开式SSO

Question

当用户从site https://www.siteA.com登录时，将记录身份验证cookie。

我想使用https://www.siteB.com从site User.Identity.Name读取这个身份验证cookie。

如何配置站点Program.cs(ASP.NET Core6.0)的站点https://www.siteA.com和站点https://www.siteB.com？

      using AuthorizationServer.Models;
      using Microsoft.AspNetCore.Authentication.Cookies;
      using Microsoft.EntityFrameworkCore;

      var builder = WebApplication.CreateBuilder(args);

      builder.Services.AddDbContext<DbContext>(options =>
        {
          options.UseInMemoryDatabase(nameof(DbContext));
          options.UseOpenIddict();
        });

       builder.Services.AddOpenIddict()

           .AddCore(options =>
             {
               options.UseEntityFrameworkCore()
              .UseDbContext<DbContext>();
             })

           .AddServer(options =>
             {
              options
                 .AllowClientCredentialsFlow();

              options
                .SetTokenEndpointUris("/connect/token");

              options
               .AddEphemeralEncryptionKey()
               .AddEphemeralSigningKey();

              options.RegisterScopes("api");

              options
               .UseAspNetCore()
               .EnableTokenEndpointPassthrough();
         });

        builder.Services.AddHostedService<TestData>();
        builder.Services.AddControllersWithViews();

       builder.Services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
          .AddCookie(CookieAuthenticationDefaults.AuthenticationScheme, options =>
                 {
                  options.LoginPath = "/account/login";
                 });

        var app = builder.Build();

        if (app.Environment.IsDevelopment())
        {
          app.UseDeveloperExceptionPage();
        }

        app.UseStaticFiles();

        app.UseRouting();

        app.UseAuthentication();

        app.UseEndpoints(endpoints =>
           {
             endpoints.MapDefaultControllerRoute();
           });


        app.Run();

Answer 1

您可以在客户端应用程序中使用ASP.Net核心数据保护键配置(即SiteA和SiteB)。

看看这个。https://github.com/openiddict/openiddict-core/issues/1109

而这个https://learn.microsoft.com/en-us/aspnet/core/security/data-protection/configuration/overview?view=aspnetcore-3.1

希望这能帮上忙