modules/00_Admin/Admin.Core/Application/Authorize/AuthorizeService.cs

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

using System;
using System.Collections.Generic;
using System.Security.Claims;
using System.Threading.Tasks;
using Microsoft.Extensions.Options;
using Mkh.Auth.Abstractions;
using Mkh.Auth.Abstractions.LoginHandlers;
using Mkh.Auth.Abstractions.Options;
using Mkh.Auth.Jwt;
using Mkh.Mod.Admin.Core.Application.Authorize.Dto;
using Mkh.Mod.Admin.Core.Application.Authorize.Vo;
using Mkh.Mod.Admin.Core.Domain.Account;
using Mkh.Mod.Admin.Core.Infrastructure;

namespace Mkh.Mod.Admin.Core.Application.Authorize;

internal class AuthorizeService : IAuthorizeService
{
    private readonly IAccountRepository _accountRepository;
    private readonly IAccountProfileResolver _accountProfileResolver;
    private readonly ICredentialClaimExtender _credentialClaimExtender;
    private readonly ICredentialBuilder _credentialBuilder;
    private readonly IJwtTokenStorage _jwtTokenStorageProvider;
    private readonly IUsernameLoginHandler _usernameLoginHandler;
    private readonly IOptionsMonitor<AuthOptions> _authOptions;
    private readonly AdminLocalizer _localizer;

    public AuthorizeService(IAccountRepository accountRepository, IAccountProfileResolver accountProfileResolver, ICredentialClaimExtender credentialClaimExtender, ICredentialBuilder credentialBuilder, IJwtTokenStorage jwtTokenStorageProvider, IUsernameLoginHandler usernameLoginHandler, IOptionsMonitor<AuthOptions> authOptions, AdminLocalizer localizer)
    {
        _accountRepository = accountRepository;
        _accountProfileResolver = accountProfileResolver;
        _credentialClaimExtender = credentialClaimExtender;
        _credentialBuilder = credentialBuilder;
        _jwtTokenStorageProvider = jwtTokenStorageProvider;
        _usernameLoginHandler = usernameLoginHandler;
        _authOptions = authOptions;
        _localizer = localizer;
    }

    public async Task<IResultModel<ICredential>> UsernameLogin(UsernameLoginModel model)
    {
        var result = await _usernameLoginHandler.Handle(model);
        if (!result.Successful)
            return ResultModel.Failed<ICredential>(result.Msg);

        var loginResult = result.Data;

        var claims = new List<Claim>
        {
            new(MkhClaimTypes.TENANT_ID, loginResult.TenantId != null ? loginResult.TenantId.ToString() : ""),
            new(MkhClaimTypes.ACCOUNT_ID, loginResult.AccountId.ToString()),
            new(MkhClaimTypes.ACCOUNT_NAME, loginResult.AccountName),
            new(MkhClaimTypes.PLATFORM, model.Platform.ToString()),
            new(MkhClaimTypes.LOGIN_TIME, model.LoginTime.ToString())
        };

        //验证IP
        if (_authOptions.CurrentValue.EnableCheckIP)
        {
            claims.Add(new(MkhClaimTypes.LOGIN_IP, model.IP));