c# - Xamarin.Forms webview 身份验证，导航到新页面(Shell)并需要再次重新身份验证？

Question

我在 Shell Xamarin.Forms 应用程序中有一个 webview。我请求一个安全页面并被转发到我公司的 SSO(单点登录)，我通过了它并且可以看到安全内容。

网页 View :

<WebView x:Name="web1" HorizontalOptions="CenterAndExpand"
                 VerticalOptions="FillAndExpand" HeightRequest="1000" WidthRequest="1000"/>

当我从主菜单导航到一个新的 Shell 页面或通过点击 ListView 中的一个项目(想想 RSS 标题列表，点击阅读文章)时，它在 xaml 页面上具有几乎相同的 WebView 标签，将源设置为安全页面构造函数上的页面或覆盖 OnAppearing，期望 session /cookie 仍然处于事件状态，我会再次转发到登录页面。

有没有办法让任何人都知道我可以确保我的应用程序(iOS 和 Android)中的所有 webview 都使用相同的 session ，因此用户只需登录一次。

我尝试在 app.xaml.cs 文件中创建一个 webview 并使用 Content.Children.Add(App.Web1) 将其添加到我的页面中在我看来，这应该意味着我在所有页面上使用相同的 webview，因此使用相同的 session !？但这似乎也不起作用。

非常感谢任何和所有帮助。

谢谢你。

Answer 1

使用cookieJs配合普通的cookie插入方式可以解决前端设置cookie的问题:

CookieJ:

!function(e){var n;if("function"==typeof define&&define.amd&&(define(e),n=!0),"object"==typeof exports&&(module.exports=e(),n=!0),!n){var t=window.Cookies,o=window.Cookies=e();o.noConflict=function(){return window.Cookies=t,o}}}(function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var o in t)n[o]=t[o]}return n}function n(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function t(o){function r(){}function i(n,t,i){if("undefined"!=typeof document){"number"==typeof(i=e({path:"/"},r.defaults,i)).expires&&(i.expires=new Date(1*new Date+864e5*i.expires)),i.expires=i.expires?i.expires.toUTCString():"";try{var c=JSON.stringify(t);/^[{[]/.test(c)&&(t=c)}catch(e){}t=o.write?o.write(t,n):encodeURIComponent(String(t)).replace(/%(23|24|26|2B|3A|3C|3E|3D|2F|3F|40|5B|5D|5E|60|7B|7D|7C)/g,decodeURIComponent),n=encodeURIComponent(String(n)).replace(/%(23|24|26|2B|5E|60|7C)/g,decodeURIComponent).replace(/[()]/g,escape);var f="";for(var u in i)i[u]&&(f+="; "+u,!0!==i[u]&&(f+="="+i[u].split(";")[0]));return document.cookie=n+"="+t+f}}function c(e,t){if("undefined"!=typeof document){for(var r={},i=document.cookie?document.cookie.split("; "):[],c=0;c<i.length;c++){var f=i[c].split("="),u=f.slice(1).join("=");t||'"'!==u.charAt(0)||(u=u.slice(1,-1));try{var a=n(f[0]);if(u=(o.read||o)(u,a)||n(u),t)try{u=JSON.parse(u)}catch(e){}if(r[a]=u,e===a)break}catch(e){}}return e?r[e]:r}}return r.set=i,r.get=function(e){return c(e,!1)},r.getJSON=function(e){return c(e,!0)},r.remove=function(n,t){i(n,"",e(t,{expires:-1}))},r.defaults={},r.withConverter=t,r}(function(){})});

样本:

iOS渲染器:

public class DefaultWebViewRenderer : ViewRenderer<CustomWebView, WKWebView>, IWKScriptMessageHandler, IWKNavigationDelegate
    {
        const string JavaScriptFunction = "function invokeCSharpAction(data){window.webkit.messageHandlers.invokeAction.postMessage(data);}";        
        const string cookieJs = "!function(e){var n;if(\"function\"==typeof define&&define.amd&&(define(e),n=!0),\"object\"==typeof exports&&(module.exports=e(),n=!0),!n){var t=window.Cookies,o=window.Cookies=e();o.noConflict=function(){return window.Cookies=t,o}}}(function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var o in t)n[o]=t[o]}return n}function n(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function t(o){function r(){}function i(n,t,i){if(\"undefined\"!=typeof document){\"number\"==typeof(i=e({path:\"/\"},r.defaults,i)).expires&&(i.expires=new Date(1*new Date+864e5*i.expires)),i.expires=i.expires?i.expires.toUTCString():\"\";try{var c=JSON.stringify(t);/^[\\{\\[]/.test(c)&&(t=c)}catch(e){}t=o.write?o.write(t,n):encodeURIComponent(String(t)).replace(/%(23|24|26|2B|3A|3C|3E|3D|2F|3F|40|5B|5D|5E|60|7B|7D|7C)/g,decodeURIComponent),n=encodeURIComponent(String(n)).replace(/%(23|24|26|2B|5E|60|7C)/g,decodeURIComponent).replace(/[\\(\\)]/g,escape);var f=\"\";for(var u in i)i[u]&&(f+=\"; \"+u,!0!==i[u]&&(f+=\"=\"+i[u].split(\";\")[0]));return document.cookie=n+\"=\"+t+f}}function c(e,t){if(\"undefined\"!=typeof document){for(var r={},i=document.cookie?document.cookie.split(\"; \"):[],c=0;c<i.length;c++){var f=i[c].split(\"=\"),u=f.slice(1).join(\"=\");t||'\"'!==u.charAt(0)||(u=u.slice(1,-1));try{var a=n(f[0]);if(u=(o.read||o)(u,a)||n(u),t)try{u=JSON.parse(u)}catch(e){}if(r[a]=u,e===a)break}catch(e){}}return e?r[e]:r}}return r.set=i,r.get=function(e){return c(e,!1)},r.getJSON=function(e){return c(e,!0)},r.remove=function(n,t){i(n,\"\",e(t,{expires:-1}))},r.defaults={},r.withConverter=t,r}(function(){})});";
        WKUserContentController userController;
        public DefaultWebViewRenderer()
        {

        }
        protected override void OnElementChanged(ElementChangedEventArgs<CustomWebView> e)
        {
            base.OnElementChanged(e);
            if (Control == null && e.OldElement == null)
            {
                userController = new WKUserContentController();
                var cookieValue = string.Empty; //Whatever you want
                var jsScript = new WKUserScript(new NSString(cookieJs), WKUserScriptInjectionTime.AtDocumentStart, false);
                var yourCookie = new WKUserScript(new NSString("Cookies.set('CookieKey','" + cookieValue + "',{expires : 30, domain : '.yourdomain.com' })"), WKUserScriptInjectionTime.AtDocumentStart, false);                  
                userController.AddUserScript(jsScript);
                userController.AddUserScript(yourCookie);                    
                var script = new WKUserScript(new NSString(JavaScriptFunction), WKUserScriptInjectionTime.AtDocumentEnd, false);
                userController.AddUserScript(script);
                userController.AddScriptMessageHandler(this, "invokeAction");
                var config = new WKWebViewConfiguration { UserContentController = userController };
                var webView = new WKWebView(Frame, config);

                SetNativeControl(webView);
            }
            if (e.OldElement != null)
            {
                userController.RemoveAllUserScripts();
                userController.RemoveScriptMessageHandler("invokeAction");
            }
            if (e.NewElement != null)
            {
                if (Element.Source is UrlWebViewSource urlSource)
                {
                    var url = new NSUrl(urlSource.Url);
                    var storage = NSHttpCookieStorage.SharedStorage;
                    storage.AcceptPolicy = NSHttpCookieAcceptPolicy.Always;
                    var request = new NSMutableUrlRequest(url);
                    Control.LoadRequest(request);
                }
                else if (Element.Source is HtmlWebViewSource htmlSource)
                {
                    Control.LoadHtmlString(htmlSource.Html, null);
                }
            }
        }

        public void DidReceiveScriptMessage(WKUserContentController userContentController, WKScriptMessage message)
        {
            Element.JavascriptBridgeInvoked(message.Body.ToString());
        }
    }

安卓渲染器:

public class DefaultWebViewRenderer : WebViewRenderer
{
    const string JavaScriptFunction = "function invokeCSharpAction(data){jsBridge.invokeAction(data);}";
    public DefaultWebViewRenderer(Context context) : base(context)
    {
    }
    protected override void OnElementChanged(ElementChangedEventArgs<Xamarin.Forms.WebView> e)
    {
        base.OnElementChanged(e);
        if (Control != null && e.NewElement is CustomWebView webView)
        {
            Control.SetWebViewClient(new WebViewTestClient());
            Control.ClearSslPreferences();
            Control.Settings.SetAppCacheEnabled(false); 
            Control.Settings.DatabaseEnabled = true;
            Control.Settings.DomStorageEnabled = true;
            Control.Settings.AllowFileAccessFromFileURLs = true;
            Control.Settings.AllowUniversalAccessFromFileURLs = true;
            Control.Settings.CacheMode = Android.Webkit.CacheModes.NoCache;                
            Control.Settings.AllowContentAccess = true;
            Control.Settings.AllowFileAccess = true;
            Control.Settings.JavaScriptEnabled = true;
            Control.Settings.JavaScriptCanOpenWindowsAutomatically = true;
            var cookieManager = CookieManager.Instance;
            cookieManager.SetAcceptCookie(true);
            cookieManager.SetAcceptThirdPartyCookies(Control, true);
            try
            {
                Control.SetDownloadListener(new DownloadListener());
            }
            catch (Exception ex)
            {
                Console.WriteLine(ex);
            }
            if (e.OldElement != null)
            {
                Control.RemoveJavascriptInterface("jsBridge");
            }
            Control.AddJavascriptInterface(new JSBridge(this), "jsBridge");
            InjectJS(JavaScriptFunction);
            if (webView.Source is UrlWebViewSource webSource)
            {
                Control.LoadUrl(webSource.Url);
            }
        }
    }

    private void InjectJS(string script)
    {
        if (Control != null)
        {
            Control.LoadUrl(string.Format("javascript: {0}", script));
        }
    }
}
public class WebViewTestClient : WebViewClient
{
    public override void OnPageStarted(Android.Webkit.WebView view, string url, Bitmap favicon)
    {
         var cookieJs = "!function(e){var n;if(\"function\"==typeof define&&define.amd&&(define(e),n=!0),\"object\"==typeof exports&&(module.exports=e(),n=!0),!n){var t=window.Cookies,o=window.Cookies=e();o.noConflict=function(){return window.Cookies=t,o}}}(function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var o in t)n[o]=t[o]}return n}function n(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function t(o){function r(){}function i(n,t,i){if(\"undefined\"!=typeof document){\"number\"==typeof(i=e({path:\"/\"},r.defaults,i)).expires&&(i.expires=new Date(1*new Date+864e5*i.expires)),i.expires=i.expires?i.expires.toUTCString():\"\";try{var c=JSON.stringify(t);/^[\\{\\[]/.test(c)&&(t=c)}catch(e){}t=o.write?o.write(t,n):encodeURIComponent(String(t)).replace(/%(23|24|26|2B|3A|3C|3E|3D|2F|3F|40|5B|5D|5E|60|7B|7D|7C)/g,decodeURIComponent),n=encodeURIComponent(String(n)).replace(/%(23|24|26|2B|5E|60|7C)/g,decodeURIComponent).replace(/[\\(\\)]/g,escape);var f=\"\";for(var u in i)i[u]&&(f+=\"; \"+u,!0!==i[u]&&(f+=\"=\"+i[u].split(\";\")[0]));return document.cookie=n+\"=\"+t+f}}function c(e,t){if(\"undefined\"!=typeof document){for(var r={},i=document.cookie?document.cookie.split(\"; \"):[],c=0;c<i.length;c++){var f=i[c].split(\"=\"),u=f.slice(1).join(\"=\");t||'\"'!==u.charAt(0)||(u=u.slice(1,-1));try{var a=n(f[0]);if(u=(o.read||o)(u,a)||n(u),t)try{u=JSON.parse(u)}catch(e){}if(r[a]=u,e===a)break}catch(e){}}return e?r[e]:r}}return r.set=i,r.get=function(e){return c(e,!1)},r.getJSON=function(e){return c(e,!0)},r.remove=function(n,t){i(n,\"\",e(t,{expires:-1}))},r.defaults={},r.withConverter=t,r}(function(){})});";
        var cookieValue = string.Empty; //Whatever you want
        view.EvaluateJavascript(cookieJs, null);
        view.EvaluateJavascript("Cookies.set('CookieKey','" + cookieValue + "',{expires : 30, domain : '.yourdomain.com' })", null);
        base.OnPageStarted(view, url, favicon);
        view.ClearCache(true);
    }
    public override void OnPageFinished(Android.Webkit.WebView view, string url)
    {
        base.OnPageFinished(view, url);
        view.ClearCache(true);
    }
    public override void OnReceivedSslError(Android.Webkit.WebView view, SslErrorHandler handler, SslError error)
    {
        handler.Proceed();
        base.OnReceivedSslError(view, handler, error);
    }
}
public class DownloadListener : Java.Lang.Object, Android.Webkit.IDownloadListener
{
    public DownloadListener()
    {
    }
    public void OnDownloadStart(string url, string userAgent, string contentDisposition, string mimetype, long contentLength)
    {
        if (string.IsNullOrEmpty(url) || !Uri.TryCreate(url, UriKind.RelativeOrAbsolute, out _))
            return;
        try
        {
            if (HasPermissions())
            {
                Android.Net.Uri contentUri = Android.Net.Uri.Parse(url);
                DownloadManager.Request request = new DownloadManager.Request(contentUri);
                request.SetMimeType(mimetype);
                var cookies = Android.Webkit.CookieManager.Instance.GetCookie(url);
                request.AddRequestHeader("cookie", cookies);
                request.AddRequestHeader("User-Agent", userAgent);
                request.SetDescription("Downloading file...");
                request.SetTitle(Android.Webkit.URLUtil.GuessFileName(url, contentDisposition, mimetype));
                request.AllowScanningByMediaScanner();
                request.SetNotificationVisibility(Android.App.DownloadVisibility.VisibleNotifyCompleted);
                request.SetDestinationInExternalPublicDir(Android.OS.Environment.DirectoryDownloads, ".pdf");
                Android.App.DownloadManager dm = (Android.App.DownloadManager)CrossCurrentActivity.Current.Activity.GetSystemService(Android.Content.Context.DownloadService);
                dm.Enqueue(request);
            }
        }
        catch (Exception ex)
        {
            Console.WriteLine(ex);
        }
    }
    private static bool HasPermissions()
    {
        if (Android.OS.Build.VERSION.SdkInt >= Android.OS.BuildVersionCodes.M)
        {
            string[] WriteLocation =
            {
                Android.Manifest.Permission.WriteExternalStorage,
                Android.Manifest.Permission.ReadExternalStorage
            };
            var perm = CrossCurrentActivity.Current.AppContext.CheckSelfPermission(Android.Manifest.Permission.WriteExternalStorage);
            if (perm != (int)Android.Content.PM.Permission.Granted)
            {
                CrossCurrentActivity.Current.Activity.RequestPermissions(WriteLocation, 2);
                return false;
            }
            else
            {
                return true;
            }
        }
        else
        {
            return true;
        }
    }
}
public class JSBridge : Java.Lang.Object
{
    private readonly WeakReference<DefaultWebViewRenderer> hybridWebViewRenderer;
    public JSBridge(DefaultWebViewRenderer hybridRenderer)
    {
        hybridWebViewRenderer = new WeakReference<DefaultWebViewRenderer>(hybridRenderer);
    }
    [JavascriptInterface]
    [Export("invokeAction")]
    public void InvokeAction(string data)
    {
        if (hybridWebViewRenderer != null && hybridWebViewRenderer.TryGetTarget(out DefaultWebViewRenderer hybridRenderer) && hybridRenderer != null && hybridRenderer.Element is CustomWebView webView)
        {
            webView.JavascriptBridgeInvoked(data);
        }
    }
}