c# - MVC 中的 URL 编码 token

Question

核心 2 MVC。我想生成“确认电子邮件链接”。我生成一个 token ，如下所示:

var token = await m_userManager.GenerateEmailConfirmationTokenAsync(user);

向用户发送电子邮件以激活他/她的帐户。然而，通过的 token 已从输入中删除了“+”:

    // Original
CfDJ8ON8hfMagqZNkicGHBXln5hi6kj4TCMMaxS5SaaU4BzEgFlKev1mT2gsij7gh2AkG8G+00t4n/PGwX6oQCvnpHk+wIGc1y8ycNbnzGpwW9Q8fwRlZDGQcIMtSCmX7LXwRS0iHSXgDF1O/QcDNGKbIMMZdcfMKYwnnzmUpmNxvZtG0JCYu5o754Y83VEtdbKASlzQz4aFxOUulvHRBQc3xRi2r0N8yveg26FO+RJ9khsqxKGRu4JDDVNWkpguXeVJvA==

    //Notice '+' is missin
CfDJ8ON8hfMagqZNkicGHBXln5hi6kj4TCMMaxS5SaaU4BzEgFlKev1mT2gsij7gh2AkG8G 00t4n/PGwX6oQCvnpHk wIGc1y8ycNbnzGpwW9Q8fwRlZDGQcIMtSCmX7LXwRS0iHSXgDF1O/QcDNGKbIMMZdcfMKYwnnzmUpmNxvZtG0JCYu5o754Y83VEtdbKASlzQz4aFxOUulvHRBQc3xRi2r0N8yveg26FO RJ9khsqxKGRu4JDDVNWkpguXeVJvA==

Controller :

[HttpGet]
public async Task<IActionResult> Activate(Guid? id, string token)
{
       ...

这里的解决方案是什么？我应该简单地将“空格”替换为+号吗？

Answer 1

您可以对 token 进行编码，然后在收到 token 时进行解码。这样就可以避免 url 编码。

示例:

public static void Main()
{
    var token = "CfDJ8ON8hfMagqZNkicGHBXln5hi6kj4TCMMaxS5SaaU4BzEgFlKev1mT2gsij7gh2AkG8G+00t4n/PGwX6oQCvnpHk+wIGc1y8ycNbnzGpwW9Q8fwRlZDGQcIMtSCmX7LXwRS0iHSXgDF1O/QcDNGKbIMMZdcfMKYwnnzmUpmNxvZtG0JCYu5o754Y83VEtdbKASlzQz4aFxOUulvHRBQc3xRi2r0N8yveg26FO+RJ9khsqxKGRu4JDDVNWkpguXeVJvA==";
    var newToken = HttpUtility.UrlEncode(token);
    Console.WriteLine(newToken);
    //this will print newToken without +
    var originalToken = HttpUtility.UrlDecode(newToken);
    //this will print original token, with +
    Console.WriteLine(originalToken);
}