下面是一个使用ASP.NET Core 2.1 Web API 2和Active Directory凭据的解决方案,包含了代码示例:
首先,确保你的项目引用了以下NuGet包:
在Startup.cs文件中的ConfigureServices方法中,添加以下代码来配置Active Directory和身份验证服务:
public void ConfigureServices(IServiceCollection services)
{
services.AddAuthentication(Microsoft.AspNetCore.Server.IISIntegration.IISDefaults.AuthenticationScheme);
services.Configure(options =>
{
options.AutomaticAuthentication = true;
});
}
public void Configure(IApplicationBuilder app, IHostingEnvironment env)
{
app.UseAuthentication();
}
[Authorize]
[Route("api/[controller]")]
public class MyController : Controller
{
// 这个方法只能被通过Active Directory验证的用户访问
[HttpGet]
public IActionResult Get()
{
// 处理请求
}
}
{
"ActiveDirectory": {
"Domain": "yourdomain.com",
"Url": "ldap://yourdomain.com",
"UserBase": "DC=yourdomain,DC=com",
"Username": "yourusername",
"Password": "yourpassword"
}
}
public void ConfigureServices(IServiceCollection services)
{
// ...
var activeDirectorySettings = Configuration.GetSection("ActiveDirectory").Get();
services.AddSingleton(activeDirectorySettings);
}
public class ActiveDirectorySettings
{
public string Domain { get; set; }
public string Url { get; set; }
public string UserBase { get; set; }
public string Username { get; set; }
public string Password { get; set; }
}
public void ConfigureServices(IServiceCollection services)
{
// ...
var activeDirectorySettings = Configuration.GetSection("ActiveDirectory").Get();
services.AddSingleton(activeDirectorySettings);
services.AddAuthentication()
.AddNegotiate()
.AddActiveDirectory(options =>
{
options.Domain = activeDirectorySettings.Domain;
options.Url = activeDirectorySettings.Url;
options.UserBase = activeDirectorySettings.UserBase;
options.Username = activeDirectorySettings.Username;
options.Password = activeDirectorySettings.Password;
});
}
现在,你的ASP.NET Core 2.1 Web API 2应用程序将使用Active Directory凭据进行身份验证。只有通过Active Directory验证的用户才能访问需要身份验证的控制器方法。