ASP.NET Core技术--使用客户端凭证保护API接口

dotnet new -i IdentityServer4.Templates
dotnet new is4empty -n IdentityServer

Install-Package IdentityServer4

public static IEnumerable<ApiResource> GetApis()
{
 return new List<ApiResource>

 {

 new ApiResource("api1", "My API")
 };
}

public static IEnumerable<Client> GetClients()
{
 return new List<Client>
 {
 new Client
 {
 ClientId = "client",
 // no interactive user, use the clientid/secret for 
authentication

 AllowedGrantTypes = GrantTypes.ClientCredentials,
 // secret for authentication

 ClientSecrets =
 {
 new Secret("secret".Sha256())
 },

 // scopes that client has access to

 AllowedScopes = { "api1" }
 }
 };
}

public void ConfigureServices(IServiceCollection services) {  var builder = services.AddIdentityServer()  .AddInMemoryIdentityResources(Config.GetIdentityResources())  .AddInMemoryApiResources(Config.GetApis())  .AddInMemoryClients(Config.GetClients()); }