-
Notifications
You must be signed in to change notification settings - Fork 34
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
OAuthServer登录成功后根据code先换取token，再请求用户信息
- Loading branch information
Showing
7 changed files
with
206 additions
and
25 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -33,3 +33,4 @@ bld/ | |
| /XCode/Sharding/Config | ||
| /XCode/Demo/Config | ||
| /XCode/Membership | ||
| /Keys | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,96 @@ | ||
| using System; | ||
| using System.IO; | ||
| using NewLife.Security; | ||
|
|
||
| namespace NewLife.Web | ||
| { | ||
| /// <summary>令牌提供者</summary> | ||
| public class TokenProvider | ||
| { | ||
| #region 属性 | ||
| /// <summary>密钥。签发方用私钥，验证方用公钥</summary> | ||
| public String Key { get; set; } | ||
| #endregion | ||
|
|
||
| #region 方法 | ||
| /// <summary>读取密钥</summary> | ||
| /// <param name="file">文件</param> | ||
| /// <param name="generate">是否生成</param> | ||
| /// <returns></returns> | ||
| public Boolean ReadKey(String file, Boolean generate = false) | ||
| { | ||
| if (file.IsNullOrEmpty()) return false; | ||
|
|
||
| file = file.GetFullPath(); | ||
| if (File.Exists(file)) | ||
| { | ||
| Key = File.ReadAllText(file); | ||
|
|
||
| if (!Key.IsNullOrEmpty()) return true; | ||
| } | ||
|
|
||
| if (!generate || !file.EndsWithIgnoreCase(".prvkey")) return false; | ||
|
|
||
| var ss = DSAHelper.GenerateKey(); | ||
| File.WriteAllText(file.EnsureDirectory(true), ss[0]); | ||
| file = Path.ChangeExtension(file, ".pubkey"); | ||
| File.WriteAllText(file, ss[1]); | ||
|
|
||
| Key = ss[0]; | ||
|
|
||
| return true; | ||
| } | ||
|
|
||
| /// <summary>编码用户和有效期得到令牌</summary> | ||
| /// <param name="user">用户</param> | ||
| /// <param name="expire">有效期</param> | ||
| /// <returns></returns> | ||
| public String Encode(String user, DateTime expire) | ||
| { | ||
| if (user.IsNullOrEmpty()) throw new ArgumentNullException(nameof(user)); | ||
| if (expire.Year < 2000) throw new ArgumentOutOfRangeException(nameof(expire)); | ||
| if (Key.IsNullOrEmpty()) throw new ArgumentNullException(nameof(Key)); | ||
|
|
||
| var dt = new DateTime(1970, 1, 1); | ||
| var secs = (Int32)(expire - dt).TotalSeconds; | ||
|
|
||
| // 拼接数据并签名 | ||
| var data = (user + "," + secs).GetBytes(); | ||
| var sig = DSAHelper.Sign(data, Key); | ||
|
|
||
| // Base64拼接数据和签名 | ||
| return data.ToUrlBase64() + "." + sig.ToUrlBase64(); | ||
| } | ||
|
|
||
| /// <summary>令牌解码得到用户和有效期</summary> | ||
| /// <param name="token">令牌</param> | ||
| /// <param name="expire">有效期</param> | ||
| /// <returns></returns> | ||
| public String Decode(String token, out DateTime expire) | ||
| { | ||
| if (token.IsNullOrEmpty()) throw new ArgumentNullException(nameof(token)); | ||
| if (Key.IsNullOrEmpty()) throw new ArgumentNullException(nameof(Key)); | ||
| expire = DateTime.MinValue; | ||
|
|
||
| // Base64拆分数据和签名 | ||
| var p = token.IndexOf('.'); | ||
| var data = token.Substring(0, p).ToBase64(); | ||
| var sig = token.Substring(p + 1).ToBase64(); | ||
|
|
||
| // 验证签名 | ||
| //if (!DSAHelper.Verify(data, Key, sig)) throw new InvalidOperationException("签名验证失败！"); | ||
| if (!DSAHelper.Verify(data, Key, sig)) return null; | ||
|
|
||
| // 拆分数据和有效期 | ||
| var str = data.ToStr(); | ||
| p = str.LastIndexOf(','); | ||
|
|
||
| var user = str.Substring(0, p); | ||
| var secs = str.Substring(p + 1).ToInt(); | ||
| expire = new DateTime(1970, 1, 1).AddSeconds(secs); | ||
|
|
||
| return user; | ||
| } | ||
| #endregion | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters