我正在尝试通过在应用程序之间共享 cookies（登录和 Web 页面）在 .net 核心 3.1 中实现 SSO

Question

I am trying to implement SSO by sharing cookies between two .net core 3.1 apps. I have followed this link . I am trying to implement it by Sharing Cookies between the applications as mentioned in the link.

My idea is if a user is unauthorized, it should not be able to view the Second Index (view) page. It should redirect itself to the Login page in the first application and successfully login then should be able to see the page. if the user is already logged in then it should directly show the page.This is my idea.

My question is:

How to redirect it to login page? The two web app are different applications.

My code is below. But it doesn't redirect it. My first application which is the Login APP Startup.cs file looks like this

public class Startup
    {
        public Startup(IConfiguration configuration)
        {
            Configuration = configuration;
        }

        public IConfiguration Configuration { get; }


        public void ConfigureServices(IServiceCollection services)
        {

            services.AddControllersWithViews();

            services.AddAuthentication("Identity.Application")
            .AddCookie("Identity.Application", options =>
              {
                options.Cookie.Name = ".AspNet.SharedCookie";
                options.Cookie.Path = "/Home/Login";
             });

            services.AddDataProtection()
            .PersistKeysToFileSystem(new DirectoryInfo(@"C:\Users\Yourname\AppData\Local\ASP.NET\DataProtection-Keys"))
           .SetApplicationName("SharedCookieApp");
            services.AddDataProtection()
              .ProtectKeysWithDpapi();

            services.ConfigureApplicationCookie(options => {
                options.Cookie.Name = ".AspNet.SharedCookie";
            });

        }
        public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
        {
            if (env.IsDevelopment())
            {
                app.UseDeveloperExceptionPage();
            }
            else
            {
                app.UseExceptionHandler("/Home/Error");
                // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
                app.UseHsts();
            }
            app.UseHttpsRedirection();
            app.UseStaticFiles();

            app.UseRouting();

            app.UseAuthorization();

            app.UseEndpoints(endpoints =>
            {
                endpoints.MapControllerRoute(
                    name: "default",
                    pattern: "{controller=Home}/{action=Login}/{id?}");
            });
        }
    }

HomeController:

public ActionResult Login()
        {
            var userClaims = new List<Claim>()
            {
                new Claim(ClaimTypes.Name,"Bob"),
            };

            var usrIdentity = new ClaimsIdentity(userClaims, "userIdentity");
            var usrPrinci = new ClaimsPrincipal(new[] { usrIdentity });

            HttpContext.SignInAsync(usrPrinci);
            return View();
        }

Login View:

@{
    ViewBag.Title = "Login";
}

<h2>Login</h2>
@Html.ValidationSummary()
@Html.AntiForgeryToken()
<div class="form-group">
    @Html.Label("Username")
    @Html.Editor("UserName")
</div>
<div class="form-group">
    @Html.LabelForModel("Password")
    @Html.Password("Password")
</div>
<input class="btn btn-primary" type="submit" value="Login" />

The second application:

StartUp.cs

public class Startup
    {
        public Startup(IConfiguration configuration)
        {
            Configuration = configuration;
        }

        public IConfiguration Configuration { get; }

        // This method gets called by the runtime. Use this method to add services to the container.
        public void ConfigureServices(IServiceCollection services)
        {
            services.AddControllersWithViews();

           services.AddDataProtection().PersistKeysToFileSystem(new DirectoryInfo(@"C:\Users\yourname\AppData\Local\ASP.NET\DataProtection-Keys"))
          .SetApplicationName("SharedCookieApp");


            services.AddDataProtection()
                .ProtectKeysWithDpapi();


           services.AddAuthentication("Identity.Application")
                .AddCookie("Identity.Application", options =>
                {
                    options.Cookie.Name = ".AspNet.SharedCookie";
                    options.LoginPath = "/Home/Login";
                    options.SlidingExpiration = true;

               });
        }
        public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
        {
            if (env.IsDevelopment())
            {
                app.UseDeveloperExceptionPage();
            }
            else
            {
                app.UseExceptionHandler("/Home/Error");
                    app.UseHsts();
            }
            app.UseHttpsRedirection();
            app.UseStaticFiles();

            app.UseRouting();
            app.UseAuthentication();


            app.UseAuthorization();

            app.UseEndpoints(endpoints =>
            {
                endpoints.MapControllerRoute(
                    name: "default",
                    pattern: "{controller=Home}/{action=Index}/{id?}");
            });
        }
    } 

Home:

[Authorize(AuthenticationSchemes = "Identity.Application")]
     public class HomeController : Controller
    {
       public IActionResult Index()
        {
            return View();
        }
    }

View is:

@{
    ViewData["Title"] = "Home Page";
}
<div class="text-center">
    <h1 class="display-4">Welcome</h1>

</div>

In my second application i am setting the Options.LoginPath in Startup.cs to the previous application login View. But it does not redirect it.

The error that comes is

No webpage was found for the web address: https://localhost :******/Home/Login?ReturnUrl=%2F

The port value above does not change. The port value in the above URL is that of the second app. Ideally, It should change to first app port value.

Can anyone suggest what is missing from the code?

Answer 1

I salve this problem by this order:

1. You need a controller base and login get username and pass and send to controller authentication after that controller base check username and password and set claim
2. every razor page for authentication needs to have this code: @attribute [authorize(Role="admin")]
3. in app.razor you need use component login for unauthorization tag

I hope help you