身份服务器4在同一项目上保护api

Question

我们使用IdentityServer作为我们的Web应用程序和API资源的openid提供程序。 我想在身份服务器上公开一个用于编辑用户的安全api端点，不知何故，我无法配置工作。我的客户是有角度的，我有一个有效的持票人令牌。

app.UseCors("AllowSpecificOrigin"); 
app.UseIdentity(); 
app.UseIdentityServer(); 
app.UseCookieAuthentication(new CookieAuthenticationOptions 
{ 
    AuthenticationScheme = "Cookies" 
}); 

JwtSecurityTokenHandler.DefaultInboundClaimTypeMap.Clear(); 

app.UseIdentityServerAuthentication(new IdentityServerAuthenticationOptions 
    { 
     Authority = Configuration["AuthServerUrl"], 
     ScopeName = "api", 
     AutomaticAuthenticate = true, 
     AutomaticChallenge = true, 
     RequireHttpsMetadata = false 
    }); 

任何帮助将不胜感激。

Answer 1

您可以使用MapWhen像下面分支应用程序：

  app.MapWhen(x => x.Request.Path.StartsWithSegments("/custom"), builder => 
     { 
      builder.UseCookieAuthentication(new CookieAuthenticationOptions 
      { 
       AuthenticationScheme = "Cookies" 
      }); 

      JwtSecurityTokenHandler.DefaultInboundClaimTypeMap.Clear(); 

      builder.UseIdentityServerAuthentication(new IdentityServerAuthenticationOptions 
      { 
       Authority = Configuration["AuthServerUrl"], 
       ScopeName = "api", 
       AutomaticAuthenticate = true, 
       AutomaticChallenge = true, 
       RequireHttpsMetadata = false 
      }); 
      // ..... 
     }); 
     app.UseIdentity(); 
     app.UseIdentityServer(); 
     //...