using IdentityServer4;
using IdentityServer4.Models;
using IdentityServer4.Test;
using System.Collections.Generic;   namespace IdentityServer02
{   public static class Config  {   /// <summary> /// 需要保护的api资源  /// </summary>    public static IEnumerable<ApiResource> Apis =>    new List<ApiResource> {   new ApiResource("api1","My Api")    };  public static IEnumerable<Client> Clients =>  new List<Client>  {   //客户端   new Client  {   ClientId="client",   ClientSecrets={ new Secret("aju".Sha256())}, AllowedGrantTypes=GrantTypes.ResourceOwnerPassword,    //如果要获取refresh_tokens ,必须在scopes中加上OfflineAccess    AllowedScopes={ "api1", IdentityServerConstants.StandardScopes.OfflineAccess},   AllowOfflineAccess=true    }   };  public static List<TestUser> Users = new List<TestUser>    {   new TestUser    {   SubjectId="001", Password="Aju_001",  Username="Aju_001"   },  new TestUser    {   SubjectId="002", Password="Aju_002",  Username="Aju_002"   }   };  }
}

using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Hosting;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Hosting; namespace IdentityServer02
{   public class Startup    {   // This method gets called by the runtime. Use this method to add services to the container.    // For more information on how to configure your application, visit https://go.microsoft.com/fwlink/?LinkID=398940 public void ConfigureServices(IServiceCollection services)  {   var builder = services.AddIdentityServer() .AddInMemoryApiResources(Config.Apis)   .AddInMemoryClients(Config.Clients) .AddTestUsers(Config.Users);19             builder.AddDeveloperSigningCredential(); }   // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.  public void Configure(IApplicationBuilder app, IWebHostEnvironment env) {   if (env.IsDevelopment())    {   app.UseDeveloperExceptionPage();    }   // app.UseRouting();    app.UseIdentityServer();    }   }
}

using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using System.Linq;  namespace Api02.Controllers
{   [Route("Api")]    [Authorize] public class ApiController : ControllerBase {   public IActionResult Get()  {   return new JsonResult(from c in User.Claims select new { c.Type, c.Value });    }   }
}

using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Hosting;
using Microsoft.Extensions.Configuration;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Hosting; namespace Api02
{   public class Startup    {   public Startup(IConfiguration configuration)    {   Configuration = configuration; }   public IConfiguration Configuration { get; }    // This method gets called by the runtime. Use this method to add services to the container.    public void ConfigureServices(IServiceCollection services)  {   services.AddControllers();  services.AddAuthentication("Bearer").AddJwtBearer("Bearer", options =>  {   options.Authority = "http://localhost:5000"; options.RequireHttpsMetadata = false;  options.Audience = "api1";   }); }   // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.  public void Configure(IApplicationBuilder app, IWebHostEnvironment env) {   if (env.IsDevelopment())    {   app.UseDeveloperExceptionPage();    }   app.UseRouting();   app.UseAuthentication();//认证    app.UseAuthorization();//授权 app.UseEndpoints(endpoints =>   {   endpoints.MapControllers(); }); }   }
}

using IdentityModel.Client;
using Newtonsoft.Json.Linq;
using System;
using System.Net.Http;
using System.Threading.Tasks;   namespace Client02
{   class Program   {   static async Task Main(string[] args)   {   // Console.WriteLine("Hello World!"); var client = new HttpClient(); var disco = await client.GetDiscoveryDocumentAsync("http://localhost:5000"); if (disco.IsError)  {   Console.WriteLine(disco.Error); return; }   var tokenResponse = await client.RequestPasswordTokenAsync(    new PasswordTokenRequest    {   Address = disco.TokenEndpoint, ClientId = "client", ClientSecret = "aju",    Scope = "api1 offline_access",   UserName = "Aju",    Password = "Aju_password"    }); if (tokenResponse.IsError)  {   Console.WriteLine(tokenResponse.Error); return; }   Console.WriteLine(tokenResponse.Json);  Console.WriteLine("\n\n");    //call api  var apiClient = new HttpClient();  apiClient.SetBearerToken(tokenResponse.AccessToken);    var response = await apiClient.GetAsync("http://localhost:5001/api");    if (!response.IsSuccessStatusCode)  {   Console.WriteLine(response.StatusCode); }   else    {   var content = await response.Content.ReadAsStringAsync();  Console.WriteLine(JArray.Parse(content));   }   Console.ReadLine(); }   }
}

using IdentityModel;
using IdentityServer4.Models;
using IdentityServer4.Validation;
using System.Threading.Tasks;   namespace IdentityServer02
{   public class ResourceOwnerValidator : IResourceOwnerPasswordValidator   {   public Task ValidateAsync(ResourceOwnerPasswordValidationContext context)   {   if (context.UserName == "Aju" && context.Password == "Aju_password")    {   context.Result = new GrantValidationResult(    subject: context.UserName,  authenticationMethod: OidcConstants.AuthenticationMethods.Password);    }   else    {   context.Result = new GrantValidationResult(TokenRequestErrors.InvalidGrant, "无效的秘钥");    }   return Task.FromResult("");   }   }
}