HttpWebRequest를 통한 웹 API 권한 부여

Question

웹 API를 호출하는 기능이 있습니다. TestCallingRemotely이 [AllowAnonymous]으로 설정된 경우 제대로 작동합니다.

var httpWebRequest = (HttpWebRequest)WebRequest.Create(
    "http://localhost/api/services/myApp/commonLookup/TestCallingRemotely"); 
httpWebRequest.ContentType = "application/json"; 
httpWebRequest.Method = "POST"; 

using (var streamWriter = new StreamWriter(httpWebRequest.GetRequestStream())) { 
    string input = "{}"; 

    streamWriter.Write(input); 
    streamWriter.Flush(); 
    streamWriter.Close(); 
} 

var httpResponse = (HttpWebResponse)httpWebRequest.GetResponse(); 

어떻게 권한 부여를 위해 HttpWebRequest에 username 및 password 통과합니까?

내 웹 API를 System.Net 만 지원하는 CLR 통합에서 호출해야합니다. 서버가 기본 인증을 사용하는 경우

Answer 1

ABP의 시작 템플릿 uses bearer token authentication infrastructure을.

var token = GetToken(username, password); 

// var httpWebRequest = (HttpWebRequest)WebRequest.Create(
//  "http://localhost/api/services/myApp/commonLookup/TestCallingRemotely"); 
// httpWebRequest.ContentType = "application/json"; 
// httpWebRequest.Method = "POST"; 

httpWebRequest.Headers.Add("Authorization", "Bearer " + token); 

// ... 

이것은 an MSDN article에서 영감을 토큰을 추출하는 원유 방법을 사용

토큰을 가져옵니다.

private string GetToken(string username, string password, string tenancyName = null) 
{ 
    var httpWebRequest = (HttpWebRequest)WebRequest.Create(
     "http://localhost:6334/api/Account/Authenticate"); 
    httpWebRequest.ContentType = "application/json"; 
    httpWebRequest.Method = "POST"; 

    using (var streamWriter = new StreamWriter(httpWebRequest.GetRequestStream())) 
    { 
     var input = "{\"usernameOrEmailAddress\":\"" + username + "\"," + 
        "\"password\":\"" + password + "\"}"; 

     if (tenancyName != null) 
     { 
      input = input.TrimEnd('}') + "," + 
        "\"tenancyName\":\"" + tenancyName + "\"}"; 
     } 

     streamWriter.Write(input); 
     streamWriter.Flush(); 
     streamWriter.Close(); 
    } 

    var httpResponse = (HttpWebResponse)httpWebRequest.GetResponse(); 
    string response; 

    using (var streamReader = new StreamReader(httpResponse.GetResponseStream())) 
    { 
     response = streamReader.ReadToEnd(); 
    } 

    // Crude way 
    var entries = response.TrimStart('{').TrimEnd('}').Replace("\"", String.Empty).Split(','); 

    foreach (var entry in entries) 
    { 
     if (entry.Split(':')[0] == "result") 
     { 
      return entry.Split(':')[1]; 
     } 
    } 

    return null; 
} 

Answer 2

는이 같은 헤더를 추가 할 수 있습니다

var httpWebRequest = (HttpWebRequest) WebRequest.Create(
"http://localhost/api/services/myApp/commonLookup/TestCallingRemotely"); 
httpWebRequest.ContentType = "application/json"; 
httpWebRequest.Method = "POST"; 

var username = "Aladdin"; 
var password = "opensesame"; 

var bytes = Encoding.UTF8.GetBytes($"{username}:{password}"); 
httpWebRequest.Headers.Add("Authorization", $"Basic {Convert.ToBase64String(bytes)}"); 

using (var streamWriter = new StreamWriter(httpWebRequest.GetRequestStream())) 
{ 
    string input = "{}"; 

    streamWriter.Write(input); 
    streamWriter.Flush(); 
    streamWriter.Close(); 
} 

var httpResponse = (HttpWebResponse)httpWebRequest.GetResponse();