【发布时间】:2014-08-22 02:38:34
【问题描述】:
我将 Owin (OAuth)、ASP.NET WebApi2 和 Unity 与基于 OAuthAuthorizationServerProvider 的自定义授权服务器提供程序 (SimpleAuthorizationServerProvider) 一起使用,但我实现了工作单元和存储库模式。 我的问题是解决 Startup 类中的依赖关系,我的意思是 Startup 类需要 SimpleAuthorizationServerProvider 和 SimpleAuthorizationServerProvider 需要 IUserOrchestration 和 IUnitOfWorkFactory。 SimpleAuthorizationServerProvider 中的依赖关系很好,问题出在 Startup 类中,因为 Startup 类必须有没有参数的构造函数并且属性注入不起作用 - 依赖项注入太晚了。 只有有效的解决方案是基于 ServiceLocator 的,老实说,这是个坏主意。 我需要找到另一个可行的解决方案...
public class Startup
{
private SimpleAuthorizationServerProvider _simpleProvider;
public void Configuration(IAppBuilder app)
{
HttpConfiguration config = new HttpConfiguration();
// Create instance for Unity container - let's try to run!
var container = new UnityContainer();
config.DependencyResolver = new UnityResolver(container);
// Include project classes to IoC container
new CommonUnityConfiguration().Configurate(container);
new RepositoryUnityConfiguration().Configurate(container);
new OrchestrationUnityConfiguration().Configurate(container);
new ServerUnityConfiguration().Configurate(container);
// HERE COMES PROBLEMATIC LINE
_simpleProvider = container.Resolve<SimpleAuthorizationServerProvider>(); // Ugh! ServiceLocator - not pretty, but how can I replace it? :(
ConfigureOAuth(app);
WebApiConfig.Register(config);
app.UseCors(Microsoft.Owin.Cors.CorsOptions.AllowAll); // enable CORS
app.UseWebApi(config);
}
public void ConfigureOAuth(IAppBuilder app)
{
OAuthAuthorizationServerOptions OAuthServerOptions = new OAuthAuthorizationServerOptions()
{
AllowInsecureHttp = true,
TokenEndpointPath = new PathString("/token"),
AccessTokenExpireTimeSpan = TimeSpan.FromDays(1),
Provider = _simpleProvider
};
// Token Generation
app.UseOAuthAuthorizationServer(OAuthServerOptions);
app.UseOAuthBearerAuthentication(new OAuthBearerAuthenticationOptions());
}
}
SimpleAuthorizationServerProvider 的实现:
public class SimpleAuthorizationServerProvider : OAuthAuthorizationServerProvider
{
private readonly IUserOrchestration _userOrchestration;
private readonly IUnitOfWorkFactory _unitOfWorkFactory;
public SimpleAuthorizationServerProvider(IUserOrchestration userOrchestration, IUnitOfWorkFactory unitOfWorkFactory)
{
_userOrchestration = userOrchestration;
_unitOfWorkFactory = unitOfWorkFactory;
}
public override async Task ValidateClientAuthentication(OAuthValidateClientAuthenticationContext context)
{
context.Validated();
}
public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
{
context.OwinContext.Response.Headers.Add("Access-Control-Allow-Origin", new[] { "*" });
using (IUnitOfWork uow = _unitOfWorkFactory.Create())
{
var user = _userOrchestration.FindUser(context.UserName);
if (user == null)
{
context.SetError("invalid_grant", "The user name or password is incorrect.");
return;
}
}
var identity = new ClaimsIdentity(context.Options.AuthenticationType);
identity.AddClaim(new Claim("sub", context.UserName));
identity.AddClaim(new Claim("role", "user"));
context.Validated(identity);
}
}
【问题讨论】:
-
你找到解决办法了吗,我也有同样的问题。谢谢 :)
标签: c# asp.net-web-api oauth unity-container owin