使用HttpContext.SignInAsync实现简单的授权

1. 将认证添加到服务中

builder.Services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
            .AddCookie(options =>
            {
                //登入地址
                options.LoginPath = "/Account/FcbLogin/";
                //登出地址
                options.LogoutPath = "/Account/FcbLogout/";
                //设置cookie过期时长
                //options.ExpireTimeSpan = TimeSpan.FromSeconds(10);
            });

所有CookieAuthenticationOptions 属性可以查看微软官方文档

2. 注入管道

这里认证要在授权之前注入

app.UseAuthentication();

3. 添加登入和登出

这里我没有验证用户账号密码，只是写了登入和登出的相关代码，这里也可以喝注入认证那里一样，这是票证过期时间

[HttpPost]
public async Task<ActionResult> Login(UserLogin model)
{
    //这里的scheme一定要和注入服务的scheme一样
    var identity = new ClaimsIdentity(new ClaimsIdentity(CookieAuthenticationDefaults.AuthenticationScheme));
    //自定义的claim信息
    identity.AddClaim(new Claim("abc", "123"));
    AuthenticationProperties properties = new AuthenticationProperties()
    {
        //设置cookie票证的过期时间
        ExpiresUtc = DateTime.Now.AddDays(1),
        RedirectUri = model.ReturnUrl
    };
    await HttpContext.SignInAsync(CookieAuthenticationDefaults.AuthenticationScheme, new ClaimsPrincipal(identity), properties);
 
    if (string.IsNullOrEmpty(model.ReturnUrl))
    {
        return LocalRedirect("/");
    }
    return LocalRedirect(model.ReturnUrl);
}　　

[HttpGet]
public ActionResult FcbLoginOut()
{
    //AuthenticationProperties properties = new AuthenticationProperties()
    //{
    //    ExpiresUtc = DateTime.Now.AddDays(-100)
    //};
    HttpContext.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
    return Ok();
}