设置身份验证令牌配置文件标头

Question

我有一个我正在连接的 OpenIdConnect 服务器，我想在第一次登录时转发令牌数据以存储在服务器上。目前我这样做是为了转发访问令牌

var xhr = new XMLHttpRequest();
xhr.open("GET", url);
xhr.onload = function () {
    log(xhr.status, JSON.parse(xhr.responseText));
}
xhr.setRequestHeader("Authorization", "Bearer " + user.access_token);
xhr.send();

我也想发送配置文件数据，但我不知道正确的标题。 我该怎么做这样的事情：

xhr.setRequestHeader("Authorization-Profile", "Bearer " + user.profile);

有谁知道正确的标头，所以我可以将这些声明添加到访问令牌中。

Answer 1

以下是我们在其中一个项目中所做的示例：

创建了一个通用的 API 响应类如下：

public class ApiCommonResponse
{
    public object Object { get; set; }
    public int httpStatus { get; set; }
    public string httpErrorMessage { get; set; }
}

以及调用 GET 和 POST API 端点的通用方法。此方法会将响应映射到提供的数据模型并返回对象。

public static ApiCommonResponse GetApiData<T>(string token, T dataModel, string apiEndPoint = null)
{
    var responseText = "";
    var apiCommonResponse = new ApiCommonResponse();
    if (apiEndPoint != null)
    {
        var request = (HttpWebRequest)WebRequest.Create(apiEndPoint);
        request.Method = "GET";
        request.ContentType = "application/json";
        request.Headers.Add("Authorization", "Bearer " + token);
        request.Headers.Add("X-Api-Version", "");
        try
        {
            var httpResponse = (HttpWebResponse)request.GetResponse();
            var stream = httpResponse.GetResponseStream();
            if (stream != null)
            {
                using (var streamReader = new StreamReader(stream))
                {
                    responseText = streamReader.ReadToEnd();
                }
            }
        }
        catch (WebException we)
        {
            var stream = we.Response.GetResponseStream();
            if (stream != null)
            {
                var resp = new StreamReader(stream).ReadToEnd();
                dynamic obj = JsonConvert.DeserializeObject(resp);
                throw new Exception(obj.ToString());
            }
        }
    }

    var jsonSettings = new JsonSerializerSettings { MissingMemberHandling = MissingMemberHandling.Ignore };
    apiCommonResponse.Object = JsonConvert.DeserializeObject<T>(responseText, jsonSettings);
    apiCommonResponse.httpStatus = 0;
    return apiCommonResponse;
}

public static ApiCommonResponse PostApiData<T>(string username, string token, T dataModel, string apiEndPoint = null)
{
    var apiCommonResponse = new ApiCommonResponse();

    if (apiEndPoint == null) return null;

    var webRequest = WebRequest.Create(apiEndPoint);
    webRequest.Method = "POST";
    webRequest.Timeout = 20000;
    webRequest.ContentType = "application/json";
    request.Headers.Add("Authorization", "Bearer " + token);
    webRequest.Headers.Add("X-Api-Version", "");

    using (var requeststreams = webRequest.GetRequestStream())
    {
        using (var sw = new StreamWriter(requeststreams))
        {
            sw.Write(JsonConvert.SerializeObject(dataModel));
        }
    }
    try
    {
        var httpStatus = (((HttpWebResponse)webRequest.GetResponse()).StatusCode);
        var httpMessage = (((HttpWebResponse)webRequest.GetResponse()).StatusDescription);
        using (var s = webRequest.GetResponse().GetResponseStream())
        {
            if (s == null) return null;

            using (var sr = new StreamReader(s))
            {
                var responseObj = sr.ReadToEnd();
                if (!string.IsNullOrEmpty(responseObj))
                {
                    apiCommonResponse = JsonConvert.DeserializeObject<ApiCommonResponse>(responseObj);
                }
            }
            apiCommonResponse.httpStatus = (int)httpStatus;
            apiCommonResponse.httpErrorMessage = httpMessage;
            apiCommonResponse.Object = apiCommonResponse.Object;

        }
    }
    catch (WebException we)
    {
        var stream = we.Response.GetResponseStream();
        if (stream != null)
        {
            var resp = new StreamReader(stream).ReadToEnd();
            dynamic obj = JsonConvert.DeserializeObject(resp);
            throw new Exception(obj.ToString());
        }
    }
    return apiCommonResponse;
}