Google+/ Facebook的ASP认证.净的核心

我已经阅读了很多使用外部身份验证服务获得基本用户身份验证的指南，但我就是无法让这他妈的东西工作。

我从一个具有用户级安全性的"锅炉板"。net Core项目开始。我已经创建了我的Google和Facebook认证密钥，并包含了必要的库。我这样设置我的用户类:

public class ApplicationUser : IdentityUser<Guid>
{
    public string FirstName { get; set; }
    public string LastName { get; set; }
    public string MiddleName { get; set; }
    public string Nickname { get; set; }
}

我的Startup.cs文件是这样的:

public class Startup
{
    public Startup(IHostingEnvironment env)
    {
        var builder =
            new ConfigurationBuilder().SetBasePath(env.ContentRootPath)
                .AddJsonFile("appsettings.json", true, true)
                .AddJsonFile($"appsettings.{env.EnvironmentName}.json", true);
        if (env.IsDevelopment())
            builder.AddUserSecrets();
        builder.AddEnvironmentVariables();
        Configuration = builder.Build();
    }
    public IConfigurationRoot Configuration { get; }
    // This method gets called by the runtime. Use this method to add services to the container.
    public void ConfigureServices(IServiceCollection services)
    {
        // Add framework services.
        services.AddDbContext<ApplicationDbContext>(
            options => options.UseNpgsql(Configuration.GetConnectionString("ApplicationDb")));
        services.AddIdentity<ApplicationUser, ApplicationRole>(opt =>
            {
                opt.Password.RequireNonAlphanumeric = false;
                opt.Password.RequireUppercase = false;
                opt.Password.RequireLowercase = false;
                opt.Password.RequireDigit = false;
                opt.Password.RequiredLength = 8;
                opt.User.RequireUniqueEmail = true;
                opt.User.AllowedUserNameCharacters = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890-_=+~@.";
                opt.Lockout.DefaultLockoutTimeSpan = TimeSpan.FromMinutes(5);
                opt.Lockout.MaxFailedAccessAttempts = 5;
                opt.SignIn.RequireConfirmedEmail = true;
                opt.SignIn.RequireConfirmedPhoneNumber = false;
            })
            .AddEntityFrameworkStores<ApplicationDbContext, Guid>()
            .AddDefaultTokenProviders();
        services.AddMvc(options => { options.Filters.Add(new RequireHttpsAttribute()); });
        // Add application services.
        services.AddTransient<IEmailSender, AuthMessageSender>();
        services.AddTransient<ISmsSender, AuthMessageSender>();
    }
    // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
    public void Configure(IApplicationBuilder app, IHostingEnvironment env, ILoggerFactory loggerFactory)
    {
        loggerFactory.AddConsole(Configuration.GetSection("Logging"));
        loggerFactory.AddDebug();
        if (env.IsDevelopment())
        {
            app.UseDeveloperExceptionPage();
            app.UseDatabaseErrorPage();
            app.UseBrowserLink();
        }
        else
        {
            app.UseExceptionHandler("/Home/Error");
        }
        app.UseStaticFiles();
        app.UseIdentity();
        //Add external authentication middleware below.To configure them please see http://go.microsoft.com/fwlink/?LinkID=532715
        var facebookOptions = new FacebookOptions
        {
            AppId = Configuration["Authentication:Facebook:AppId"],
            AppSecret = Configuration["Authentication:Facebook:AppSecret"]
        };
        app.UseFacebookAuthentication(facebookOptions);
        var googleOptions = new GoogleOptions
        {
            ClientId = Configuration["Authentication:Google:AppId"],
            ClientSecret = Configuration["Authentication:Google:AppSecret"]
        };
        app.UseGoogleAuthentication(googleOptions);
        app.UseMvc(routes =>
        {
            routes.MapRoute("default", "{controller=Home}/{action=Index}/{id?}");
        });
    }
}

到目前为止，一切顺利。我启动项目，点击"Log In"链接，我可以选择用Google或者Facebook登录。我选择谷歌，然后…第一次尝试时，谷歌提示我需要批准，并指向Register页面，在那里我创建了我的本地帐户和昵称等。

现在，我可以添加一个本地密码到我的帐户。一切进展顺利。因此，我删除了cookie后，注销并尝试用我的谷歌凭证再次登录。令人惊讶的是，我再次被带到注册页面，但我无法注册，因为我已经注册了。我的本地密码也不能用。

所以我更深入地研究了一下。在AccountController中，有一种叫做ExternalLoginCallback的方法，所有的魔法似乎都发生了。我的方法是这样的:

    [HttpGet]
    [AllowAnonymous]
    public async Task<IActionResult> ExternalLoginCallback(string returnUrl = null, string remoteError = null)
    {
        if (remoteError != null)
        {
            ModelState.AddModelError(string.Empty, $"Error from external provider: {remoteError}");
            return View(nameof(Login));
        }
        var info = await _signInManager.GetExternalLoginInfoAsync();
        if (info == null)
            return RedirectToAction(nameof(Login));
        // Sign in the user with this external login provider if the user already has a login.
        var result = await _signInManager.ExternalLoginSignInAsync(info.LoginProvider, info.ProviderKey, false);
        if (result.Succeeded)
        {
            _logger.LogInformation(5, "User logged in with {Name} provider.", info.LoginProvider);
            return RedirectToLocal(returnUrl);
        }
        if (result.RequiresTwoFactor)
            return RedirectToAction(nameof(SendCode), new
            {
                ReturnUrl = returnUrl
            });
        if (result.IsLockedOut)
            return View("Lockout");
        // If the user does not have an account, then ask the user to create an account.
        ViewData["ReturnUrl"] = returnUrl;
        ViewData["LoginProvider"] = info.LoginProvider;
        var email = info.Principal.FindFirstValue(ClaimTypes.Email);
        var firstName = info.Principal.FindFirstValue(ClaimTypes.GivenName);
        var lastName = info.Principal.FindFirstValue(ClaimTypes.Surname);
        return View("ExternalLoginConfirmation", new ExternalLoginConfirmationViewModel
        {
            Email = email,
            FirstName = firstName,
            LastName = lastName
        });
    }

我跟踪代码，因为它通过_signInManager.GetExternalLoginInfoAsync()调用，和…结果为NotAllowed ?

NotAllowed是4种可能的结果之一，据我所知，其他3种是Succeeded, RequiresTwoFactor和IsLockedOut。其他3个值被发送到其他地方，所以我必须假设当没有本地帐户存在时NotAllowed是预期的…除了存在一个本地计数。

谁能告诉我这是怎么回事?一旦我注销了Google(或Facebook，那里也会发生同样的事情)，我就不能再登录了，而且几乎没有任何有用的反馈来确定实际问题是什么。

opt.SignIn.RequireConfirmedEmail = true;