带有 Web API 的 Azure B2C

Question

我看到的使用 Azure B2C 与 Web API 的示例显示 app.UseOAuthBearerAuthentication (如下所示)，但是我的 ASP .NET 5 Web API 项目使用 IApplicationBuilder (而不是 IAppBuilder)并且 UseOAuthBearerAuthentication 不存在。我已经尝试过 app.UseOpenIdConnectAuthentication，但是我相信这使用了 cookie，并且我无法使用 Xamarin 应用程序作为客户端来使其工作。我已经尝试过 app.UseWindowsAzureActiveDirectoryBearerAuthentication 但我相信这是针对标准 Azure AD(不是 B2C)，这是真的吗？对于如何让 Azure B2C 使用最新的 ASP .NET Web API 有什么想法吗？

谢谢!!!

    public void ConfigureAuth(IAppBuilder app)
    {   
        TokenValidationParameters tvps = new TokenValidationParameters
        {
            // This is where you specify that your API only accepts tokens from its own clients
            ValidAudience = clientId,
        };

        app.UseOAuthBearerAuthentication(new OAuthBearerAuthenticationOptions
        {   
            // This SecurityTokenProvider fetches the Azure AD B2C metadata & signing keys from the OpenIDConnect metadata endpoint
            AccessTokenFormat = new JwtFormat(tvps, new OpenIdConnectCachingSecurityTokenProvider(String.Format(aadInstance, tenant, "v2.0", discoverySuffix, commonPolicy)))
        });
    }

Answer 1

这对我有用。我希望它可以帮助其他希望将 Azure B2C 与最新的 .NET Web API 框架结合使用的人:

public void ConfigureAuth(IApplicationBuilder app, IOptions<PolicySettings> policySettings)
{
    app.UseJwtBearerAuthentication(new JwtBearerOptions
    {
        AuthenticationScheme = JwtBearerDefaults.AuthenticationScheme,
        AutomaticAuthenticate = true,
        AutomaticChallenge = true,
        MetadataAddress = "https://login.microsoftonline.com/[my-tenant].onmicrosoft.com/v2.0/.well-known/openid-configuration?p=B2C_1_my-signup-signin-policy",
        Audience = "[My-Azure-App-Guid]",
        Events = new JwtBearerEvents
        {
            OnTokenValidated= ctx =>
            {
                var nameClaim = ctx.AuthenticationTicket.Principal.FindFirst("name");
                if (nameClaim != null)
                {
                    var claimsIdentity = (System.Security.Claims.ClaimsIdentity)ctx.AuthenticationTicket.Principal.Identity;
                    claimsIdentity.AddClaim(new System.Security.Claims.Claim(System.Security.Claims.ClaimTypes.Name, nameClaim.Value));
                }
                return Task.FromResult(0);
            },
            OnAuthenticationFailed = ctx =>
            {
                ctx.SkipToNextMiddleware();
                return Task.FromResult(0);
            }
        }
    });
}