从JSON客户端调用ServiceStack身份验证c#错误

Question

我创建了100多个没有任何网络安全的web服务。现在我想在现有的服务上实现网络安全。所以我从非常基本的身份验证(基本/自定义凭据)开始，通过下面的链接:

https://github.com/ServiceStack/ServiceStack/wiki/Authentication-and-authorization oauth2-providers .

但是我无法在测试时从JSON客户端验证服务堆栈web服务。我刚刚通过"CredentialsAuthProvider"创建了非常基本的网络安全。它总是返回错误

"The remote server returned an error: (401) Unauthorized."

我已经尝试过基本以及customecredential身份验证。我不知道我在哪里犯了错。

如果我直接从浏览器(Firefox或chrome)执行，它运行得很好，如下所示

1st time execute for authentication  :
    http://192.168.1.120/PatientMeasurementDatabase/auth/credentials?Username=john&Password=test

输出:

    Session Id  uWv4e9BpSUwScur7KxD6
    User Name  John
    Response Status

第二次执行:

    http://192.168.1.120/PatientMeasurementDatabase/GetActiveUserId/

输出正常:

    GetActiveUserId
    kpugj_01_07_2015_12_44_23
    isiqz_01_07_2015_12_49_08 
    jjrma_01_07_2015_13_48_56

----------- Servicestack webservice ApplicationHost.cs --------

    public class CustomCredentialsAuthProvider : CredentialsAuthProvider
        {
            public override bool TryAuthenticate(IServiceBase authService,
            string userName, string password)
            {
                return userName == "john" && password == "test";
            }
        }
    public class ApplicationHost : AppHostHttpListenerBase
        {
            /// <summary>
            /// This default constructor passes the name of our service “PersonService” as
            /// well as all assemblies that need to be loaded – in this case we only need to
            /// use the current assembly so I have passed that using typeof()
            /// </summary>
            public ApplicationHost()
            : base("Patient Measurement Database", typeof(ApplicationHost).Assembly)
        {
        }
public override void Configure(Funq.Container container)
        {
            string database_path = Common.getDatabaseConnectionString();
            container.Register<IDbConnectionFactory>(c => new OrmLiteConnectionFactory(database_path, MySqlDialectProvider.Instance));
            using (var db = container.Resolve<IDbConnectionFactory>().Open())
            {
                CreateTables(db);
            }
            Plugins.Add(new CorsFeature()); //Enable CORS
            Plugins.Add(new RazorFormat());
            // register storage for user sessions 
            container.Register<ICacheClient>(new MemoryCacheClient());
            container.Register<ISessionFactory>(c => 
                                                new SessionFactory(
                                                c.Resolve<ICacheClient>()));
            Plugins.Add(new CorsFeature(allowedHeaders: "Content-Type, Authorization"));
            Plugins.Add(new AuthFeature(() => 
                new AuthUserSession(), new AuthProvider[] 
               {  
                  new CustomCredentialsAuthProvider(), 
               }));
       }

------------------------------- 服务类 -----------------

    [Authenticate]
        [Route("/GetActiveUserId ", "GET, POST")]
        public class GetActiveUserId
        {
        }
       public List<GetActiveUserId > Any(GetActiveUserId  request)
            {
            try
            {
                CRUDFunctions objCRUDFunctions = new CRUDFunctions(Db);
                var record = objCRUDFunctions.GetActiveUserId();
                return record;
            }
            catch (Exception ex)
            { 
                return null;
            }
        }

---------------------------- 客户端代码GET/POST请求Servicestack服务器如下。

              try
                {
      string URL = ("http://192.168.1.120/MeasurementDatabase/json/reply/GetActiveUserId"
      WebRequest req = WebRequest.Create(URL);
                    //WebRequest req = WebRequest.Create(address);
                    CredentialCache ch = new CredentialCache();
                    string UserId =  "john";
                    string Password = "test";
                    string credentials = String.Format("{0}:{1}", UserId, Password);
                    byte[] bytes = Encoding.ASCII.GetBytes(credentials);
                    string base64 = Convert.ToBase64String(bytes);
                    string authorization = String.Concat("Credentials ", base64);
                    req.Headers.Add("Authorization", authorization);
                    req.Method = "POST";
                    // Create POST data and convert it to a byte array.
                    byte[] bytearray = Encoding.UTF8.GetBytes(Data);
                    // Set the ContentType property of the WebRequest.
                    req.ContentType = "application/json";
                    // Set the ContentLength property of the WebRequest.
                    req.ContentLength = bytearray.Length;
                   WebResponse resp = req.GetResponse();
                   StreamReader sr = new StreamReader(resp.GetResponseStream());
                   string str = sr.ReadToEnd().Trim();
      resp.Close();
    }

Answer 1

你可以直接使用c#/。. NET服务客户端可以轻松地使用经过身份验证的服务。

如果您正在使用CredentialsAuthProvider，您可以使用:

进行身份验证。

var client = new JsonServiceClient(BaseUrl);
var authResponse = client.Post(new Authenticate {
    provider = CredentialsAuthProvider.Name, //= credentials
    UserName = "[e-mail]",
    Password = "p@55w0rd",
    RememberMe = true,
});

在您成功验证服务客户端client实例后，将填充已验证会话cookie，然后允许调用已验证的服务，例如:

var response = client.Get(new GetActiveUserId());

如果你也注册了BasicAuthProvider，它将使你的服务接受HTTP基本身份验证，这是内置的服务客户端，你可以在服务客户端上填充:

client.UserName = "[e-mail]";
client.Password = "p@55w0rd";

也允许你访问受保护的服务，例如:

var response = client.Get(new GetActiveUserId());

虽然在幕后它最终发出2个请求，第一个请求发送一个正常的请求，它将被拒绝与401 Unauthorized，如果服务器表示它已启用BasicAuthProvider，它将重新发送请求与HTTP基本认证凭证。

您可以通过指定客户端应该总是在每个请求时发送基本验证来节省额外验证挑战请求的延迟:

client.AlwaysSendBasicAuthHeader = true;