IdentityServer3 xBehave test

Question

我想为我的WebApi和IdentityServer编写验收测试。为了使事情尽可能简单，我从这里复制了整个示例项目，但添加了另一个项目，这基本上与控制台客户端相同，但作为验收测试。

我现在得到的唯一的场景是:

namespace SpecTesting
{
using System;
using System.Net;
using System.Net.Http;
using System.Threading;
using FluentAssertions;
using IdentityModel.Client;
using Xbehave;
public class JustLikeConsole
{
    private static readonly string ServerUrl = "http://localhost:11111";
    private static readonly string IdentityServerUrl = "http://localhost:5000";
    private IDisposable webApp;
    private IDisposable identityServer;
    private HttpClient appClient;
    private HttpClient identityServerClient;
    [Background]
    public void Background()
    {
        "establish server"._(() =>
        {
            this.identityServer = Microsoft.Owin.Hosting.WebApp.Start<IdSrv.Startup>(IdentityServerUrl);
            this.webApp = Microsoft.Owin.Hosting.WebApp.Start<Apis.Startup>(ServerUrl);
            this.appClient = new HttpClient { BaseAddress = new Uri(ServerUrl) };
            this.identityServerClient = new HttpClient { BaseAddress = new Uri(IdentityServerUrl) };
        }).Teardown(() =>
        {
            this.identityServerClient.Dispose();
            this.appClient.Dispose();
            this.webApp.Dispose();
            this.identityServer.Dispose();
        });
    }
    [Scenario]
    public void SimplestScenario(HttpResponseMessage response)
    {
        var clientId = "silicon";
        var clientSecret = "F621F470-9731-4A25-80EF-67A6F7C5F4B8";
        var expectedJson = $"{{ client: '{clientId}' }}";
        "get token"._(() =>
        {
            var client = new TokenClient(
                $"{IdentityServerUrl}/connect/token",
                clientId,
                clientSecret);
            var token = client.RequestClientCredentialsAsync("api1").Result;
            this.appClient.SetBearerToken(token.AccessToken);
        });
        "when calling the service"._(()
            => response = this.appClient.SendAsync(new HttpRequestMessage(HttpMethod.Get, "/test"), CancellationToken.None).Result);
        "it should return status code 'OK'"._(()
            => response.StatusCode.Should().Be(HttpStatusCode.OK));
        "it should equal expected json"._(()
            => response.Content.ReadAsStringAsync().Result.Should().Be(expectedJson));
    }
}
}

我现在总是得到状态码'未经授权'而不是'ok'。当我通过控制台客户机调用两个服务器时，它按预期工作。非常令人沮丧。

为了增强简单性，我将"调用服务时"步骤替换为以下行:

var client = new HttpClient();
client.SetBearerToken(token.AccessToken);
var result = client.GetStringAsync($"{ServerUrl}/test").Result;

问题仍然是一样的:现在一个HttpRequestException被抛出(401未经授权)。

Answer 1

与此同时，我发现了它不工作的原因:

原来我必须使用2.6.0版本的IdentityServer3。AccessTokenValidation或更早的WebApi。只要我更新到2.7.0或更高版本，它就停止工作了。我没有时间找出两个版本之间究竟发生了什么变化，因此也就没有时间找出导致问题的原因。但我可以将其隔离到IdentityServer3。AccessTokenValidation