从JSON客户端调用ServiceStack身份验证c#错误
本文关键字:身份验证 错误 ServiceStack 调用 JSON 客户端 | 更新日期: 2023-09-27 18:02:58
我创建了100多个没有任何网络安全的web服务。现在我想在现有的服务上实现网络安全。所以我从非常基本的身份验证(基本/自定义凭据)开始,通过下面的链接:
https://github.com/ServiceStack/ServiceStack/wiki/Authentication-and-authorization oauth2-providers .
但是我无法在测试时从JSON客户端验证服务堆栈web服务。我刚刚通过"CredentialsAuthProvider"创建了非常基本的网络安全。它总是返回错误
"The remote server returned an error: (401) Unauthorized."
我已经尝试过基本以及customecredential身份验证。我不知道我在哪里犯了错。
如果我直接从浏览器(Firefox或chrome)执行,它运行得很好,如下所示
1st time execute for authentication :
http://192.168.1.120/PatientMeasurementDatabase/auth/credentials?Username=john&Password=test
输出: Session Id uWv4e9BpSUwScur7KxD6
User Name John
Response Status
第二次执行:
http://192.168.1.120/PatientMeasurementDatabase/GetActiveUserId/
输出正常:
GetActiveUserId
kpugj_01_07_2015_12_44_23
isiqz_01_07_2015_12_49_08
jjrma_01_07_2015_13_48_56
----------- Servicestack webservice ApplicationHost.cs --------
public class CustomCredentialsAuthProvider : CredentialsAuthProvider
{
public override bool TryAuthenticate(IServiceBase authService,
string userName, string password)
{
return userName == "john" && password == "test";
}
}
public class ApplicationHost : AppHostHttpListenerBase
{
/// <summary>
/// This default constructor passes the name of our service “PersonService” as
/// well as all assemblies that need to be loaded – in this case we only need to
/// use the current assembly so I have passed that using typeof()
/// </summary>
public ApplicationHost()
: base("Patient Measurement Database", typeof(ApplicationHost).Assembly)
{
}
public override void Configure(Funq.Container container)
{
string database_path = Common.getDatabaseConnectionString();
container.Register<IDbConnectionFactory>(c => new OrmLiteConnectionFactory(database_path, MySqlDialectProvider.Instance));
using (var db = container.Resolve<IDbConnectionFactory>().Open())
{
CreateTables(db);
}
Plugins.Add(new CorsFeature()); //Enable CORS
Plugins.Add(new RazorFormat());
// register storage for user sessions
container.Register<ICacheClient>(new MemoryCacheClient());
container.Register<ISessionFactory>(c =>
new SessionFactory(
c.Resolve<ICacheClient>()));
Plugins.Add(new CorsFeature(allowedHeaders: "Content-Type, Authorization"));
Plugins.Add(new AuthFeature(() =>
new AuthUserSession(), new AuthProvider[]
{
new CustomCredentialsAuthProvider(),
}));
}
------------------------------- 服务类 -----------------
[Authenticate]
[Route("/GetActiveUserId ", "GET, POST")]
public class GetActiveUserId
{
}
public List<GetActiveUserId > Any(GetActiveUserId request)
{
try
{
CRUDFunctions objCRUDFunctions = new CRUDFunctions(Db);
var record = objCRUDFunctions.GetActiveUserId();
return record;
}
catch (Exception ex)
{
return null;
}
}
---------------------------- 客户端代码GET/POST请求Servicestack服务器如下。
try
{
string URL = ("http://192.168.1.120/MeasurementDatabase/json/reply/GetActiveUserId"
WebRequest req = WebRequest.Create(URL);
//WebRequest req = WebRequest.Create(address);
CredentialCache ch = new CredentialCache();
string UserId = "john";
string Password = "test";
string credentials = String.Format("{0}:{1}", UserId, Password);
byte[] bytes = Encoding.ASCII.GetBytes(credentials);
string base64 = Convert.ToBase64String(bytes);
string authorization = String.Concat("Credentials ", base64);
req.Headers.Add("Authorization", authorization);
req.Method = "POST";
// Create POST data and convert it to a byte array.
byte[] bytearray = Encoding.UTF8.GetBytes(Data);
// Set the ContentType property of the WebRequest.
req.ContentType = "application/json";
// Set the ContentLength property of the WebRequest.
req.ContentLength = bytearray.Length;
WebResponse resp = req.GetResponse();
StreamReader sr = new StreamReader(resp.GetResponseStream());
string str = sr.ReadToEnd().Trim();
resp.Close();
}
你可以直接使用c#/。. NET服务客户端可以轻松地使用经过身份验证的服务。
如果您正在使用CredentialsAuthProvider
,您可以使用:
var client = new JsonServiceClient(BaseUrl);
var authResponse = client.Post(new Authenticate {
provider = CredentialsAuthProvider.Name, //= credentials
UserName = "test@gmail.com",
Password = "p@55w0rd",
RememberMe = true,
});
在您成功验证服务客户端client
实例后,将填充已验证会话cookie,然后允许调用已验证的服务,例如:
var response = client.Get(new GetActiveUserId());
如果你也注册了BasicAuthProvider
,它将使你的服务接受HTTP基本身份验证,这是内置的服务客户端,你可以在服务客户端上填充:
client.UserName = "test@gmail.com";
client.Password = "p@55w0rd";
也允许你访问受保护的服务,例如:
var response = client.Get(new GetActiveUserId());
虽然在幕后它最终发出2个请求,第一个请求发送一个正常的请求,它将被拒绝与401 Unauthorized
,如果服务器表示它已启用BasicAuthProvider
,它将重新发送请求与HTTP基本认证凭证。
您可以通过指定客户端应该总是在每个请求时发送基本验证来节省额外验证挑战请求的延迟:
client.AlwaysSendBasicAuthHeader = true;