ASP.NET 2.0身份，确认Emailasync()变得无效令牌

Question

我尝试使用ASP.NET Identity 2.0确认用户的电子邮件。正如很少的博客所建议的那样，我将MachineKey放在Web.config文件中，因此加密和解密在Azure网站上起作用。在当地，我无法生成令牌。在尝试使用usermanager.confirmemailasync方法确认（由我的Web API生成的令牌）时，我得到了"无效的令牌"。我尝试对我的代码编码，但这无效。我找不到足够的帮助来解决这个问题。

电子邮件生成代码看起来像

  code = HttpUtility.UrlEncode(UserManager.GenerateEmailConfirmationToken(identityUser.Id));
 _logger.Info("Generate confiruation token: " + code);
 string link = model.ConfirmUrl + string.Format("?userId={0}&code={1}", HttpUtility.UrlEncode(identityUser.Id), code);
 Configuration.Services.GetTraceWriter().Info(Request, Category, "Account GenereatedLink: " + link);
 UserManager.SendEmail(identityUser.Id, "Contactbook confirmation", link);

确认电子邮件代码

       IdentityResult idResult = await UserManager.ConfirmEmailAsync(userId, code);
        IHttpActionResult result = GetErrorResult(idResult);

startup.auth.cs代码

app.CreatePerOwinContext(CBIndentityDbContext.Create);
        app.CreatePerOwinContext<ApplicationUserManager>(ApplicationUserManager.Create);
        OAuthOptions = new OAuthAuthorizationServerOptions
        {
            TokenEndpointPath = new PathString("/Token"),
            Provider = new ApplicationOAuthProvider(),
            AuthorizeEndpointPath = new PathString("/api/Account/ExternalLogin"),
            AccessTokenExpireTimeSpan = TimeSpan.FromDays(14),
            AllowInsecureHttp = true
        };
        app.UseOAuthBearerTokens(OAuthOptions);

授权manager.cs

    public static ApplicationUserManager Create(IdentityFactoryOptions<ApplicationUserManager> options, IOwinContext context)
    {
        var appDbContext = context.Get<CBIndentityDbContext>();
        var appUserManager = new ApplicationUserManager(new UserStore<IdentityUser>(appDbContext));
        // Configure validation logic for usernames
        appUserManager.UserValidator = new UserValidator<IdentityUser>(appUserManager)
        {
            AllowOnlyAlphanumericUserNames = true,
            RequireUniqueEmail = true
        };
        // Configure validation logic for passwords
        appUserManager.PasswordValidator = new PasswordValidator
        {
            RequiredLength = 7,
            RequireDigit = false
        };
        appUserManager.EmailService = new ContactbookEmailService();
        var dataProtectionProvider = options.DataProtectionProvider;
        if (dataProtectionProvider != null)
        {
            appUserManager.UserTokenProvider = new DataProtectorTokenProvider<IdentityUser>(dataProtectionProvider.Create("ASP.NET Identity"))
            {
                //Code for email confirmation and reset password life time
                TokenLifespan = TimeSpan.FromHours(6)
            };
        }
        return appUserManager;
    }

web.config

<system.web>
<compilation debug="true" targetFramework="4.5" />
<httpRuntime targetFramework="4.5.2" />
<machineKey decryptionKey="6F7DEAA44E5E06B6B7480B055FF39960D69AD32BCBB178EB" validationKey="17D85F8147CF02697D16B05726B9D68E473A3BF79EB79AE4E7EF8E84DA6CCC46BFFB975741DA4D1F37F0EF41651422A2745296BA953CE0370D4337E2900C2A18" validation="SHA1" decryption="Auto" />

当我删除MachineKey时，每件事都可以正常工作。我需要拥有Machinkey，以便电子邮件确认在Azure中正常工作。

预先感谢。

Answer 1

在某个时候，当令牌具有" "字符时，它会在回到服务器后转换为"，这可能是获取无效的原因。我为我使用以下方法。

    private string SanitizeToken(string token)
    {
        return token.Trim().Replace(" ", "+");
    }

您可以在此处查看完整的实现。

Answer 2

在发送之前，请在"代码"上应用编码并使用确认为"代码"的解码。

 public static class UrlEncoding
{
    public static string Base64ForUrlEncode(this string str)
    {
        byte[] encbuff = Encoding.UTF8.GetBytes(str);
        return HttpServerUtility.UrlTokenEncode(encbuff);
    }
    public static string Base64ForUrlDecode(this string str)
    {
        byte[] decbuff = HttpServerUtility.UrlTokenDecode(str);
        return Encoding.UTF8.GetString(decbuff);
    }
}

示例： - 发送之前：UrlEncoding.Base64ForUrlEncode(code)确认：UrlEncoding.Base64ForUrlDecode(code)