调试WebApi2登录(/Token)端点

Question

使用.NET WebApi2:在试图登录到/Token端点的WebApi时，我得到了一个500个内部服务器错误。

我知道Startup.Auth中有一些配置参数，但是是存在的，我可以设置一个断点，或者以其他方式查看服务器上显示的内容？(例如，在身份验证检查发生之前，以及在--不寻找Fiddler类型的拦截解决方案之后)。

Answer 1

在提供者/ApplicationOAuthProvider.cs中调试GrantResourceOwnerCredentials方法

Answer 2

您可以将Visual配置为中断所有异常，然后在抛出错误时获取有关错误的更多信息。

在Visual 2013中，调试菜单，异常，标记与CLR异常相关的两个斑点，如图像所示：

​

​

Answer 3

你可以调试它..。但是您需要实现您自己的ApplicationOAuthProvider，它应该从这个类继承: OAuthAuthorizationServerProvider

例如：

 public class MyTokenProvider : OAuthAuthorizationServerProvider
{
    private readonly string _publicClientId;

    public MyTokenProvider(string publicClientId)
    {
        if (publicClientId == null)
        {
            throw new ArgumentNullException("publicClientId");
        }

        _publicClientId = publicClientId;
    }

    public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
    {
        var userManager = context.OwinContext.GetUserManager<ApplicationUserManager>();

        ApplicationUser user = await userManager.FindAsync(context.UserName, context.Password);

        if (user == null)
        {
            context.SetError("invalid_grant", "The user name or password is incorrect.");
            return;
        }

        ClaimsIdentity oAuthIdentity = await user.GenerateUserIdentityAsync(userManager,
           OAuthDefaults.AuthenticationType);
        ClaimsIdentity cookiesIdentity = await user.GenerateUserIdentityAsync(userManager,
            CookieAuthenticationDefaults.AuthenticationType);

        AuthenticationProperties properties = CreateProperties(user.UserName);
        AuthenticationTicket ticket = new AuthenticationTicket(oAuthIdentity, properties);
        context.Validated(ticket);
        context.Request.Context.Authentication.SignIn(cookiesIdentity);
    }

    public override Task TokenEndpoint(OAuthTokenEndpointContext context)
    {
        foreach (KeyValuePair<string, string> property in context.Properties.Dictionary)
        {
            context.AdditionalResponseParameters.Add(property.Key, property.Value);
        }

        return Task.FromResult<object>(null);
    }

    public override Task ValidateClientAuthentication(OAuthValidateClientAuthenticationContext context)
    {
        // Resource owner password credentials does not provide a client ID.
        if (context.ClientId == null)
        {
            context.Validated();
        }

        return Task.FromResult<object>(null);
    }

    public override Task ValidateClientRedirectUri(OAuthValidateClientRedirectUriContext context)
    {
        if (context.ClientId == _publicClientId)
        {
            Uri expectedRootUri = new Uri(context.Request.Uri, "/");

            if (expectedRootUri.AbsoluteUri == context.RedirectUri)
            {
                context.Validated();
            }
        }

        return Task.FromResult<object>(null);
    }

    public static AuthenticationProperties CreateProperties(string userName)
    {
        IDictionary<string, string> data = new Dictionary<string, string>
        {
            { "userName", userName }
        };
        return new AuthenticationProperties(data);
    }
}

显然，您需要将其设置为默认提供程序，这可以通过您的Startup.Auth.cs来完成。

示例：

            OAuthOptions = new OAuthAuthorizationServerOptions
        {
            TokenEndpointPath = new PathString("/Token"),
            Provider = new MyTokenProvider(PublicClientId),
            AuthorizeEndpointPath = new PathString("/api/Account/ExternalLogin"),
            AccessTokenExpireTimeSpan = TimeSpan.FromDays(14),
            AllowInsecureHttp = true
        };

那么您可以调试它:)