ASP.NET Identity入门与实战教程：用户管理与认证授权

5星 · 超过95%的资源需积分: 9 81 浏览量更新于2024-07-21 收藏 2.99MB PDF 举报

ASP.NET Identity教程是一份详尽的指南，它涵盖了微软在ASP.NET MVC 5平台上实现用户管理、身份验证与授权的核心技术。该教程由Adam Freeman撰写，翻译者是林逸，旨在帮助开发者全面理解和应用这一关键技术。教程内容分为两部分：13-15章，分别介绍ASP.NET Identity的基本概念、实现步骤和实际应用。在“身份初步”章节中，作者引导读者从准备示例项目开始，逐步搭建ASP.NET Identity所需的数据库，如创建Identity数据库并添加必要的Entity Framework类。教程详细介绍了如何操作用户账号，包括创建新用户、验证口令以及验证用户信息的完整性。在“运用ASP.NET Identity”部分，教程深入讲解了认证和授权的过程。首先，读者将学习如何认证用户，理解整个认证流程，并实现相关的代码来处理用户的登录请求。接着，教程展示了如何通过角色来授权用户，包括添加角色支持、创建和管理角色，以及在视图层面实现角色权限控制。这个教程强调了实践的重要性，鼓励读者在阅读的同时跟随示例进行动手操作，以便更好地理解和掌握ASP.NET Identity。此外，对于英语不熟练的读者，可以在翻译者的博客园网站上阅读中文版，隐藏英文内容进行学习。 ASP.NET Identity教程提供了一个全面的学习平台，无论是初学者还是经验丰富的开发人员，都能从中受益匪浅，提升在ASP.NET MVC 5环境中构建安全、可管理的应用程序的能力。通过深入学习和实践，开发者将能够有效地应用这项技术，增强应用程序的安全性和用户体验。

Table 13-2. The Properties Defined by the IdentityUser Class

表

13-2. IdentityUser

类定义的属性

Name

名称

Description

描述

Claims

Returns the collection of claims for the user, which I describe in Chapter 15

返回用户的声明集合，关于声明（Claims）将在第15章描述

Returns the user's e-mail address

返回用户的E-mail地址

Returns the unique ID for the user

返回用户的唯一ID

Logins

Returns a collection of logins for the user, which I use in Chapter 15

返回用户的登录集合，将在第15章中使用

PasswordHash

Returns a hashed form of the user password, which I use in the “Implementing the Edit Feature” section

返回哈希格式的用户口令，在“实现Edit特性”中会用到它

Roles

Returns the collection of roles that the user belongs to, which I describe in Chapter 14

返回用户所属的角色集合，将在第14章描述

PhoneNumber

Returns the user's phone number

返回用户的电话号码

SecurityStamp

Returns a value that is changed when the user identity is altered, such as by a password change

返回变更用户标识时被修改的值，例如被口令修改的值

UserName

Returns the username

■Tip The classes in the Microsoft.AspNet.Identity.EntityFramework namespace are the

Entity Framework–specific concrete implementations of interfaces defined in the

Microsoft.AspNet.Identity namespace. IdentityUser, for example, is the implementation of the

IUser interface. I am working with the concrete classes because I am relying on the Entity Framework to

store my user data in a database, but as ASP.NET Identity matures, you can expect to see alternative

implementations of the interfaces that use different storage mechanisms (although most projects will still

use the Entity Framework since it comes from Microsoft).

提示：Microsoft.AspNet.Identity.EntityFramework命名空间中的类是，

Microsoft.AspNet.Identity命名空间中所定义接口的Entity Framework专用的具体实现。例如，

IdentityUser便是IUser接口的实现。我会使用这些具体类，因为我要依靠Entity Framework在数据库

中存储我的用户数据，等到ASP.NET Identity变得成熟时，你可能会期望看到这些接口的其他实现，它们

使用了不同的存储机制（当然，大多数项目仍然会使用Entity Framework，因为它来自于微软）。

What is important at the moment is that the IdentityUser class provides access only to the basic

information about a user: the use's name, e-mail, phone, password hash, role memberships, and so on. If I

want to store any additional information about the user, I have to add properties to the class that I derive

from IdentityUser and that will be used to represent users in my application. I demonstrate how to do

this in Chapter 15.

目前最重要的是这个IdentityUser类只提供了对用户基本信息的访问：用户名、E-mail、电话、哈希

口令、角色成员等等。如果希望存储用户的各种附加信息，就需要在IdentityUser派生的类上添加属

性，并将它用于表示应用程序中的用户，第15章中将演示其做法。

To create the user class for my application, I created a class file called AppUserModels.cs in the

Models folder and used it to create the AppUser class, which is shown in Listing 13-5.

为了创建应用程序中的用户类，我在Models文件夹中创建了一个类文件，名称为AppUserModels.cs

（注意，这个文件名称错了，应当是AppUser.cs），并用它创建了AppUser类，这个类如清单13-5所

示。

Listing 13-5. The Contents of the AppUser.cs File

清单

13-5. AppUser.cs

文件的内容

using System;

using Microsoft.AspNet.Identity.EntityFramework;

namespace Users.Models {

public class AppUser : IdentityUser {

// additional properties will go here

// 这里将放置附加属性

}

That's all I have to do at the moment, although I'll return to this class in Chapter 15, when I show you

how to add application-specific user data properties.

以上便是此刻要做的全部工作，第15章会再次讨论这个类，那时会演示如何添加应用程序专用的用户数

据属性。

2. Creating the Database Context Class

2. 创建数据库上下文类

The next step is to create an Entity Framework database context that operates on the AppUser class.

This will allow the Code First feature to create and manage the schema for the database and provide access

to the data it stores. The context class is derived from IdentityDbContext<T>, where T is the user class

(AppUser in the example). I created a folder called Infrastructure in the project and added to it a class

file called AppIdentityDbContext.cs, the contents of which are shown in Listing 13-6.

下一个步骤是创建Entity Framework数据库的上下文，用于对AppUser类进行操作。这可以用Code First

特性来创建和管理数据架构，并对数据库所存储的数据进行访问。这个上下文类派生于

IdentityDbContext<T>，其中的T是用户类（即此例中的AppUser）。我在项目中创建了一个文件夹，

名称为Infrastructure，并在其中添加了一个类文件，名称为AppIdentityDbContext.cs，其内容

如清单13-6所示。

Listing 13-6. The Contents of the AppIdentityDbContext.cs File

清单

13-6. AppIdentityDbContext.cs

文件的内容

using System.Data.Entity;

using Microsoft.AspNet.Identity.EntityFramework;

using Users.Models;

namespace Users.Infrastructure {

public class AppIdentityDbContext : IdentityDbContext<AppUser> {

public AppIdentityDbContext() : base("IdentityDb") { }

static AppIdentityDbContext() {

Database.SetInitializer<AppIdentityDbContext>(new IdentityDbInit());

}

public static AppIdentityDbContext Create() {

return new AppIdentityDbContext();

}

public class IdentityDbInit

: DropCreateDatabaseIfModelChanges<AppIdentityDbContext> {

protected override void Seed(AppIdentityDbContext context) {

PerformInitialSetup(context);

base.Seed(context);

}

public void PerformInitialSetup(AppIdentityDbContext context) {

// initial configuration will go here

// 初始化配置将放在这儿

}

The constructor for the AppIdentityDbContext class calls its base with the name of the connection

string that will be used to connect to the database, which is IdentityDb in this example. This is how I

associate the connection string I defined in Listing 13-4 with ASP.NET Identity.

这个AppIdentityDbContext类的构造器调用了它的基类，其参数是连接字符串的名称，IdentityDb，

用于与数据库连接。这是让清单13-4定义的连接字符串与ASP.NET Identity联结起来的方法。

The AppIdentityDbContext class also defines a static constructor, which uses the

Database.SetInitializer method to specify a class that will seed the database when the schema is first

created through the Entity Framework Code First feature. My seed class is called IdentityDbInit, and I

have provided just enough of a class to create a placeholder so that I can return to seeding the database later

by adding statements to the PerformInitialSetup method. I show you how to seed the database in

Chapter 14.

这个AppIdentityDbContext类还定义了一个静态的构造器，它使用Database.SetInitializer方法

指定了一个种植数据库的类（种植数据库的含义是往数据库中植入数据的意思，说穿了，就是用一些数

据对数据库进行初始化——译者注），当通过Entity Framework的Code First特性第一次创建数据库架构

时，会用到这个类。这个种植类叫做IdentityDbInit，而且我已经提供了一个类，创建了一个占位符，

后面可以回过头来在PerformInitialSetup方法中添加语句，就可以种植数据库了。第14章将演示如

何种植数据库。

Finally, the AppIdentityDbContext class defines a Create method. This is how instances of the class

will be created when needed by the OWIN, using the class I describe in the “Creating the Start Class” section.

最后，AppIdentityDbContext类定义了一个Create方法。这是由OWIN在必要时创建类实例的办法，

这个由OWIN使用的类将在“创建启动类”中进行描述。

■Note Don't worry if the role of these classes doesn't make sense. If you are unfamiliar with the Entity

Framework, then I suggest you treat it as something of a black box. Once the basic building blocks are in

place—and you can copy the ones into your chapter to get things working—then you will rarely need to edit

them.

注：如果对这些类的意义无法理解，不用担心。如果不熟悉Entity Framework，我建议你将它视为是某

种黑箱事物。一旦基础构建块就绪——而且对本章的这些代码进行拷贝——那么就几乎不需要编辑它们

了。

3. Creating the User Manager Class

3. 创建用户管理器类

One of the most important Identity classes is the user manager, which manages instances of the user

class. The user manager class must be derived from UserManager<T>, where T is the user class. The

UserManager<T> class isn't specific to the Entity Framework and provides more general features for

creating and operating on user data. Table 13-3 shows the basic methods and properties defined by the

UserManager<T> class for managing users. There are others, but rather than list them all here, I'll describe

them in context when I describe the different ways in which user data can be managed.

最重要的Identity类之一是“User Manager（用户管理器）”，用来管理用户类实例。用户管理器类必须

派生于UserManager<T>，其中T是用户类。这个UserManager<T>类并非是专用于Entity Framework的，

而且它提供了很多通用特性，用以创建用户并对用户数据进行操作。表13-3列出了UserManager<T>类

为管理用户而定义的基本方法和操作。还有一些其他方法，这里并未全部列出来，我会在适当的情形下

对它们进行描述，那时会介绍管理用户数据的不同方式。

Table 13-3. The Basic Methods and Properties Defined by the UserManager<T> Class

表

13-3. UserManager<T>

类所定义的基本方法和操作

Name

名称

Description

描述

ChangePasswordAsync(id, old, new)

Changes the password for the specified user.

为指定用户修改口令

CreateAsync(user)

Creates a new user without a password. See Chapter 15 for an example.

创建一个不带口令的新用户，参见第15章示例

CreateAsync(user, pass)

Creates a new user with the specified password. See the “Creating Users”

section.

创建一个带有指定口令的新用户，参见“创建用户”

DeleteAsync(user)

Deletes the specified user. See the “Implementing the Delete Feature” section.

删除指定用户，参见“实现Delete特性”

FindAsync(user, pass)

Finds the object that represents the user and authenticates their password. See

Chapter 14 for details of authentication.

查找代表该用户的对象，并认证其口令，详见第14章的认证细节

FindByIdAsync(id)

Finds the user object associated with the specified ID. See the “Implementing

the Delete Feature” section.

查找与指定ID相关联的用户对象，参见“实现Delete特性”

FindByNameAsync(name)

Finds the user object associated with the specified name. I use this method in the

“Seeding the Database” section of Chapter 14.

查找与指定名称相关联的用户对象，第14章“种植数据库”时会用到这个

方法

UpdateAsync(user)

Pushes changes to a user object back into the database. See the “Implementing

the Edit Feature” section.

将用户对象的修改送入数据库，参见“实现Edit特性”

Users

Returns an enumeration of the users. See the “Enumerating User Accounts”

section.

返回用户枚举，参见“枚举用户账号”

■Tip Notice that the names of all of these methods end with Async. This is because ASP.NET Identity

is implemented almost entirely using C# asynchronous programming features, which means that operations

will be performed concurrently and not block other activities. You will see how this works once I start

demonstrating how to create and manage user data. There are also synchronous extension methods for each

Async method. I stick to the asynchronous methods for most examples, but the synchronous equivalents are

useful if you need to perform multiple related operations in sequence. I have included an example of this in

the “Seeding the Database” section of Chapter 14. The synchronous methods are also useful when you want

to call Identity methods from within property getters or setters, which I do in Chapter 15.

提示：请注意方法名以Async结尾的那些方法。因为ASP.NET Identity几乎完全是用C#的异步编程特性实

现的，这意味着会并发地执行各种操作，而不会阻塞其他活动。在我开始演示如何创建和管理用户数据

时，你便会看到这种情况。对于每一个Async方法也有相应的同步扩展方法。对于大多数示例，我会坚

持这种异步方法。但是，如果你需要按顺序执行一些相关的操作，同步方法是有用的。在第14章的“种

植数据库”中就包含了一个这样的例子。当你希望从属性内部的getter或setter代码块中调用Identity方法

时，同步方法也是有用的，在第15章中，我就是这么做的。

I added a class file called AppUserManager.cs to the Infrastructure folder and used it to define

the user manager class, which I have called AppUserManager, as shown in Listing 13-7.

我在Infrastructure文件夹中添加了一个类文件，名称为AppUserManager.cs，用它定义了用户管

理器类，名称为AppUserManager，如清单13-7所示。

Listing 13-7. The Contents of the AppUserManager.cs File

清单

13-7. AppUserManager.cs

文件的内容

using Microsoft.AspNet.Identity;

using Microsoft.AspNet.Identity.EntityFramework;

using Microsoft.AspNet.Identity.Owin;

using Microsoft.Owin;

using Users.Models;

剩余139页未读，继续阅读

r01cn

粉丝: 4
资源: 7

ASP.NET Identity入门与实战教程：用户管理与认证授权

ASP.NET_Identity教程（中-英）

详解ASP.NET Core 之 Identity 入门（一）

asp.Net中文教程和英文教程

如何使用ASP.NET Identity进行身份验证和授权？

asp.net MVC 通用登录验证模块

asp.net登录注册页面

asp.net 教程 下载

asp.net webform 教程

asp.net core 3.1中文教程

asp.net core identity

最新资源

asp.net 教程下载