一、简介

授权中心是微服务架构中最为核心重要的环节，不仅为web、app等客户端提供身份授权服务，还对其他微服务提供身份认证服务。ABP微服务架构中使用identityServer4框架进行身份管理，并且ABP对ids4框架进行了进一步封装，足以提供强大的统一授权服务。

二、创建工程

创建AuthServer.Host服务

在AuthServer目录中创建解决方案，不启用https配置

三、引用模块

在刚刚创建的空 asp.net core项目中引用 .net core、ef core、ids4、abp等官方组件。

PM> Install-Package Serilog.Extensions.Hosting -Version 3.0.0

PM> Install-Package Serilog.Sinks.File -Version 4.0.0

PM> Install-Package Serilog.Sinks.Elasticsearch -Version 6.5.0

PM> Install-Package Microsoft.Extensions.Caching.StackExchangeRedis -Version 3.1.0

PM> Install-Package Microsoft.AspNetCore.DataProtection.StackExchangeRedis -Version 3.1.0

PM> Install-Package Microsoft.EntityFrameworkCore.Tools -Version 3.1.0

PM> Install-Package Volo.Abp.Account.Application -Version 2.0.1

PM> Install-Package Volo.Abp.Account.Web.IdentityServer -Version 2.0.1

PM> Install-Package Volo.Abp.AspNetCore.Mvc.UI.Theme.Basic -Version 2.0.1

PM> Install-Package Volo.Abp.AuditLogging.EntityFrameworkCore -Version 2.0.1

PM> Install-Package Volo.Abp.Autofac -Version 2.0.1

PM> Install-Package Volo.Abp.EntityFrameworkCore.SqlServer -Version 2.0.1

PM> Install-Package Volo.Abp.Identity.EntityFrameworkCore -Version 2.0.1

PM> Install-Package Volo.Abp.IdentityServer.EntityFrameworkCore -Version 2.0.1

PM> Install-Package Volo.Abp.PermissionManagement.EntityFrameworkCore -Version 2.0.1

PM> Install-Package Volo.Abp.SettingManagement.EntityFrameworkCore -Version 2.0.1

PM> Install-Package Volo.Abp.TenantManagement.EntityFrameworkCore -Version 2.0.1

四、添加DbContext

在项目中添加DbContext并配置ef core迁移模型。

4.1 添加AuthServerDbContext

在EntityFrameworkCore目录下添加AuthServerDbContext.cs配置所有ABP模型，代码如下：

public class AuthServerDbContext : AbpDbContext

{

public AuthServerDbContext(DbContextOptions options)

: base(options)

{

}

protected override void OnModelCreating(ModelBuilder modelBuilder)

{

base.OnModelCreating(modelBuilder);

modelBuilder.ConfigureIdentity();

modelBuilder.ConfigureIdentityServer();

modelBuilder.ConfigureAuditLogging();

modelBuilder.ConfigurePermissionManagement();

modelBuilder.ConfigureSettingManagement();

modelBuilder.ConfigureTenantManagement();

}

}

4.2 添加AuthServerDbContextFactory

在EntityFrameworkCore目录下创建AuthServerDbContextFactory.cs用于code first数据库迁移

public class AuthServerDbContextFactory : IDesignTimeDbContextFactory

{

public AuthServerDbContext CreateDbContext(string[] args)

{

var configuration = BuildConfiguration();

var builder = new DbContextOptionsBuilder()

.UseSqlServer(configuration.GetConnectionString("Default"));

return new AuthServerDbContext(builder.Options);

}

private static IConfigurationRoot BuildConfiguration()

{

var builder = new ConfigurationBuilder()

.SetBasePath(Directory.GetCurrentDirectory())

.AddJsonFile("appsettings.json", optional: false);

return builder.Build();

}

}

五、配置Module

5.1 添加AuthServerHostModule

在AuthServer.Host根目录中添加AuthServerHostModule.cs

5.2 引用依赖

在AuthServerHostModule依次引用以下依赖

AbpAutofacModule

AbpPermissionManagementEntityFrameworkCoreModule

AbpAuditLoggingEntityFrameworkCoreModule

AbpSettingManagementEntityFrameworkCoreModule

AbpIdentityEntityFrameworkCoreModule

AbpIdentityServerEntityFrameworkCoreModule

AbpTenantManagementEntityFrameworkCoreModule

AbpEntityFrameworkCoreSqlServerModule

AbpAccountWebIdentityServerModule

AbpAccountApplicationModule

AbpAspNetCoreMvcUiBasicThemeModule

5.3 注册服务与初始化应用

AuthServer中不需要注册认证方式和Swagger服务，服务注册和初始化应用代码如下：

public class AuthServerHostModule : AbpModule

{

private const string DefaultCorsPolicyName = "Default";

public override void ConfigureServices(ServiceConfigurationContext context)

{

var configuration = context.Services.GetConfiguration();

context.Services.AddAbpDbContext(options =>

{

options.AddDefaultRepositories();

});

Configure(options =>

{

options.UseSqlServer();

});

Configure(options =>

{

options.Languages.Add(new LanguageInfo("en", "en", "English"));

});

context.Services.AddStackExchangeRedisCache(options =>

{

options.Configuration = configuration["Redis:Configuration"];

});

context.Services.AddCors(options =>

{

options.AddPolicy(DefaultCorsPolicyName,

builder =>

{

builder.WithOrigins(configuration["CorsOrigins"]

.Split(",", StringSplitOptions.RemoveEmptyEntries)

.Select(o => o.RemovePostFix("/"))

.ToArray())

.WithAbpExposedHeaders()

.SetIsOriginAllowedToAllowWildcardSubdomains()

.AllowAnyHeader()

.AllowAnyMethod()

.AllowCredentials();

});

});

Configure(options =>

{

options.IsEnabledForGetRequests = true;

options.ApplicationName = "AuthServer";

});

var redis = ConnectionMultiplexer.Connect(configuration["Redis:Configuration"]);

context.Services.AddDataProtection()

.PersistKeysToStackExchangeRedis(redis, "DataProtection-Keys");

}

public override void OnApplicationInitialization(ApplicationInitializationContext context)

{

var app = context.GetApplicationBuilder();

app.UseCorrelationId();

app.UseVirtualFiles();

app.UseRouting();

app.UseCors(DefaultCorsPolicyName);

app.UseAuthentication();

app.UseMultiTenancy();

app.UseIdentityServer();

app.UseAuthorization();

app.UseAbpRequestLocalization();

app.UseAuditing();

app.UseMvcWithDefaultRouteAndArea();

AsyncHelper.RunSync(async () =>

{

using (var scope = context.ServiceProvider.CreateScope())

{

await scope.ServiceProvider

.GetRequiredService()

.SeedAsync();

}

});

}

}

六、种子文件和配置文件

目前没有使用ids4身份管理界面，暂时使用种子文件将client信息添加到数据库。

详细代码可见Github

七、启动

7.1 迁移数据库

使用ef core迁移模型到数据库

PM> Add-Migration init

PM> Update-Database

7.2 运行

使用Ctrl+F5启动项目

启动成功后种子文件已经添加到数据库

7.3 登录

使用postman获取token

token成功返回