我应该将来自OAuth2的访问令牌存储在MVC应用程序中的什么位置？

Question

I have OAuth2 Authorization Layer and Service layer as part of my MVC application. The Access Token obtained from OAuth2 should be accessible to Service layer as medium to communicate to APIs. I was considering storing them to Session at class level, so, is this the right method or can I store them to some custom storage ?

Answer 1

您可以将其添加为索偿 。

manager.AddClaim(userId, new Claim("AccessToken", AccessToken));