ASP.NET Identity 学习

  1. 创建一个Asp.net core mvc项目
    添加Nuget包：

    • Microsoft.EntityFrameworkCore.SqlServer 3.1.3
    • Microsoft.EntityFrameworkCore.Tools 3.1.3
    • Microsoft.AspNetCore.Identity.EntityFrameworkCore 3.1.3

  2. 更改HomeController类的内容

  1. public IActionResult Index()
  2.       {
  3.          return View(new Dictionary<string, object> { ["Placeholder"]="Placeholder"});
  4.       }

更改HomeController的Index视图内容：

  1. @{
  2.     ViewData["Title"] = "首页";
  3. }
  4. @model Dictionary<string, object>
  5. <div class="bg-primary m-1 p-1 text-white"><h4>用户详情</h4></div>
  6. <table class="table table-sm table-bordered m-1 p-1">
  7.     @foreach (var kvp in Model)
  8.     {
  9.         <tr><th>@kvp.Key</th><td>@kvp.Value</td></tr>
  10.     }
  11. </table>
  1. 在Models文件夹下创建AppUser类，继承自IdentityUser
  1. using Microsoft.AspNetCore.Identity;
  3. namespace IdentityDemo.Models
  4. {
  5.     public class AppUser:IdentityUser
  6.     {
  7.     }
  8. }
  1. 在Model文件夹下创建DbContext：AppIdentityDbContext
  1. using Microsoft.AspNetCore.Identity.EntityFrameworkCore;
  2. using Microsoft.EntityFrameworkCore;
  4. namespace IdentityDemo.Models
  5. {
  6.     public class AppIdentityDbContext:IdentityDbContext<AppUser>
  7.     {
  8.         public AppIdentityDbContext(DbContextOptions<AppIdentityDbContext> options):base(options)
  9.         {
  11.         }
  12.     }
  13. }
  1. 配置数据库连接
    在appsettings.json中配置数据库连接
  1. {
  2.   "Data": {
  3.     "IdentityDemo": {
  4.       "ConnectionString": "Server=(localdb)\\mssqllocaldb;Database=IdentityDemo;Trusted_Connection=True;MultipleActiveResultSets=true"
  5.     },
  6.     "Logging": {
  7.       "LogLevel": {
  8.         "Default": "Information",
  9.         "Microsoft": "Warning",
  10.         "Microsoft.Hosting.Lifetime": "Information"
  11.       }
  12.     },
  13.     "AllowedHosts": "*"
  14.   }
  1. 在Startup.cs中读取配置文件中的数据库链接地址
  1. using System;
  2. using System.Collections.Generic;
  3. using System.Linq;
  4. using System.Threading.Tasks;
  5. using IdentityDemo.Models;
  6. using Microsoft.AspNetCore.Builder;
  7. using Microsoft.AspNetCore.Hosting;
  8. using Microsoft.AspNetCore.HttpsPolicy;
  9. using Microsoft.AspNetCore.Identity;
  10. using Microsoft.EntityFrameworkCore;
  11. using Microsoft.Extensions.Configuration;
  12. using Microsoft.Extensions.DependencyInjection;
  13. using Microsoft.Extensions.Hosting;
  15. namespace IdentityDemo
  16. {
  17.     public class Startup
  18.     {
  19.         public Startup(IConfiguration configuration)
  20.         {
  21.             Configuration = configuration;
  22.         }
  24.         public IConfiguration Configuration { get; }
  26.         // This method gets called by the runtime. Use this method to add services to the container.
  27.         public void ConfigureServices(IServiceCollection services)
  28.         {
  29.             //配置数据库连接
  30.             services.AddDbContext<AppIdentityDbContext>(
  31.                 options => options.UseSqlServer(Configuration["Data:IdentityDemo:ConnectionString"])
  32.                 );
  34.             //配置Identity
  35.             services.AddIdentity<AppUser, IdentityRole>()
  36.                 .AddEntityFrameworkStores<AppIdentityDbContext>()
  37.                 .AddDefaultTokenProviders();
  39.             services.AddControllersWithViews();
  40.         }
  42.         // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
  43.         public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
  44.         {
  45.             app.UseStatusCodePages();
  46.             if (env.IsDevelopment())
  47.             {
  48.                 app.UseDeveloperExceptionPage();
  49.             }
  50.             else
  51.             {
  52.                 app.UseExceptionHandler("/Home/Error");
  53.                 // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
  54.                 app.UseHsts();
  55.             }
  56.             app.UseHttpsRedirection();
  57.             app.UseStaticFiles();
  59.             app.UseRouting();
  61.             app.UseAuthorization();
  63.             app.UseEndpoints(endpoints =>
  64.             {
  65.                 endpoints.MapControllerRoute(
  66.                     name: "default",
  67.                     pattern: "{controller=Home}/{action=Index}/{id?}");
  68.             });
  69.         }
  70.     }
  71. }
  1. 添加数据库迁移
  1. add-migrations InitialCreate  
  2. update database
  1. 列举用户账户
  1. using IdentityDemo.Models;
  2. using Microsoft.AspNetCore.Identity;
  3. using Microsoft.AspNetCore.Mvc;
  5. namespace IdentityDemo.Controllers
  6. {
  7.     public class AdminController : Controller
  8.     {
  9.         private UserManager<AppUser> userManager;
  10.         //构造函数注入，获取UserManager
  11.         public AdminController(UserManager<AppUser> usrMgr)
  12.         {
  13.             userManager = usrMgr;
  14.         }
  15.         public IActionResult Index()
  16.         {
  17.             return View(userManager.Users);
  18.         }
  19.     }
  20. }

视图修改 Index.cshtml:

  1. @model IEnumerable<AppUser>
  3. @{
  4.     ViewData["Title"] = "Index";
  5. }
  6. <div class="bg-primary m-1 p-1 text-white"><h4>用户账号</h4></div>
  7. <table class="table table-sm table-bordered">
  8.     <tr><th>ID</th><th>用户名</th><th>邮箱</th></tr>
  9.     @if (Model.Count() == 0)
  10.     {
  11.         <tr><td colspan="3" class="text-center">没有</td></tr>
  12.     }
  13.     else
  14.     {
  15.         foreach (AppUser user in Model)
  16.         {
  17.             <tr>
  18.                 <td>@user.Id</td>
  19.                 <td>@user.UserName</td>
  20.                 <td>@user.Email</td>
  21.             </tr>
  22.         }
  23.     }
  24. </table>
  25. <a class="btn btn-primary" asp-action="Create">创建</a>
  1. 创建用户
    1). 创建用户视图模型 UserViewModels
  1. public class CreateModel
  2.     {
  3.         [Required]
  4.         [Display(Name = "用户名")]
  5.         public string Name { get; set; }
  7.         [Required]
  8.         [DataType(DataType.EmailAddress)]
  9.         [Display(Name = "电子邮箱")]
  10.         public string Email { get; set; }
  11.         
  12.         [Required]
  13.         [DataType(DataType.Password)]
  14.         [Display(Name="密码")]
  15.         public string Password { get; set; }
  16.     }
  1. 添加Action方法
    在AdminController中添加Create方法：
  1. /// <summary>
  2. /// 创建用户
  3. /// </summary>
  4. /// <returns></returns>
  5. public ViewResult Create() => View();
  7. [HttpPost]
  8. public async Task<IActionResult> Create(CreateModel model)
  9. {
  10.    if (ModelState.IsValid)
  11.    {
  12.          AppUser user = new AppUser
  13.          {
  14.             UserName = model.Name,
  15.             Email = model.Email
  16.          };
  17.          ///创建用户
  18.          IdentityResult result = await userManager.CreateAsync(user, model.Password);
  19.          if (result.Succeeded) //成功则返回列表页
  20.          {
  21.             return RedirectToAction("Index");
  22.          }
  23.          else
  24.          {
  25.             foreach (IdentityError error in result.Errors)
  26.             {
  27.                ModelState.AddModelError("", error.Description);
  28.             }
  29.          }
  30.    }
  31.    return View(model);
  32. }
  1. 创建用户测试
  1. ctrl+F5运行程序，访问 “https://localhost:44382/Admin/Create” ，填写用户名Joe,邮箱:joe@example.com,密码：Secret123$。点击”创建”，创建用户成功。
  2. 再次输入相同的用户名，提示“User name ‘Joe’ is already taken.”
  3. 更改第一步中的用户名为Alice，密码为secret,创建用户时会提示密码强度不够的信息。因为Asp.net内置密码验证规则。
  1. 更改密码验证规则
    在Startup类的ConfigureServices方法中，配置密码验证规则：
  1. public void ConfigureServices(IServiceCollection services)
  2. {
  3.    //配置数据库连接
  4.    services.AddDbContext<AppIdentityDbContext>(
  5.          options => options.UseSqlServer(Configuration["Data:IdentityDemo:ConnectionString"])
  6.          );
  8.    //配置Identity的密码验证规则
  9.    //规则为至少六位
  10.    services.AddIdentity<AppUser, IdentityRole>(opts =>
  11.    {
  12.          opts.Password.RequiredLength = 6;
  13.          opts.Password.RequireNonAlphanumeric = false;
  14.          opts.Password.RequireLowercase = false;
  15.          opts.Password.RequireUppercase = false;
  16.          opts.Password.RequireDigit = false;
  17.    }).AddEntityFrameworkStores<AppIdentityDbContext>()
  18.          .AddDefaultTokenProviders();
  20.    services.AddControllersWithViews();
  21. }
  1. 自定义密码验证器类
    自定义密码验证规则除了上面一种方法，还可以自定义类，实现IPasswordValidator接口或者继承自UserValidator，接口定义：
  1. using System.Threading.Tasks;
  2. namespace Microsoft.AspNetCore.Identity {
  3. public interface IPasswordValidator<TUser> where TUser : class {
  4.    Task<IdentityResult> ValidateAsync(UserManager<TUser> manager,
  5.       TUser user, string password);
  6.    }
  7. }

CustomPasswordValidator类：

  1. using Microsoft.AspNetCore.Identity;
  2. using System.Collections.Generic;
  3. using System.Linq;
  4. using System.Threading.Tasks;
  5. using IdentityDemo.Models;
  7. namespace IdentityDemo.Infrastructure
  8. {
  9.     /// <summary>
  10.     /// 自定义用户密码验证规则
  11.     /// </summary>
  12.     public class CustomPasswordValidator : UserValidator<AppUser>
  13.     {
  14.         public override async Task<IdentityResult> ValidateAsync(UserManager<AppUser> manager, AppUser user)
  15.         {
  16.             IdentityResult result = await base.ValidateAsync(manager, user);
  17.             List<IdentityError> errors = result.Succeeded ? new List<IdentityError>() : result.Errors.ToList();
  18.             if (!user.Email.ToLower().EndsWith("@example.com"))
  19.             {
  20.                 errors.Add(new IdentityError
  21.                 {
  22.                     Code = "EmailIdentityError",
  23.                     Description = "只允许example.com的邮箱地址注册账号"
  24.                 });
  25.             }
  26.             return errors.Count == 0 ? IdentityResult.Success : IdentityResult.Failed(errors.ToArray());
  27.         }
  28.     }
  29. }

在Startup类的ConfigureServices中注入服务：

  1. public void ConfigureServices(IServiceCollection services)
  2. {
  3.    //自定义密码验证服务
  4.    services.AddTransient<IPasswordValidator<AppUser>, CustomPasswordValidator>();
  5.    
  6.    //配置数据库连接
  7.    services.AddDbContext<AppIdentityDbContext>(
  8.          options => options.UseSqlServer(Configuration["Data:IdentityDemo:ConnectionString"])
  9.          );
  11.    //配置Identity
  12.    services.AddIdentity<AppUser, IdentityRole>(opts =>
  13.    {
  14.          opts.Password.RequiredLength = 6;
  15.          opts.Password.RequireNonAlphanumeric = false;
  16.          opts.Password.RequireLowercase = false;
  17.          opts.Password.RequireUppercase = false;
  18.          opts.Password.RequireDigit = false;
  19.    }).AddEntityFrameworkStores<AppIdentityDbContext>()
  20.          .AddDefaultTokenProviders();
  22.    services.AddControllersWithViews();
  23. }
  1. 用户名验证码规则
    用户名验证规则有两种:通过配置和自定义验证类。

1). 通过配置，在Startup类的ConfigureServices方法中配置

  1. //配置Identity
  2. services.AddIdentity<AppUser, IdentityRole>(opts =>
  3. {
  4.       opts.User.RequireUniqueEmail = true;
  5.       opts.User.AllowedUserNameCharacters = "abcdefghijklmnopqrstuvwxyz";
  6.       opts.Password.RequiredLength = 6;
  7.       opts.Password.RequireNonAlphanumeric = false;
  8.       opts.Password.RequireLowercase = false;
  9.       opts.Password.RequireUppercase = false;
  10.       opts.Password.RequireDigit = false;
  11. }).AddEntityFrameworkStores<AppIdentityDbContext>()
  12.       .AddDefaultTokenProviders();

2). 自定义验证规则类，实现IUserValidator接口

  1. using Microsoft.AspNetCore.Identity;
  2. using System.Collections.Generic;
  3. using System.Linq;
  4. using System.Threading.Tasks;
  5. using IdentityDemo.Models;
  7. namespace IdentityDemo.Infrastructure
  8. {
  9.     /// <summary>
  10.     /// 自定义用户名或者邮箱验证规则
  11.     /// </summary>
  12.     public class CustomUserValidator : UserValidator<AppUser>
  13.     {
  14.         public override async Task<IdentityResult> ValidateAsync(UserManager<AppUser> manager, AppUser user)
  15.         {
  16.             IdentityResult result = await base.ValidateAsync(manager, user);
  17.             List<IdentityError> errors = result.Succeeded ? new List<IdentityError>() : result.Errors.ToList();
  18.             if (!user.Email.ToLower().EndsWith("@example.com"))
  19.             {
  20.                 errors.Add(new IdentityError
  21.                 {
  22.                     Code = "EmailIdentityError",
  23.                     Description = "只允许example.com的邮箱地址注册账号"
  24.                 });
  25.             }
  26.             return errors.Count == 0 ? IdentityResult.Success : IdentityResult.Failed(errors.ToArray());
  27.         }
  28.     }
  29. }

在Startup类中，配置依赖注入：

  1. services.AddTransient<IUserValidator<AppUser>,CustomUserValidator>();
  1. 编辑、删除用户功能
    1). 在用户列表页，添加编辑、删除按钮：Index.cshtml:
  1. @model IEnumerable<AppUser>
  3. @{
  4.     ViewData["Title"] = "Index";
  5. }
  6. <div class="bg-primary m-1 p-1 text-white"><h4>用户账号</h4></div>
  7. <table class="table table-sm table-bordered">
  8.     <tr><th>ID</th><th>用户名</th><th>邮箱</th><th>操作</th></tr>
  9.     @if (Model.Count() == 0)
  10.     {
  11.         <tr><td colspan="3" class="text-center">没有</td></tr>
  12.     }
  13.     else
  14.     {
  15.         foreach (AppUser user in Model)
  16.         {
  17.             <tr>
  18.                 <td>@user.Id</td>
  19.                 <td>@user.UserName</td>
  20.                 <td>@user.Email</td>
  21.                 <td>
  22.                     <form asp-action="Delete" asp-route-id="@user.Id" method="post">
  23.                         <a class="btn btn-sm btn-primary" asp-action="Edit"
  24.                            asp-route-id="@user.Id">编辑</a>
  25.                         <button type="submit"
  26.                                 class="btn btn-sm btn-danger">
  27.                             删除
  28.                         </button>
  29.                     </form>
  30.                 </td>
  31.             </tr>
  32.         }
  33.     }
  34. </table>
  35. <a class="btn btn-primary" asp-action="Create">创建</a>

2). 删除用户

  1. //删除用户
  2. [HttpPost]
  3. public async Task<IActionResult> Delete(string id)
  4. {
  5.    AppUser user = await userManager.FindByIdAsync(id);
  6.    if (user != null)
  7.    {
  8.          IdentityResult result = await userManager.DeleteAsync(user);
  9.          if (result.Succeeded)
  10.          {
  11.             return RedirectToAction("Index");
  12.          }
  13.          else
  14.          {
  15.             AddErrorsFromResult(result);
  16.          }
  17.    }
  18.    else
  19.    {
  20.          ModelState.AddModelError("", "User Not Found");
  21.    }
  22.    return View("Index", userManager.Users);
  23. }
  25. private void AddErrorsFromResult(IdentityResult result)
  26. {
  27.    foreach (IdentityError error in result.Errors)
  28.    {
  29.          ModelState.AddModelError("", error.Description);
  30.    }
  31. }

3). 编辑用户

  1. /// <summary>
  2. /// 编辑用户
  3. /// </summary>
  4. /// <param name="id"></param>
  5. /// <returns></returns>
  6. public async Task<IActionResult> Edit(string id)
  7. {
  8.    AppUser user = await userManager.FindByIdAsync(id);
  9.    if (user != null)
  10.    {
  11.          return View(user);
  12.    }
  13.    else
  14.    {
  15.          return RedirectToAction("Index");
  16.    }
  17. }
  19. /// <summary>
  20. /// 编辑用户
  21. /// </summary>
  22. /// <param name="id"></param>
  23. /// <param name="email"></param>
  24. /// <param name="password"></param>
  25. /// <returns></returns>
  26. [HttpPost]
  27. public async Task<IActionResult> Edit(string id, string email,
  28. string password)
  29. {
  30.    AppUser user = await userManager.FindByIdAsync(id);
  31.    if (user != null)
  32.    {
  33.          user.Email = email;
  34.          //用户邮箱校验
  35.          IdentityResult validEmail = await userValidator.ValidateAsync(userManager, user);
  36.          if (!validEmail.Succeeded)
  37.          {
  38.             AddErrorsFromResult(validEmail);
  39.          }
  40.          IdentityResult validPass = null;
  41.          if (!string.IsNullOrEmpty(password))
  42.          {
  43.             //用户密码校验
  44.             validPass = await passwordValidator.ValidateAsync(userManager, user, password);
  45.             if (validPass.Succeeded)
  46.             {
  47.                //用户密码加密
  48.                user.PasswordHash = passwordHasher.HashPassword(user, password);
  49.             }
  50.             else
  51.             {
  52.                AddErrorsFromResult(validPass);
  53.             }
  54.          }
  55.          //1. 只修改了邮箱，2. 修改了邮箱和密码
  56.          if ((validEmail.Succeeded && validPass == null) || (validEmail.Succeeded && password != string.Empty && validPass.Succeeded))
  57.          {
  58.             IdentityResult result = await userManager.UpdateAsync(user); //更新用户信息s
  59.             if (result.Succeeded)
  60.             {
  61.                return RedirectToAction("Index");
  62.             }
  63.             else
  64.             {
  65.                AddErrorsFromResult(result);
  66.             }
  67.          }
  68.    }
  69.    else
  70.    {
  71.          ModelState.AddModelError("", "User Not Found");
  72.    }
  73.    return View(user);
  74. }

编辑用户的视图：
Edit.cshtml:

  1. @model AppUser
  3. @{
  4.     ViewData["Title"] = "修改用户信息";
  5. }
  7. <div class="bg-primary m-1 p-1"><h4>修改用户信息</h4></div>
  8. <div asp-validation-summary="All" class="text-danger"></div>
  9. <form asp-action="Edit" method="post">
  10.     <div class="form-group">
  11.         <label asp-for="Id"></label>
  12.         <input asp-for="Id" class="form-control" disabled />
  13.     </div>
  14.     <div class="form-group">
  15.         <label asp-for="Email"></label>
  16.         <input asp-for="Email" class="form-control" />
  17.     </div>
  18.     <div class="form-group">
  19.         <label for="password">Password</label>
  20.         <input name="password" class="form-control" />
  21.     </div>
  22.     <button type="submit" class="btn btn-primary">保存</button>
  23.     <a asp-action="Index" class="btn btn-secondary">取消</a>
  24. </form>

版权声明：本文为AlexanderZhao原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://www.cnblogs.com/AlexanderZhao/p/12771111.html