Exemplos de IdentityServer4.AccessTokenValidation CombinedAuthenticationOptions.TokenRetriever em C# (CSharp)

Exemplo n.º 1

        public async Task Invoke(HttpContext context)
        {
            var  token       = _options.TokenRetriever(context.Request);
            bool removeToken = false;

            try
            {
                if (token != null)
                {
                    removeToken = true;

                    context.Items.Add(_tokenKey, token);

                    // seems to be a JWT
                    if (token.Contains('.'))
                    {
                        // see if local validation is setup
                        if (_jwtNext != null)
                        {
                            await _jwtNext(context);

                            return;
                        }
                        // otherwise use introspection endpoint
                        if (_introspectionNext != null)
                        {
                            await _introspectionNext(context);

                            return;
                        }

                        _logger.LogWarning("No validator configured for JWT token");
                    }
                    else
                    {
                        // use introspection endpoint
                        if (_introspectionNext != null)
                        {
                            await _introspectionNext(context);

                            return;
                        }

                        _logger.LogWarning("No validator configured for reference token. Ensure ApiName and ApiSecret have been configured to use introspection.");
                    }
                }

                await _nopNext(context);
            }
            finally
            {
                if (removeToken)
                {
                    context.Items.Remove(_tokenKey);
                }
            }
        }

Exemplo n.º 2

        public async Task Invoke(HttpContext context)
        {
            var token = _options.TokenRetriever(context.Request);

            if (token == null)
            {
                await _nopNext(context);

                return;
            }

            context.Items.Add("idsrv4:tokenvalidation:token", token);

            // seems to be a JWT
            if (token.Contains('.'))
            {
                // see if local validation is setup
                if (_jwtNext != null)
                {
                    await _jwtNext(context);

                    return;
                }
                // otherwise use introspection endpoint
                if (_introspectionNext != null)
                {
                    await _introspectionNext(context);

                    return;
                }

                _logger.LogWarning("No validator configured for JWT token");
            }
            else
            {
                // use introspection endpoint
                if (_introspectionNext != null)
                {
                    await _introspectionNext(context);

                    return;
                }

                _logger.LogWarning("No validator configured for reference token");
            }

            await _next(context);
        }

Exemplo n.º 3

Arquivo: IdentityServerAuthenticationMiddleware.cs Projeto: obosha/IdentityServer4.AccessTokenValidation

        public async Task Invoke(HttpContext context)
        {
#if NET452
            // The following line forces HttpClient to negotiate with latest versions of TLS when targeting your build at NET452
            System.Net.ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12 | SecurityProtocolType.Tls11 | SecurityProtocolType.Tls;
#endif

            var  token       = _options.TokenRetriever(context.Request);
            bool removeToken = false;

            try
            {
                if (token != null)
                {
                    removeToken = true;

                    context.Items.Add(_tokenKey, token);

                    // seems to be a JWT
                    if (token.Contains('.'))
                    {
                        // see if local validation is setup
                        if (_jwtNext != null)
                        {
                            await _jwtNext(context);

                            return;
                        }
                        // otherwise use introspection endpoint
                        if (_introspectionNext != null)
                        {
                            await _introspectionNext(context);

                            return;
                        }

                        _logger.LogWarning("No validator configured for JWT token");
                    }
                    else
                    {
                        // use introspection endpoint
                        if (_introspectionNext != null)
                        {
                            await _introspectionNext(context);

                            return;
                        }

                        _logger.LogWarning("No validator configured for reference token. Ensure ApiName and ApiSecret have been configured to use introspection.");
                    }
                }

                await _nopNext(context);
            }
            finally
            {
                if (removeToken)
                {
                    context.Items.Remove(_tokenKey);
                }
            }
        }