在 Blazor server 项目中，
1、添加自定义 ApplicationUser 类，
public class ApplicationUser : IdentityUser
{
public string? CustomClaim { get; set; }
}
2、添加自定义 ApplicationDbContext 类
public class ApplicationDbContext : ApiAuthorizationDbContext<ApplicationUser>
{
public ApplicationDbContext(
DbContextOptions options,
IOptions<OperationalStoreOptions> operationalStoreOptions) : base(options, operationalStoreOptions)
{
}
}
3、添加自定义 AppClaimsPrincipalFactory 类
public class AppClaimsPrincipalFactory : UserClaimsPrincipalFactory<ApplicationUser, IdentityRole>
{
public AppClaimsPrincipalFactory(
UserManager<ApplicationUser> userManager
, RoleManager<IdentityRole> roleManager
, IOptions<IdentityOptions> optionsAccessor)
: base(userManager, roleManager, optionsAccessor)
{ }
protected override async Task<ClaimsIdentity> GenerateClaimsAsync(ApplicationUser user)
{
var identity = await base.GenerateClaimsAsync(user);
if (!string.IsNullOrWhiteSpace(user.CustomClaim))
{
identity.AddClaim(new Claim("custom_claim", user.CustomClaim));
}
return identity;
}
}
4、 在 Startup 的文件中，添加：
services.AddDefaultIdentity<ApplicationUser>(options => options.SignIn.RequireConfirmedAccount = false)
.AddRoles<IdentityRole>()
.AddEntityFrameworkStores<ApplicationDbContext>()
.AddClaimsPrincipalFactory<AppClaimsPrincipalFactory>();
services.AddIdentityServer()
.AddApiAuthorization<ApplicationUser, ApplicationDbContext>(options =>
{
options.IdentityResources["openid"].UserClaims.Add("role"); // Roles
options.ApiResources.Single().UserClaims.Add("role");
options.IdentityResources["openid"].UserClaims.Add("custom_claim"); // Custom Claim
options.ApiResources.Single().UserClaims.Add("custom_claim");
});
JwtSecurityTokenHandler.DefaultInboundClaimTypeMap.Remove("role");
services.AddAuthentication().AddIdentityServerJwt();
app.UseIdentityServer();
5、运行后，报错：
fail：Microsoft.AspNetCore.Diagnostics.DeveloperExceptionPageMiddleware[1]
An unhandled exception occurred while processing the request.
InvalidOperationException: No signing credential is configured by the 'IdentityServer:Key' configuration section.
Microsoft.Extensions.DependencyInjection.IdentityServerBuilderConfigurationExtensions+<>c.<AddSigningCredentials>b__10_2(IServiceProvider sp)
6、IdentityServer:Key 这个key，需要在哪里配置？验证文件(*.pfx)，要怎么创建？如果是部署在 IIS 中，要怎么存储 和 获取？
