namespace MvcCookieAuthSample.Models
{public class ConsentViewModel{public string ClientId { get; set; }public string ClientName { get; set; }public string Client { get; set; }public string ClientLogUrl { get; set; }public bool AllowRememberConsent { get; set; }public string ClientUrl { get; set; }public IEnumerable<ScopeViewModel> IdentityScopes { get; set; }public IEnumerable<ScopeViewModel> ResourceScopes { get; set; }}
}

namespace MvcCookieAuthSample.Models
{public class ScopeViewModel{public string Name { get; set; }public string DisplayName { get; set; }public string Description { get; set; }public bool Emphasize { get; set; }public bool Required { get; set; }public bool Checked { get; set; }}
}

using Microsoft.AspNetCore.Mvc;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
using IdentityServer4.Test;
using IdentityServer4.Services;
using IdentityServer4.Stores;
using MvcCookieAuthSample.Models;
using IdentityServer4.Models;namespace MvcCookieAuthSample.Controllers
{public class ConsentController:Controller{private readonly IClientStore _clientStore;private readonly IResourceStore _resourceStore;private readonly IIdentityServerInteractionService _identityServerInteractionService;public ConsentController(IClientStore clientStore,IResourceStore resourceStore,IIdentityServerInteractionService identityServerInteractionService ){_clientStore = clientStore;_resourceStore = resourceStore;_identityServerInteractionService = identityServerInteractionService;}public async Task<IActionResult> Index(string returnUrl){Models.ConsentViewModel model = await BuildConsentViewModel(returnUrl);if (model == null){}return View(model);}private async Task<ConsentViewModel> BuildConsentViewModel(string returnUrl){var request = await _identityServerInteractionService.GetAuthorizationContextAsync(returnUrl);if (request == null)return null;var client = await _clientStore.FindEnabledClientByIdAsync(request.ClientId);var resources = await _resourceStore.FindEnabledResourcesByScopeAsync(request.ScopesRequested);return CreateConsentViewModel(request, client, resources);}private ConsentViewModel CreateConsentViewModel(AuthorizationRequest request, Client client, Resources resources){var vm = new ConsentViewModel();vm.ClientName = client.ClientName;vm.ClientLogUrl = client.LogoUri;vm.ClientUrl = client.ClientUri;vm.AllowRememberConsent = client.AllowRememberConsent;vm.IdentityScopes = resources.IdentityResources.Select(i=>CreateScopeViewModel(i));vm.ResourceScopes = resources.ApiResources.SelectMany(i=>i.Scopes).Select(i=>CreateScopeViewModel(i));return vm;}private ScopeViewModel CreateScopeViewModel(IdentityResource identityResource){return new ScopeViewModel{Name = identityResource.Name,DisplayName = identityResource.DisplayName,Description = identityResource.Description,Required = identityResource.Required,Checked = identityResource.Required,Emphasize = identityResource.Emphasize};}private ScopeViewModel CreateScopeViewModel(Scope scope){return new ScopeViewModel{Name = scope.Name,DisplayName = scope.DisplayName,Description = scope.Description,Required = scope.Required,Checked = scope.Required,Emphasize = scope.Emphasize};}}
}

@using MvcCookieAuthSample.ViewModel;
@model ConsentViewModel<div class="row page-header"><div class="col-sm-10">@if (string.IsNullOrWhiteSpace(Model.ClientLogUrl)){<div><img src="@Model.ClientLogUrl" /></div>}<h1>@Model.ClientName<small>希望使用你的账号</small></h1></div></div><div class="row"><form>@if (Model.IdentityScopes.Any()){<div class="panel"><div class="panel-heading"><span class="glyphicon glyphicon-tasks"></span>identity应用权限</div><ul class="list-group">@foreach (var scope in Model.IdentityScopes){                      @await Html.PartialAsync("_ScopeListItem", scope);}</ul></div>}@if (Model.ResourceScopes.Any()){<div class="panel"><div class="panel-heading"><span class="glyphicon glyphicon-tasks"></span>resource应用权限</div><ul class="list-group">@foreach (var scope in Model.ResourceScopes){await Html.PartialAsync("_ScopeListItem", scope);}</ul></div>}</form>
</div>

@*For more information on enabling MVC for empty projects, visit http://go.microsoft.com/fwlink/?LinkID=397860
*@
@using MvcCookieAuthSample.ViewModel;
@model ScopeViewModel<li><label><input type="checkbox"name="ScopesConsented"id="scopes_@Model.Name"value="@Model.Name"checked="@Model.Checked"disabled="@Model.Required" /><strong>@Model.Name</strong>@if (Model.Emphasize){<span class="glyphicon glyphicon-exclamation-sign"></span>}</label>@if (string.IsNullOrEmpty(Model.Description)){<div><label for="scopes_@Model.Name"> @Model.Description</label></div>}
</li>

namespace MvcCookieAuthSample
{public class Config{public static IEnumerable<ApiResource> GetApiResources() {return new List<ApiResource>() {new ApiResource("api1","api DisplayName")};}public static IEnumerable<Client> GetClients(){return new List<Client>() {new Client(){ClientId="mvc",ClientName="mvc Name",ClientUri="http://localhost:5001",AllowRememberConsent=true, AllowedGrantTypes= GrantTypes.Implicit,ClientSecrets= new List<Secret>(){new Secret("secret".Sha256())},RedirectUris = {"http://localhost:5001/signin-oidc" },PostLogoutRedirectUris = { "http://localhost/signout-callback-oidc"},RequireConsent=true,//启用客户端手动授权AllowedScopes={IdentityServerConstants.StandardScopes.Profile,IdentityServerConstants.StandardScopes.OpenId,}}};}public static IEnumerable<IdentityResource> GetIdentityResources(){return new List<IdentityResource>() {new IdentityResources.OpenId(),new IdentityResources.Email(),new IdentityResources.Profile()};}public static List<TestUser> GetTestUsers(){return new List<TestUser>() {new TestUser(){SubjectId="oa001",Username="qinzb",Password="123456"}};}}
}