将声明传递到 HandleAuthenticateAsync 以进行集成测试

Question

在遵循Microsoft的集成测试身份验证 ASP.NET 核心指南的同时，我为身份验证构建了以下测试：

[Fact]
public async Task Get_SecurePageIsReturnedForAnAuthenticatedUser()
{
// Arrange
var client = _factory.WithWebHostBuilder(builder =>
{
builder.ConfigureTestServices(services =>
{
services.AddAuthentication("Test")
.AddScheme<AuthenticationSchemeOptions, TestAuthHandler>(
"Test", options => {});
});
})
.CreateClient(new WebApplicationFactoryClientOptions
{
AllowAutoRedirect = false,
});
client.DefaultRequestHeaders.Authorization = 
new AuthenticationHeaderValue("Test");
//Act
var response = await client.GetAsync("/SecurePage");
// Assert
Assert.Equal(HttpStatusCode.OK, response.StatusCode);
}

我想做的是使用 [理论] 选项而不是 [事实] 来测试多个身份验证，因此它看起来像这样：

[Theory]
[InlineData("TestAuth1","12345")]
[InlineData("TestAuth2","23456")]
[InlineData("TestAuth3","34567")]
public async Task Get_SecurePageIsReturnedForAnAuthenticatedUser(string claim, string claimsIdentity)
{
var claim = new Claim(claim, claimsIdentity);
.
.
.

但是，我不确定如何通过AddScheme<AuthenticationSchemeOptions，TestAuthHandler将声明传递给TestAuthHandler>

这是给定的测试身份验证处理程序

public class TestAuthHandler : AuthenticationHandler<AuthenticationSchemeOptions>
{
public TestAuthHandler(IOptionsMonitor<AuthenticationSchemeOptions> options, 
ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock)
: base(options, logger, encoder, clock)
{
}
protected override Task<AuthenticateResult> HandleAuthenticateAsync()
{
var claims = new[] { new Claim(ClaimTypes.Name, "Test user") };
var identity = new ClaimsIdentity(claims, "Test");
var principal = new ClaimsPrincipal(identity);
var ticket = new AuthenticationTicket(principal, "Test");
var result = AuthenticateResult.Success(ticket);
return Task.FromResult(result);
}
}

我想将 HandleAuthenticaAsync() 中的声明变量替换为传递给 Get_SecurePageIsReturnedForAnAuthenticatedUser(声明声明) 的声明

请注意，它们确实必须单独测试，因为只要 HandleAuthenticateAsync 声明变量中存在一个正确的身份验证，我当前的身份验证就会通过。

感谢您提供的任何帮助。

Answer 1

我遇到了类似的问题，并且能够通过创建一个实现AuthenticationSchemeOptions的自定义TestAuthenticationSchemeOptions来解决它，该具有类似于下面此链接中的示例的Claims属性

如何在集成测试中为 HttpContext.User.IsInRole 方法检查声明角色？

例如 你会有

public class TestAuthenticationSchemeOptions : AuthenticationSchemeOptions
{
public IEnumerable<Claim> Claims { get; set; }
}

在您的测试中

// Arrange
var inputClaims = new List<Claim> { new Claim(ClaimTypes.Name, "Test user") };
var client = _factory.WithWebHostBuilder(builder =>
{
builder.ConfigureTestServices(services =>
{
services.AddAuthentication("Test")
.AddScheme<TestAuthenticationSchemeOptions, TestAuthHandler>(
"Test", options => { options.Claims = inputClaims; });
});
})

然后在您的身份验证处理程序中，您可以使用Options.Claims获取声明

public class TestAuthHandler : AuthenticationHandler<TestAuthenticationSchemeOptions>
{
public TestAuthHandler(IOptionsMonitor<TestAuthenticationSchemeOptions> options, 
ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock)
: base(options, logger, encoder, clock)
{
}
protected override Task<AuthenticateResult> HandleAuthenticateAsync()
{
var claims = Options.Claims;
var identity = new ClaimsIdentity(claims, "Test");
var principal = new ClaimsPrincipal(identity);
var ticket = new AuthenticationTicket(principal, "Test");
var result = AuthenticateResult.Success(ticket);
return Task.FromResult(result);
}
}