MiniAuth - 轻量级.Net开源身份认证中间件

文章目录

.NetCore身份认证组件MiniAuth

安装MiniAuth组件

install-package MiniAuth

在Startup/Program配置和启用MiniAuth

var builder = WebApplication.CreateBuilder(args);//注入MiniAuth（越早注入越好）
            builder.Services.AddMiniAuth(miniAuthOption =>{//修改认证类型
                miniAuthOption.AuthenticationType = AuthType.BearerJwt;//修改秘钥
                miniAuthOption.JWTKey =newSymmetricSecurityKey(Encoding.UTF8.GetBytes("cvzRqFw9m7HPNePy"));//修改MiniAuth数据库链接
                miniAuthOption.SqliteConnectionString ="Source=lingbug_miniauth_identity.db";});

            builder.Services.AddControllers();
            builder.Services.AddEndpointsApiExplorer();
            builder.Services.AddSwaggerGen();var app = builder.Build();if(app.Environment.IsDevelopment()){
                app.UseSwagger();
                app.UseSwaggerUI();}

            app.UseHttpsRedirection();
            app.UseAuthorization();
            app.MapControllers();

            app.Run();

MiniAuth默认配置

internalclassMiniAuthOption{publicstaticstring RoutePrefix ="MiniAuth";publicstaticstring LoginPath =$"/{RoutePrefix}/login.html";publicstaticbool DisableMiniAuthLogin =false;publicstaticAuthType AuthenticationType = AuthType.Cookie;publicstaticSecurityKey JWTKey =newSymmetricSecurityKey(Encoding.UTF8.GetBytes("this is miniauth key for demo"));/// <summary>/// Token expires in seconds, default is 1 hour/// </summary>publicstaticint TokenExpiresIn =60*60;publicstaticstring Issuer =$"{RoutePrefix}";publicstaticstring SqliteConnectionString ="Data Source=miniauth_identity.db";}

MiniAuth认证类型枚举

publicenumAuthType{
        Cookie,
        BearerJwt
    }

配置完成，启动项目，访问管理界面

• 地址：http://localhost:5025/MiniAuth/index.html
• 注意：首次访问会提示未授权，登录后即可正常访问
• 登录管理界面账号密码：
• 账号：admin@mini-software.github.io
• 密码：E7c4f679-f379-42bf-b547-684d456bc37f（请及时修改密码）

管理界面的端口（Endpoints 管理）

名称路由HTTP: POST /MiniAuth/refreshToken/MiniAuth/refreshTokenHTTP: POST /MiniAuth/login/MiniAuth/loginHTTP: POST /MiniAuth/api/saveUser/MiniAuth/api/saveUserHTTP: POST /MiniAuth/api/saveRole/MiniAuth/api/saveRoleHTTP: POST /MiniAuth/api/resetPassword/MiniAuth/api/resetPasswordHTTP: POST /MiniAuth/api/getUsers/MiniAuth/api/getUsersHTTP: POST /MiniAuth/api/getConfig/MiniAuth/api/getConfigHTTP: POST /MiniAuth/api/deleteUser/MiniAuth/api/deleteUserHTTP: POST /MiniAuth/api/deleteRole/MiniAuth/api/deleteRoleHTTP: GET /MiniAuth/logout/MiniAuth/logoutHTTP: GET /MiniAuth/api/getUserInfo/MiniAuth/api/getUserInfoHTTP: GET /MiniAuth/api/getRoles/MiniAuth/api/getRolesHTTP: GET /MiniAuth/api/getAllEndpoints/MiniAuth/api/getAllEndpointsHTTP: GET /MiniAuth/AccessDenied/MiniAuth/AccessDenied