c# - Azure Function 2.x 如何访问 stable_sid？

Question

当我使用 v1 编写 Azure Function 代码时，我能够访问用户的 sid，如下所示:

public static bool TryGetUserId(out string userId)
{
    userId = string.Empty;

    IPrincipal currentPrincipal = ClaimsPrincipal.Current;

    if (currentPrincipal is null)
        return false;

    userId = currentPrincipal.GetNameIdentifier();

    return false == string.IsNullOrWhiteSpace(userId);
}

然后，我将 Azure Function 移至 v2 预览版，我读到 the ClaimsPrincipal were not hydrated anymore 。我最终使用了以下算法:

public static bool TryGetUserId(HttpRequestMessage request, out string userId)
{
    userId = string.Empty;

    KeyValuePair<string, IEnumerable<string>> principalId = request.Headers.FirstOrDefault(header => string.Equals(header.Key, "X-MS-CLIENT-PRINCIPAL-ID", StringComparison.InvariantCulture));

    if (principalId.Value.Count() != 1)
         return false;

    userId = principalId.Value.First();

    return false == string.IsNullOrWhiteSpace(userId);
}

这是我的 Azure 函数的示例:

[FunctionName("FindAccount")]
public static async Task<HttpResponseMessage> Run([HttpTrigger(AuthorizationLevel.Function, "get")] HttpRequestMessage request, ILogger logger)
{
    try
    {
        if (false == FunctionHelper.TryGetUserId(request, out userId))
            return new HttpResponseMessage(HttpStatusCode.Unauthorized);

        // Looks for an account matching the sid.
    }
    catch (AccountNotFoundException)
    {
        logger.LogInformation($"No account has been found for user.");

        return new HttpResponseMessage(HttpStatusCode.NoContent);
    }
}

它不再起作用，因为 header 不再是 sid，而是 long 或 int 值，无论我使用的是 Google 帐户还是 Microsoft 帐户。

设置

我有一个 iOS 应用程序，它将用户定向到 Google 或 Microsoft 进行身份验证，然后 iOS 应用程序连接特定端点上的 Azure Function(/.auth/login/microsoftaccount 或 /.auth/login/google) 来发布收到的 token ，如 Microsoft 的 documentation 中所述。 .

问题

Azure Function v2 如何访问用户的 sid？

Answer 1

尝试使用以下方法并遵循documentation 。这已经通过代码片段进行了详细讨论。

public static async Task<IActionResult>  Run(HttpRequest req, ILogger log, ClaimsPrincipal principal)
{
    log.LogInformation("C# HTTP trigger function processed a request."); 

    var isAuthenticated = principal.Identity.IsAuthenticated; 
    var idName = string.IsNullOrEmpty(principal.Identity.Name) ? "null" : principal.Identity.Name;
    log.LogInformation($"principal.Identity.IsAuthenticated = '{isAuthenticated}' and principal.Identity.Name = '{idName}'");
    var owner = (principal.FindFirst(ClaimTypes.NameIdentifier))?.Value;
    
    return new OkObjectResult($"principal.Identity.IsAuthenticated = '{isAuthenticated}' and principal.Identity.Name = '{idName}'");
    
}

private static string GetIdentityString(ClaimsIdentity identity)
{
    var userIdClaim = identity.FindFirst(ClaimTypes.NameIdentifier);
    if (userIdClaim != null)
    {
        // user identity
        var userNameClaim = identity.FindFirst(ClaimTypes.Name);
        return $"Identity: ({identity.AuthenticationType}, {userNameClaim?.Value}, {userIdClaim?.Value})";
    }
    else
    {
        // key based identity
        var authLevelClaim = identity.FindFirst("http://schemas.microsoft.com/2017/07/functions/claims/authlevel");
        var keyIdClaim = identity.FindFirst("http://schemas.microsoft.com/2017/07/functions/claims/keyid");
        return $"Identity: ({identity.AuthenticationType}, {authLevelClaim?.Value}, {keyIdClaim?.Value})";
    }
}