[feature] 建立鉴权项目结构
This commit is contained in:
parent
8c019a3159
commit
d33ff74a51
|
@ -0,0 +1,30 @@
|
||||||
|
**/.classpath
|
||||||
|
**/.dockerignore
|
||||||
|
**/.env
|
||||||
|
**/.git
|
||||||
|
**/.gitignore
|
||||||
|
**/.project
|
||||||
|
**/.settings
|
||||||
|
**/.toolstarget
|
||||||
|
**/.vs
|
||||||
|
**/.vscode
|
||||||
|
**/*.*proj.user
|
||||||
|
**/*.dbmdl
|
||||||
|
**/*.jfm
|
||||||
|
**/azds.yaml
|
||||||
|
**/bin
|
||||||
|
**/charts
|
||||||
|
**/docker-compose*
|
||||||
|
**/Dockerfile*
|
||||||
|
**/node_modules
|
||||||
|
**/npm-debug.log
|
||||||
|
**/obj
|
||||||
|
**/secrets.dev.yaml
|
||||||
|
**/values.dev.yaml
|
||||||
|
LICENSE
|
||||||
|
README.md
|
||||||
|
!**/.gitignore
|
||||||
|
!.git/HEAD
|
||||||
|
!.git/config
|
||||||
|
!.git/packed-refs
|
||||||
|
!.git/refs/heads/**
|
|
@ -0,0 +1,25 @@
|
||||||
|
|
||||||
|
Microsoft Visual Studio Solution File, Format Version 12.00
|
||||||
|
# Visual Studio Version 17
|
||||||
|
VisualStudioVersion = 17.11.35327.3
|
||||||
|
MinimumVisualStudioVersion = 10.0.40219.1
|
||||||
|
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "SiteManagementSystem(SoftwareEngineering)", "SiteManagementSystem(SoftwareEngineering)\SiteManagementSystem(SoftwareEngineering).csproj", "{CB0750D4-7BC3-4D7D-B9E1-AADA28283DFB}"
|
||||||
|
EndProject
|
||||||
|
Global
|
||||||
|
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||||
|
Debug|Any CPU = Debug|Any CPU
|
||||||
|
Release|Any CPU = Release|Any CPU
|
||||||
|
EndGlobalSection
|
||||||
|
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||||
|
{CB0750D4-7BC3-4D7D-B9E1-AADA28283DFB}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||||
|
{CB0750D4-7BC3-4D7D-B9E1-AADA28283DFB}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||||
|
{CB0750D4-7BC3-4D7D-B9E1-AADA28283DFB}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||||
|
{CB0750D4-7BC3-4D7D-B9E1-AADA28283DFB}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||||
|
EndGlobalSection
|
||||||
|
GlobalSection(SolutionProperties) = preSolution
|
||||||
|
HideSolutionNode = FALSE
|
||||||
|
EndGlobalSection
|
||||||
|
GlobalSection(ExtensibilityGlobals) = postSolution
|
||||||
|
SolutionGuid = {CB03CE44-F3D7-4391-AF5C-FB103A12A980}
|
||||||
|
EndGlobalSection
|
||||||
|
EndGlobal
|
|
@ -0,0 +1,8 @@
|
||||||
|
using Microsoft.AspNetCore.Mvc;
|
||||||
|
|
||||||
|
namespace SiteManagementSystem_SoftwareEngineering_.Controllers
|
||||||
|
{
|
||||||
|
public class FieldController : ControllerBase
|
||||||
|
{
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,56 @@
|
||||||
|
using Microsoft.AspNetCore.Mvc;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Entity;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Extension;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Factory;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Interface;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Model;
|
||||||
|
|
||||||
|
namespace SiteManagementSystem_SoftwareEngineering_.Controllers
|
||||||
|
{
|
||||||
|
public class UserController : ControllerBase
|
||||||
|
{
|
||||||
|
private readonly IUserManageService _userManageService;
|
||||||
|
private readonly ITokenFactory _tokenFactory;
|
||||||
|
public UserController(IUserManageService userManageService,ITokenFactory tokenFactory)
|
||||||
|
{
|
||||||
|
_userManageService = userManageService;
|
||||||
|
_tokenFactory = tokenFactory;
|
||||||
|
}
|
||||||
|
|
||||||
|
[HttpGet("AddInitAdministratorUser")]
|
||||||
|
public IActionResult AddInitAdministratorUser()
|
||||||
|
{
|
||||||
|
_userManageService.AddUser(
|
||||||
|
new User
|
||||||
|
{
|
||||||
|
Name = "admin",
|
||||||
|
RoleName = "Administrator",
|
||||||
|
Secret = "admin"
|
||||||
|
}
|
||||||
|
);
|
||||||
|
return this.Success();
|
||||||
|
}
|
||||||
|
|
||||||
|
[HttpPost("AddUser")]
|
||||||
|
public IActionResult AddUser(UserModel user)
|
||||||
|
{
|
||||||
|
_userManageService.AddUser(new User(user));
|
||||||
|
return this.Success();
|
||||||
|
}
|
||||||
|
|
||||||
|
[HttpPost("Login")]
|
||||||
|
public IActionResult Login(UserModel model)
|
||||||
|
{
|
||||||
|
var user = new User(model);
|
||||||
|
var (result, info) = _userManageService.IsUserExist(ref user);
|
||||||
|
if (!result)
|
||||||
|
return this.Forbidden(info);
|
||||||
|
|
||||||
|
return this.Success("", new
|
||||||
|
{
|
||||||
|
AccessToken = _tokenFactory.CreateAccessToken(user),
|
||||||
|
RefreshToken = _tokenFactory.CreateRefreshToken(user)
|
||||||
|
});
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,30 @@
|
||||||
|
# 请参阅 https://aka.ms/customizecontainer 以了解如何自定义调试容器,以及 Visual Studio 如何使用此 Dockerfile 生成映像以更快地进行调试。
|
||||||
|
|
||||||
|
# 此阶段用于在快速模式(默认为调试配置)下从 VS 运行时
|
||||||
|
FROM mcr.microsoft.com/dotnet/aspnet:8.0 AS base
|
||||||
|
USER app
|
||||||
|
WORKDIR /app
|
||||||
|
EXPOSE 8080
|
||||||
|
EXPOSE 8081
|
||||||
|
|
||||||
|
|
||||||
|
# 此阶段用于生成服务项目
|
||||||
|
FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
|
||||||
|
ARG BUILD_CONFIGURATION=Release
|
||||||
|
WORKDIR /src
|
||||||
|
COPY ["SiteManagementSystem(SoftwareEngineering)/SiteManagementSystem(SoftwareEngineering).csproj", "SiteManagementSystem(SoftwareEngineering)/"]
|
||||||
|
RUN dotnet restore "./SiteManagementSystem(SoftwareEngineering)/SiteManagementSystem(SoftwareEngineering).csproj"
|
||||||
|
COPY . .
|
||||||
|
WORKDIR "/src/SiteManagementSystem(SoftwareEngineering)"
|
||||||
|
RUN dotnet build "./SiteManagementSystem(SoftwareEngineering).csproj" -c $BUILD_CONFIGURATION -o /app/build
|
||||||
|
|
||||||
|
# 此阶段用于发布要复制到最终阶段的服务项目
|
||||||
|
FROM build AS publish
|
||||||
|
ARG BUILD_CONFIGURATION=Release
|
||||||
|
RUN dotnet publish "./SiteManagementSystem(SoftwareEngineering).csproj" -c $BUILD_CONFIGURATION -o /app/publish /p:UseAppHost=false
|
||||||
|
|
||||||
|
# 此阶段在生产中使用,或在常规模式下从 VS 运行时使用(在不使用调试配置时为默认值)
|
||||||
|
FROM base AS final
|
||||||
|
WORKDIR /app
|
||||||
|
COPY --from=publish /app/publish .
|
||||||
|
ENTRYPOINT ["dotnet", "SiteManagementSystem(SoftwareEngineering).dll"]
|
|
@ -0,0 +1,63 @@
|
||||||
|
using System.ComponentModel.DataAnnotations;
|
||||||
|
using System.ComponentModel.DataAnnotations.Schema;
|
||||||
|
using System.Data;
|
||||||
|
using System.Security.Claims;
|
||||||
|
using System.Xml.Linq;
|
||||||
|
using Microsoft.AspNetCore.DataProtection;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Model;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Service;
|
||||||
|
|
||||||
|
namespace SiteManagementSystem_SoftwareEngineering_.Entity
|
||||||
|
{
|
||||||
|
public class User : ICloneable
|
||||||
|
{
|
||||||
|
public User() { }
|
||||||
|
|
||||||
|
public User(UserModel model)
|
||||||
|
{
|
||||||
|
Name = model.Name;
|
||||||
|
RoleName = model.RoleName;
|
||||||
|
Secret = model.Secret;
|
||||||
|
}
|
||||||
|
|
||||||
|
public User(User user)
|
||||||
|
{
|
||||||
|
Id = user.Id;
|
||||||
|
RoleName = user.RoleName;
|
||||||
|
Role = user.Role;
|
||||||
|
Name = user.Name;
|
||||||
|
Secret = user.Secret;
|
||||||
|
HashSecret = user.HashSecret;
|
||||||
|
}
|
||||||
|
|
||||||
|
[Key]
|
||||||
|
public Guid Id { get; set; } = Guid.NewGuid();
|
||||||
|
|
||||||
|
[NotMapped]
|
||||||
|
public string RoleName { get; set; } = null!;
|
||||||
|
public IdentityPolicyNames Role
|
||||||
|
{
|
||||||
|
get
|
||||||
|
{
|
||||||
|
if (Enum.TryParse<IdentityPolicyNames>(RoleName, out var result))
|
||||||
|
return result;
|
||||||
|
else
|
||||||
|
return IdentityPolicyNames.NotSupport;
|
||||||
|
}
|
||||||
|
set => RoleName = Enum.GetName(value)!;
|
||||||
|
}
|
||||||
|
|
||||||
|
[StringLength(50)]
|
||||||
|
public string Name { get; set; } = null!;
|
||||||
|
|
||||||
|
[NotMapped]
|
||||||
|
public string Secret { get; set; } = null!;
|
||||||
|
|
||||||
|
public string HashSecret { get; set; } = null!;
|
||||||
|
|
||||||
|
public object Clone() => new User(this);
|
||||||
|
|
||||||
|
public IEnumerable<Claim> GetUserClaims() =>
|
||||||
|
[new Claim(nameof(Name), Name), new Claim(ClaimTypes.Role, RoleName)];
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,24 @@
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Model;
|
||||||
|
using Microsoft.AspNetCore.Mvc;
|
||||||
|
|
||||||
|
namespace SiteManagementSystem_SoftwareEngineering_.Extension
|
||||||
|
{
|
||||||
|
public static class ControllerBaseExtension
|
||||||
|
{
|
||||||
|
public static IActionResult Success(
|
||||||
|
this ControllerBase controller,
|
||||||
|
string msg = "",
|
||||||
|
object? data = null
|
||||||
|
) => ApiResponse.Success(msg, data);
|
||||||
|
public static IActionResult Forbidden(
|
||||||
|
this ControllerBase controller,
|
||||||
|
string msg = "",
|
||||||
|
object? data = null
|
||||||
|
)=> ApiResponse.Forbidden(msg, data);
|
||||||
|
public static IActionResult Fail(
|
||||||
|
this ControllerBase controller,
|
||||||
|
string msg = "",
|
||||||
|
object? data = null
|
||||||
|
) => ApiResponse.Fail(msg, data);
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,42 @@
|
||||||
|
using IwutMail.Model;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Factory;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Interface;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Model;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Service;
|
||||||
|
using static SiteManagementSystem_SoftwareEngineering_.Service.UserManagerService;
|
||||||
|
|
||||||
|
namespace SiteManagementSystem_SoftwareEngineering_.Extension
|
||||||
|
{
|
||||||
|
public static class IServiceCollectionExtension
|
||||||
|
{
|
||||||
|
public static IServiceCollection AddTokenFactory(
|
||||||
|
this IServiceCollection services,
|
||||||
|
Action<TokenFactoryConfiguration> options
|
||||||
|
)
|
||||||
|
{
|
||||||
|
var config = new TokenFactoryConfiguration();
|
||||||
|
options(config);
|
||||||
|
if (config.Audience is null)
|
||||||
|
throw new ArgumentNullException(nameof(config.Audience) + "can not be null.");
|
||||||
|
if (config.Issuer is null)
|
||||||
|
throw new ArgumentNullException(nameof(config.Issuer) + "can not be null.");
|
||||||
|
if (config.SigningKey is null)
|
||||||
|
throw new ArgumentNullException(nameof(config.SigningKey) + "can not be null.");
|
||||||
|
services.AddScoped<ITokenFactory, TokenFactory>(_ => new TokenFactory(config));
|
||||||
|
return services;
|
||||||
|
}
|
||||||
|
public static IServiceCollection AddUserManager(this IServiceCollection services, Action<SecretConfig> options)
|
||||||
|
{
|
||||||
|
var config = new SecretConfig();
|
||||||
|
options(config);
|
||||||
|
if (config.HashSalt is null) throw new ArgumentNullException(nameof(config.HashSalt) + "can not be null");
|
||||||
|
services.AddScoped<IUserManageService, UserManageService>(services =>
|
||||||
|
{
|
||||||
|
var logger = services.GetRequiredService<ILogger<UserManageService>>();
|
||||||
|
var storageService= services.GetRequiredService<SQLService>();
|
||||||
|
return new UserManageService(storageService, logger, config.HashSalt);
|
||||||
|
});
|
||||||
|
return services;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,54 @@
|
||||||
|
using System.IdentityModel.Tokens.Jwt;
|
||||||
|
using System.Security.Claims;
|
||||||
|
using System.Text;
|
||||||
|
|
||||||
|
using Microsoft.Extensions.Configuration;
|
||||||
|
using Microsoft.IdentityModel.Tokens;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Entity;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Interface;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Model;
|
||||||
|
|
||||||
|
namespace SiteManagementSystem_SoftwareEngineering_.Factory
|
||||||
|
{
|
||||||
|
public class TokenFactory(
|
||||||
|
TokenFactoryConfiguration configuration
|
||||||
|
) : ITokenFactory
|
||||||
|
{
|
||||||
|
private readonly TokenFactoryConfiguration _configuration = configuration;
|
||||||
|
|
||||||
|
private string CreateToken(IEnumerable<Claim> claims, User user, DateTime expires)
|
||||||
|
{
|
||||||
|
// 为什么把 NameIdentifier 单独写在这儿?
|
||||||
|
claims = claims.Append(new Claim(ClaimTypes.NameIdentifier, user.Id.ToString()));
|
||||||
|
var credentials = new SigningCredentials(
|
||||||
|
new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_configuration.SigningKey)),
|
||||||
|
SecurityAlgorithms.HmacSha256
|
||||||
|
);
|
||||||
|
var token = new JwtSecurityToken(
|
||||||
|
issuer: _configuration.Issuer,
|
||||||
|
audience: _configuration.Audience,
|
||||||
|
notBefore: DateTime.Now,
|
||||||
|
expires: expires,
|
||||||
|
claims: claims,
|
||||||
|
signingCredentials: credentials
|
||||||
|
);
|
||||||
|
return new JwtSecurityTokenHandler().WriteToken(token);
|
||||||
|
}
|
||||||
|
|
||||||
|
public string CreateAccessToken(User user)
|
||||||
|
{
|
||||||
|
var expires = DateTime.Now.AddMinutes(_configuration.AccessTokenExpire);
|
||||||
|
return CreateToken(
|
||||||
|
user.GetUserClaims().Append(new Claim("TokenType", "AccessToken")),
|
||||||
|
user,
|
||||||
|
expires
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
public string CreateRefreshToken(User user)
|
||||||
|
{
|
||||||
|
var expires = DateTime.Now.AddMinutes(_configuration.RefreshTokenExpire);
|
||||||
|
return CreateToken([new Claim("TokenType", "RefreshToken")], user, expires);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,10 @@
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Entity;
|
||||||
|
|
||||||
|
namespace SiteManagementSystem_SoftwareEngineering_.Interface
|
||||||
|
{
|
||||||
|
public interface ITokenFactory
|
||||||
|
{
|
||||||
|
public string CreateAccessToken(User user);
|
||||||
|
public string CreateRefreshToken(User user);
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,10 @@
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Entity;
|
||||||
|
|
||||||
|
namespace SiteManagementSystem_SoftwareEngineering_.Interface
|
||||||
|
{
|
||||||
|
public interface IUserManageService
|
||||||
|
{
|
||||||
|
public void AddUser(User user);
|
||||||
|
public (bool, string) IsUserExist(ref User user);
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,31 @@
|
||||||
|
using Microsoft.AspNetCore.Mvc;
|
||||||
|
|
||||||
|
namespace SiteManagementSystem_SoftwareEngineering_.Model
|
||||||
|
{
|
||||||
|
public class ApiResponse : OkObjectResult
|
||||||
|
{
|
||||||
|
private ApiResponse(int code, string message, object? data)
|
||||||
|
: base(new ResponseModel(code, message, data)) { }
|
||||||
|
|
||||||
|
public static ApiResponse Success(string message = "", object? data = null) =>
|
||||||
|
new ApiResponse(200, message, data);
|
||||||
|
public static ApiResponse Forbidden(string message = "", object? data = null) =>
|
||||||
|
new ApiResponse(403, message, data);
|
||||||
|
public static ApiResponse Fail(string message = "", object? data = null) =>
|
||||||
|
new ApiResponse(500, message, data);
|
||||||
|
}
|
||||||
|
|
||||||
|
file class ResponseModel
|
||||||
|
{
|
||||||
|
public int Code { get; set; }
|
||||||
|
public string Message { get; set; }
|
||||||
|
public object? Data { get; set; }
|
||||||
|
|
||||||
|
public ResponseModel(int code, string message, object? data)
|
||||||
|
{
|
||||||
|
Code = code;
|
||||||
|
Message = message;
|
||||||
|
Data = data;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,7 @@
|
||||||
|
namespace IwutMail.Model
|
||||||
|
{
|
||||||
|
public class SecretConfig
|
||||||
|
{
|
||||||
|
public string HashSalt { get; set; } = null!;
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,26 @@
|
||||||
|
namespace SiteManagementSystem_SoftwareEngineering_.Model
|
||||||
|
{
|
||||||
|
public class TokenFactoryConfiguration
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// AccessToken有效期(分钟)
|
||||||
|
/// </summary>
|
||||||
|
public int AccessTokenExpire { get; set; } = 60;
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// RefreshToken有效期(分钟)
|
||||||
|
/// </summary>
|
||||||
|
public int RefreshTokenExpire { get; set; } = 10080;
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// 在RefreshToken过期前多久自动刷新RefreshToken
|
||||||
|
/// </summary>
|
||||||
|
public int RefreshTokenBefore { get; set; } = 1440;
|
||||||
|
|
||||||
|
public string Issuer { get; set; } = null!;
|
||||||
|
|
||||||
|
public string Audience { get; set; } = null!;
|
||||||
|
|
||||||
|
public string SigningKey { get; set; } = null!;
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,16 @@
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Entity;
|
||||||
|
using System.ComponentModel.DataAnnotations;
|
||||||
|
|
||||||
|
namespace SiteManagementSystem_SoftwareEngineering_.Model
|
||||||
|
{
|
||||||
|
public class UserModel
|
||||||
|
{
|
||||||
|
public string RoleName { get; set; } = null!;
|
||||||
|
[Required]
|
||||||
|
[StringLength(50)]
|
||||||
|
public string Name { get; set; } = null!;
|
||||||
|
[Required]
|
||||||
|
[StringLength(50)]
|
||||||
|
public string Secret { get; set; } = null!;
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,69 @@
|
||||||
|
using System.Text;
|
||||||
|
using Microsoft.AspNetCore.Authentication.JwtBearer;
|
||||||
|
using Microsoft.EntityFrameworkCore;
|
||||||
|
using Microsoft.IdentityModel.Tokens;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Extension;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Service;
|
||||||
|
|
||||||
|
var builder = WebApplication.CreateBuilder(args);
|
||||||
|
|
||||||
|
// Add services to the container.
|
||||||
|
|
||||||
|
builder.Services.AddControllers();
|
||||||
|
|
||||||
|
// Learn more about configuring Swagger/OpenAPI at https://aka.ms/aspnetcore/swashbuckle
|
||||||
|
builder.Services.AddEndpointsApiExplorer();
|
||||||
|
builder.Services.AddSwaggerGen();
|
||||||
|
builder.Services.AddDbContext<SQLService>(options =>
|
||||||
|
options.UseMySql(
|
||||||
|
builder.Configuration.GetConnectionString("SQL"),
|
||||||
|
MariaDbServerVersion.AutoDetect(builder.Configuration.GetConnectionString("SQL"))
|
||||||
|
)
|
||||||
|
);
|
||||||
|
builder
|
||||||
|
.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
|
||||||
|
.AddJwtBearer(options =>
|
||||||
|
{
|
||||||
|
var jwtConfig = builder.Configuration.GetSection("Jwt");
|
||||||
|
var key = Encoding.UTF8.GetBytes(jwtConfig.GetValue<string>("SecurityKey")!);
|
||||||
|
options.TokenValidationParameters = new TokenValidationParameters
|
||||||
|
{
|
||||||
|
ValidateIssuer = true,
|
||||||
|
ValidateAudience = true,
|
||||||
|
ValidateLifetime = true,
|
||||||
|
ValidateIssuerSigningKey = true,
|
||||||
|
ValidIssuer = jwtConfig.GetValue<string>("Issuer"),
|
||||||
|
ValidAudience = jwtConfig.GetValue<string>("Audience"),
|
||||||
|
IssuerSigningKey = new SymmetricSecurityKey(key)
|
||||||
|
};
|
||||||
|
});
|
||||||
|
builder
|
||||||
|
.Services.AddTokenFactory(options =>
|
||||||
|
{
|
||||||
|
var config = builder.Configuration.GetSection("Jwt");
|
||||||
|
options.Issuer = config.GetValue<string>("Issuer")!;
|
||||||
|
options.Audience = config.GetValue<string>("Audience")!;
|
||||||
|
options.SigningKey = config.GetValue<string>("SecurityKey")!;
|
||||||
|
options.AccessTokenExpire = config.GetValue<int>("AccessTokenExpire");
|
||||||
|
options.RefreshTokenExpire = config.GetValue<int>("RefreshTokenExpire");
|
||||||
|
options.RefreshTokenBefore = config.GetValue<int>("RefreshTokenBefore");
|
||||||
|
})
|
||||||
|
.AddUserManager(options =>
|
||||||
|
options.HashSalt = builder.Configuration.GetValue<string>("SecretSalt")!
|
||||||
|
);
|
||||||
|
var app = builder.Build();
|
||||||
|
|
||||||
|
// Configure the HTTP request pipeline.
|
||||||
|
if (app.Environment.IsDevelopment())
|
||||||
|
{
|
||||||
|
app.UseSwagger();
|
||||||
|
app.UseSwaggerUI();
|
||||||
|
}
|
||||||
|
|
||||||
|
app.UseHttpsRedirection();
|
||||||
|
|
||||||
|
app.UseAuthorization();
|
||||||
|
|
||||||
|
app.MapControllers();
|
||||||
|
|
||||||
|
app.Run();
|
|
@ -0,0 +1,52 @@
|
||||||
|
{
|
||||||
|
"profiles": {
|
||||||
|
"http": {
|
||||||
|
"commandName": "Project",
|
||||||
|
"launchBrowser": true,
|
||||||
|
"launchUrl": "swagger",
|
||||||
|
"environmentVariables": {
|
||||||
|
"ASPNETCORE_ENVIRONMENT": "Development"
|
||||||
|
},
|
||||||
|
"dotnetRunMessages": true,
|
||||||
|
"applicationUrl": "http://localhost:5244"
|
||||||
|
},
|
||||||
|
"https": {
|
||||||
|
"commandName": "Project",
|
||||||
|
"launchBrowser": true,
|
||||||
|
"launchUrl": "swagger",
|
||||||
|
"environmentVariables": {
|
||||||
|
"ASPNETCORE_ENVIRONMENT": "Development"
|
||||||
|
},
|
||||||
|
"dotnetRunMessages": true,
|
||||||
|
"applicationUrl": "https://localhost:7087;http://localhost:5244"
|
||||||
|
},
|
||||||
|
"IIS Express": {
|
||||||
|
"commandName": "IISExpress",
|
||||||
|
"launchBrowser": true,
|
||||||
|
"launchUrl": "swagger",
|
||||||
|
"environmentVariables": {
|
||||||
|
"ASPNETCORE_ENVIRONMENT": "Development"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"Container (Dockerfile)": {
|
||||||
|
"commandName": "Docker",
|
||||||
|
"launchBrowser": true,
|
||||||
|
"launchUrl": "{Scheme}://{ServiceHost}:{ServicePort}/swagger",
|
||||||
|
"environmentVariables": {
|
||||||
|
"ASPNETCORE_HTTPS_PORTS": "8081",
|
||||||
|
"ASPNETCORE_HTTP_PORTS": "8080"
|
||||||
|
},
|
||||||
|
"publishAllPorts": true,
|
||||||
|
"useSSL": true
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"$schema": "http://json.schemastore.org/launchsettings.json",
|
||||||
|
"iisSettings": {
|
||||||
|
"windowsAuthentication": false,
|
||||||
|
"anonymousAuthentication": true,
|
||||||
|
"iisExpress": {
|
||||||
|
"applicationUrl": "http://localhost:4477",
|
||||||
|
"sslPort": 44379
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,16 @@
|
||||||
|
|
||||||
|
using Microsoft.EntityFrameworkCore;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Entity;
|
||||||
|
|
||||||
|
namespace SiteManagementSystem_SoftwareEngineering_.Service
|
||||||
|
{
|
||||||
|
public class SQLService : DbContext
|
||||||
|
{
|
||||||
|
public SQLService(DbContextOptions<SQLService> options)
|
||||||
|
: base(options)
|
||||||
|
{
|
||||||
|
Database.EnsureCreated();
|
||||||
|
}
|
||||||
|
public DbSet<User> Users { get; set; }
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,70 @@
|
||||||
|
using Microsoft.EntityFrameworkCore;
|
||||||
|
using Microsoft.IdentityModel.Tokens;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Entity;
|
||||||
|
using SiteManagementSystem_SoftwareEngineering_.Interface;
|
||||||
|
using System.Security.Cryptography;
|
||||||
|
using System.Text;
|
||||||
|
|
||||||
|
namespace SiteManagementSystem_SoftwareEngineering_.Service
|
||||||
|
{
|
||||||
|
public enum IdentityPolicyNames
|
||||||
|
{
|
||||||
|
NotSupport,
|
||||||
|
CommonUser,
|
||||||
|
Administrator
|
||||||
|
}
|
||||||
|
public class UserManagerService
|
||||||
|
{
|
||||||
|
public class UserManageService(
|
||||||
|
SQLService storageService,
|
||||||
|
ILogger<UserManageService> logger,
|
||||||
|
string secretSalt
|
||||||
|
) : IUserManageService
|
||||||
|
{
|
||||||
|
private readonly SQLService _storageService = storageService;
|
||||||
|
private readonly ILogger<UserManageService> _logger = logger;
|
||||||
|
private readonly string _salt = secretSalt;
|
||||||
|
private static readonly object _lock = new();
|
||||||
|
public void AddUser(User user)
|
||||||
|
{
|
||||||
|
if (user.Name is null)
|
||||||
|
throw new ArgumentException("Miss Name!");
|
||||||
|
if (user.RoleName is null)
|
||||||
|
throw new ArgumentException("Miss PolicyName!");
|
||||||
|
if (user.Role is IdentityPolicyNames.NotSupport)
|
||||||
|
throw new ArgumentException("PolicyName not support");
|
||||||
|
if (user.Secret is null)
|
||||||
|
throw new ArgumentException("Miss Secret!");
|
||||||
|
user.HashSecret = ComputeHash(user.Secret);
|
||||||
|
if (_storageService.Users.Where(x => x.Name==user.Name).Any())
|
||||||
|
throw new InvalidOperationException($"已存在名字为{user.Name}的用户");
|
||||||
|
lock (_lock)
|
||||||
|
{
|
||||||
|
_storageService.Users.Add(user);
|
||||||
|
_storageService.SaveChanges();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
public (bool, string) IsUserExist(ref User user)
|
||||||
|
{
|
||||||
|
string name = user.Name;
|
||||||
|
var result = _storageService.Users.Where(x => x.Name == name);
|
||||||
|
if (!result.Any())
|
||||||
|
return (false, "账号不存在");
|
||||||
|
if (result.First().HashSecret != ComputeHash(user.Secret))
|
||||||
|
return (false, "密码不匹配");
|
||||||
|
user = (User)result.First().Clone();
|
||||||
|
return (true, "");
|
||||||
|
}
|
||||||
|
|
||||||
|
private string ComputeHash(string key)
|
||||||
|
{
|
||||||
|
if (key.IsNullOrEmpty())
|
||||||
|
throw new ArgumentException("ComputeHash: Key is null or empty.");
|
||||||
|
return Convert.ToBase64String(
|
||||||
|
SHA256.HashData(Encoding.UTF8.GetBytes(_salt + key + _salt))
|
||||||
|
);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,20 @@
|
||||||
|
<Project Sdk="Microsoft.NET.Sdk.Web">
|
||||||
|
|
||||||
|
<PropertyGroup>
|
||||||
|
<TargetFramework>net8.0</TargetFramework>
|
||||||
|
<Nullable>enable</Nullable>
|
||||||
|
<ImplicitUsings>enable</ImplicitUsings>
|
||||||
|
<RootNamespace>SiteManagementSystem_SoftwareEngineering_</RootNamespace>
|
||||||
|
<UserSecretsId>57011486-3ffe-4195-8276-49f577f48fd4</UserSecretsId>
|
||||||
|
<DockerDefaultTargetOS>Linux</DockerDefaultTargetOS>
|
||||||
|
</PropertyGroup>
|
||||||
|
|
||||||
|
<ItemGroup>
|
||||||
|
<PackageReference Include="IronPython" Version="3.4.1" />
|
||||||
|
<PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.10" />
|
||||||
|
<PackageReference Include="Microsoft.VisualStudio.Azure.Containers.Tools.Targets" Version="1.21.0" />
|
||||||
|
<PackageReference Include="Pomelo.EntityFrameworkCore.MySql" Version="8.0.2" />
|
||||||
|
<PackageReference Include="Swashbuckle.AspNetCore" Version="6.6.2" />
|
||||||
|
</ItemGroup>
|
||||||
|
|
||||||
|
</Project>
|
|
@ -0,0 +1,6 @@
|
||||||
|
@SiteManagementSystem_SoftwareEngineering__HostAddress = http://localhost:5244
|
||||||
|
|
||||||
|
GET {{SiteManagementSystem_SoftwareEngineering__HostAddress}}/weatherforecast/
|
||||||
|
Accept: application/json
|
||||||
|
|
||||||
|
###
|
|
@ -0,0 +1,8 @@
|
||||||
|
{
|
||||||
|
"Logging": {
|
||||||
|
"LogLevel": {
|
||||||
|
"Default": "Information",
|
||||||
|
"Microsoft.AspNetCore": "Warning"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
|
@ -0,0 +1,21 @@
|
||||||
|
{
|
||||||
|
"Logging": {
|
||||||
|
"LogLevel": {
|
||||||
|
"Default": "Information",
|
||||||
|
"Microsoft.AspNetCore": "Warning"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"ConnectionStrings": {
|
||||||
|
"SQL": "Server=host.docker.internal;Port=3306;Database=SiteManagementSystem;Uid=SiteManagementSystem;Pwd=SiteManagementSystem;"
|
||||||
|
},
|
||||||
|
"Jwt": {
|
||||||
|
"SecurityKey": "TheSecretKeyForIwutMail,RandomInfo:z#$WX%ec56rv^b8n",
|
||||||
|
"Issuer": "iwut-Mail",
|
||||||
|
"Audience": "iwut-app",
|
||||||
|
"AccessTokenExpire": 60,
|
||||||
|
"RefreshTokenExpire": 432000,
|
||||||
|
"RefreshTokenBefore": 10080
|
||||||
|
},
|
||||||
|
"SecretSalt": "@#$5$D55fR^YTF#S$D%F^4e5RT^e%^R67tED$5rf67tgS4ed5rf6g4d5f",
|
||||||
|
"AllowedHosts": "*"
|
||||||
|
}
|
Loading…
Reference in New Issue