"iisExpress": {"applicationUrl": "http://localhost:5000","sslPort": 0}

    public class Config{/// <summary>/// 配置资源服务器/// </summary>/// <returns></returns>public static IEnumerable<ApiResource> GetResource(){return new List<ApiResource>{new ApiResource("api","My Api")};}/// <summary>/// 配置客户端/// </summary>/// <returns></returns>public static IEnumerable<Client> GetClients(){return new List<Client>{new Client(){ClientId = "client",AllowedGrantTypes = GrantTypes.ClientCredentials,ClientSecrets ={new Secret("secret".Sha256())},AllowedScopes = { "api"}}};}}

        public void ConfigureServices(IServiceCollection services){services.AddIdentityServer()　　　　　　　　　　//添加开发证书.AddDeveloperSigningCredential()　　　　　　　　　　//添加资源Api.AddInMemoryApiResources(Config.GetResource())　　　　　　　　　　//添加客户端.AddInMemoryClients(Config.GetClients());services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_2);}

            app.UseIdentityServer();

            services.AddAuthentication("Bearer").AddIdentityServerAuthentication(Options =>{Options.Authority = "http://localhost:5000";Options.RequireHttpsMetadata = false;Options.ApiName = "api";});

    public class Config{public static IEnumerable<ApiResource> GetResource(){return new List<ApiResource>{new ApiResource("api","My Api")};}public static IEnumerable<Client> GetClients(){return new List<Client>{//客户端模式new Client(){ClientId = "client",AllowedGrantTypes = GrantTypes.ClientCredentials,ClientSecrets ={new Secret("secret".Sha256())},AllowedScopes = { "api"}},//账号密码模式new Client(){ClientId = "pwdClient",AllowedGrantTypes = GrantTypes.ResourceOwnerPassword,ClientSecrets ={new Secret("secret".Sha256())},AllowedScopes = { "api"}}};}/// <summary>/// 添加一个模拟的帐号密码/// </summary>/// <returns></returns>public static List<TestUser> GetTestUsers(){return new List<TestUser>{new TestUser{SubjectId = "1",Username="jcb",Password = "123456"}};}}

            services.AddIdentityServer().AddDeveloperSigningCredential().AddInMemoryApiResources(Config.GetResource()).AddInMemoryClients(Config.GetClients()).AddTestUsers(Config.GetTestUsers());

    public class LoginValidator : IResourceOwnerPasswordValidator{public async Task ValidateAsync(ResourceOwnerPasswordValidationContext context){Customers customers = new Customers() { Name = context.UserName };var res = await Login(customers);if (res != null){//GrantValidationResult实例根据构造函数传参不同来进行判断是否成功context.Result = new GrantValidationResult(res.Id.ToString(), "password", (IEnumerable<Claim>)null, "local", (Dictionary<string, object>)null);}else{}}　　　　　　//登录验证可以写这里public async Task<Customers> Login(Customers customer){using (MyDbContext db = new MyDbContext()){var res = db.customers.FirstOrDefault(t=>t.Name == customer.Name);if (res != null){return res;}return null;}}}

.AddResourceOwnerValidator<LoginValidator>();

    public class ProfileService : IProfileService{public async Task GetProfileDataAsync(ProfileDataRequestContext context){//通过第一次验证输出的账号密码 查询到租户ID等其他信息   添加到身份信息中List<Claim> claims = Enumerable.ToList<Claim>(context.Subject.Claims);claims.Add(new Claim("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier", "蒋承标"));claims.Add(new Claim("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name", "浙江工贸"));claims.Add(new Claim("http://jcb.org/identity/claims/tenantId", "租户ID"));context.IssuedClaims = claims;}public async Task IsActiveAsync(IsActiveContext context){context.IsActive = true;int num = await(Task<int>) Task.FromResult<int>(0);}}

        public void ConfigureServices(IServiceCollection services){services.AddIdentityServer().AddDeveloperSigningCredential().AddInMemoryApiResources(Config.GetResource()).AddInMemoryClients(Config.GetClients()).AddTestUsers(Config.GetTestUsers()).AddProfileService<ProfileService>().AddResourceOwnerValidator<LoginValidator>();services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_1);}

    public static class JwtTokenMiddleware{public static IApplicationBuilder UseJwtTokenMiddleware(this IApplicationBuilder app, string schema = JwtBearerDefaults.AuthenticationScheme){return app.Use(async (ctx, next) =>{if (ctx.User.Identity?.IsAuthenticated != true){var result = await ctx.AuthenticateAsync(schema);if (result.Succeeded && result.Principal != null){ctx.User = result.Principal;}}await next();});}}

        public void ConfigureServices(IServiceCollection services){services.AddDbContext<SchoolDbContext>(d=>d.UseSqlServer(Configuration.GetConnectionString("Default")));JwtSecurityTokenHandler.DefaultInboundClaimTypeMap.Clear();services.AddAuthentication(options =>{options.DefaultScheme = "Cookies";options.DefaultChallengeScheme = "oidc";}).AddCookie("Cookies").AddOpenIdConnect("oidc", options =>{options.Authority = "http://localhost:5000";options.RequireHttpsMetadata = false;options.ClientId = "mvc";options.SaveTokens = true;});services.AddMvc();}