameter", "value"}
};
IAuthorizationState customizedState = openIdClient.ProcessUserAuthorization(additionalParams);
if (customizedState != null && customizedState.IsAuthorized)
{
    // Token request customized and processed successfully
}

此代码向令牌请求中添加了自定义参数，这对于处理授权服务器的特定要求可能很有用。

将 IronPDF 与 DotNetOpenAuth .NET Core 合并的使用案例

将 IronPDF 与 DotNetOpenAuth .NET Core 合并的一个实际使用案例是在 Web 应用程序中，经过身份验证的用户需要生成和下载个性化报告。 例如，想象一个场景，用户登录到您的应用程序并以 PDF 形式访问他们的财务报告。 DotNetOpenAuth 确保用户被正确验证和授权以访问他们的文档，而 IronPDF 负责创建和传递这些个性化的 PDF。

用例的代码示例

让我们看看一个完整的代码示例，展示如何实现这一点。 我们将创建一个简单的 .NET Core Web API，它对用户进行身份验证，然后使用 IronPDF 生成 PDF 报告：

using IronPdf;
using Microsoft.AspNetCore.Mvc;
using Microsoft.AspNetCore.Authorization;

[Route("api/[controller]")]
[ApiController]
public class ReportController : ControllerBase
{
    [Authorize]
    [HttpGet("download-pdf")]
    public IActionResult DownloadPdfReport()
    {
        // Authentication is handled by DotNetOpenAuth .NET Core
        var currentUser = HttpContext.User.Identity.Name;

        // Generate PDF content using IronPDF
        var Renderer = new ChromePdfRenderer();
        var PDF = Renderer.RenderHtmlAsPdf($"<h1>Report for {currentUser}</h1><p>This is your personalized financial report.</p>");

        // Set file name and content type for the PDF
        var outputFileName = $"Report-{currentUser}.pdf";
        Response.Headers.Add("Content-Disposition", $"attachment; filename={outputFileName}");
        Response.ContentType = "application/pdf";

        // Return the generated PDF file
        return File(PDF.Stream.ToArray(), "application/pdf");
    }
}

using IronPdf;
using Microsoft.AspNetCore.Mvc;
using Microsoft.AspNetCore.Authorization;

[Route("api/[controller]")]
[ApiController]
public class ReportController : ControllerBase
{
    [Authorize]
    [HttpGet("download-pdf")]
    public IActionResult DownloadPdfReport()
    {
        // Authentication is handled by DotNetOpenAuth .NET Core
        var currentUser = HttpContext.User.Identity.Name;

        // Generate PDF content using IronPDF
        var Renderer = new ChromePdfRenderer();
        var PDF = Renderer.RenderHtmlAsPdf($"<h1>Report for {currentUser}</h1><p>This is your personalized financial report.</p>");

        // Set file name and content type for the PDF
        var outputFileName = $"Report-{currentUser}.pdf";
        Response.Headers.Add("Content-Disposition", $"attachment; filename={outputFileName}");
        Response.ContentType = "application/pdf";

        // Return the generated PDF file
        return File(PDF.Stream.ToArray(), "application/pdf");
    }
}

在此示例中，我们使用 [Authorize] 属性确保只有经过身份验证的用户才能访问 PDF 生成端点。 IronPDF 的 ChromePdfRenderer 类用于从 HTML 内容创建 PDF，在这种情况下，该内容根据用户的姓名进行动态个性化。