IdentityServer4 学习笔记（一）客户端模式

   public class Config
    {
        //定义身份资源
        public static IEnumerable<IdentityResource> GetIdentityResources()
        {
            return new List<IdentityResource>() {
            new IdentityResources.OpenId(),
            new IdentityResources.Profile(),
            };
        }

        //定义Api资源

        public static IEnumerable<ApiResource>GetApiResources()
        {
            return new List<ApiResource>
            {
                new ApiResource("api1","测试Api") //定义Api站点的name和显示名称，这个name必须唯一，作为站点资源识别，在Api站点上也需要指定这个name，必须相等，表示请求这个Api站点
            };
        }

        //定义客户端授权类型

        public static IEnumerable<Client> GetClients()
        {
            return new List<Client> {
                //第一个，客户端模式Client Credentials
                new Client{ 
                       ClientId="CredentialsClient", //客户端Id，必须且唯一
                       AllowedGrantTypes=GrantTypes.ClientCredentials, //指定为客户端授权模式
                       ClientSecrets={ 
                    new Secret("111111".Sha256()) //自定义密码，客户端请求时，密码传参数，必须与这个密码一致
                    },
                       AllowedScopes={ "api1"}//设置允许授权请求的范围，表示这个客户端Id可请求的资源范围，若不在范围内，请求会被拒绝。
                },
            };
        }



    }

    public class Startup
    {
        public Startup(IConfiguration configuration)
        {
            Configuration = configuration;
        }

        public IConfiguration Configuration { get; }

        // This method gets called by the runtime. Use this method to add services to the container.
        public void ConfigureServices(IServiceCollection services)
        {
            services.Configure<CookiePolicyOptions>(options =>
            {
                // This lambda determines whether user consent for non-essential cookies is needed for a given request.
                options.CheckConsentNeeded = context => true;
                options.MinimumSameSitePolicy = SameSiteMode.None;
            });

            //配置IdentityServer4服务
            services.AddIdentityServer()
                .AddDeveloperSigningCredential() //客户端授权时，必须增加这行，不然客户端会出现keyset missing的错误
                    .AddInMemoryApiResources(Config.GetApiResources())
                    .AddInMemoryIdentityResources(Config.GetIdentityResources())
                    .AddInMemoryClients(Config.GetClients())
                    ;
                



            services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_2);
        }

        // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
        public void Configure(IApplicationBuilder app, IHostingEnvironment env)
        {
            if (env.IsDevelopment())
            {
                app.UseDeveloperExceptionPage();
            }
            else
            {
                app.UseExceptionHandler("/Home/Error");
                // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
                app.UseHsts();
            }

            app.UseHttpsRedirection();
            app.UseStaticFiles();
            app.UseCookiePolicy();
            //使用IdS中间件
            app.UseIdentityServer();

            app.UseMvc(routes =>
            {
                routes.MapRoute(
                    name: "default",
                    template: "{controller=Home}/{action=Index}/{id?}");
            });
        }
    }

//配置IdentityServer4服务
            services.AddIdentityServer()
                .AddDeveloperSigningCredential() //客户端授权时，必须增加这行，不然客户端会出现keyset missing的错误
                    .AddInMemoryApiResources(Config.GetApiResources()) //加载定义的Api资源
                    .AddInMemoryIdentityResources(Config.GetIdentityResources())//加载定义的身份资源
                    .AddInMemoryClients(Config.GetClients())//加载定义的客户端
                    ;

   //使用IdS中间件
            app.UseIdentityServer();