c# - 身份服务器 4 : How so you include additional claims and get the value in an API controller?

Question

如何在声明中包含电子邮件并通过 API Controller 获取电子邮件值？

IdentityServer4 示例:https://github.com/IdentityServer/IdentityServer4.Samples/tree/release/Quickstarts/8_EntityFrameworkStorage

API 身份 Controller https://github.com/IdentityServer/IdentityServer4.Samples/blob/release/Quickstarts/8_EntityFrameworkStorage/src/Api/Controllers/IdentityController.cs

测试用户 https://github.com/IdentityServer/IdentityServer4.Samples/blob/release/Quickstarts/8_EntityFrameworkStorage/src/QuickstartIdentityServer/Quickstart/TestUsers.cs

Answer 1

当您定义一个 api 资源(查看 Config.cs)时，您可以这样做:

new ApiResource
{
    Name = "api",
    DisplayName = "My API",

    UserClaims =
    {
        JwtClaimTypes.Id,
        JwtClaimTypes.Subject,
        JwtClaimTypes.Email
    }
}

它定义您的 API 将接收这些声明。

编辑:

最好将关联资源添加到 GetIdentityResources 函数(请参阅 Config.cs)

浏览一下官方文档以获得更好的图片 http://docs.identityserver.io/en/release/topics/resources.html .

我给你一个来自个人项目的完整例子:

    public static IEnumerable<IdentityResource> GetIdentityResources()
    {
        //>Declaration
        var lIdentityResources = new List<IdentityResource>
        {
            new IdentityResources.OpenId(),
            new IdentityResources.Profile(),
            new IdentityResources.Email()
        };

        //>Processing
        foreach (var lAPIResource in GetApiResources())
        {
            lIdentityResources.Add(new IdentityResource(lAPIResource.Name,
                                                        lAPIResource.UserClaims));
        }

        //>Return
        return lIdentityResources;
    }

    public static IEnumerable<ApiResource> GetApiResources()
    {
        return new List<ApiResource>
        {
            new ApiResource
            {
                Name = "api1",
                DisplayName = "api1 API",

                UserClaims =
                {
                    JwtClaimTypes.Id,
                    JwtClaimTypes.Subject,
                    JwtClaimTypes.Email
                }
            }
        };
    }