标识服务器4：登录回调返回404状态代码-未触发UserInfo终结点

C#/.NET问题 得得之家
IdentityServer4: signin callback returns 404 status code - UserInfo endpoint not triggered(标识服务器4：登录回调返回404状态代码-未触发UserInfo终结点)
本文介绍了标识服务器4：登录回调返回404状态代码-未触发UserInfo终结点的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！

问题描述

一段时间以来，我一直在尝试使用IdentityServer4设置一个项目。我已经走了很长一段路，但现在在最后阶段，当IdentityServer将我带回Web应用程序(https://localhost:44384/signin-central?code=...&scope=...&state=...)时，我得到了一个404状态代码。首先，我使用InMemoryClients等，但现在数据来自数据库，我必须进行一些重构。

我一直在分析输出窗口中的错误，并相应地更新代码。但是使用我现在拥有的代码，我的输出中不会再出现任何错误(LogLevel设置为Information)。

我也不喜欢修改DefaultChallengeScheme，因为这会在您计划将来拥有多个OAuth提供程序时立即限制您。

代码

这是客户端应用程序的重要代码

应用程序启动 
public class Startup {
    public Startup(IConfiguration configuration) {
        Configuration = configuration;
    }

    public IConfiguration Configuration { get; }

    public void ConfigureServices(IServiceCollection services) {
        services.AddRazorPages();
        services
            .AddAuthentication(options => {
                //options.DefaultScheme = Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationDefaults.AuthenticationScheme;
                //options.DefaultAuthenticateScheme = Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationDefaults.AuthenticationScheme;
                //options.DefaultChallengeScheme = "oidc";
            }).AddCookie(Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationDefaults.AuthenticationScheme, options => {
                options.Cookie.HttpOnly = true;
                options.ExpireTimeSpan = TimeSpan.FromDays(30);
                options.AccessDeniedPath = new Microsoft.AspNetCore.Http.PathString("/AccessDenied");
            }).AddOAuth<CentralOptions, CentralHandler>("central", options => {
                options.ClaimsIssuer = "https://localhost:44359";
                options.SaveTokens = true;
                options.ClientId = "SsoApplicationClient";
                options.ClientSecret = "qsdfghjklm";

                //options.Scope.Add("openid");
                //options.Scope.Add("profile");
                //options.Scope.Add("email");
                options.Scope.Add("weatherforecasts.read");
                options.Scope.Add("weatherforecasts.write");

                options.UsePkce = true;

                //options.ClaimActions.MapJsonKey("email", )
            }).AddOpenIdConnect("oidc", options => {
                options.SignInScheme = "Cookies";

                options.Authority = "https://localhost:44359";
                options.RequireHttpsMetadata = false;

                options.ClientId = "SsoApplicationClient";
                options.ClientSecret = "qsdfghjklm";
                options.ResponseType = "code id_token";

                options.SaveTokens = true;
                options.GetClaimsFromUserInfoEndpoint = true;

                options.Scope.Add("weatherforecasts.read");
                options.Scope.Add("weatherforecasts.write");

                //options.ClaimActions.MapJsonKey("website", "website");

                options.Events.OnUserInformationReceived = async (info) => {
                    // This is never hit
                };
            });
        services
            .AddIdentity<Entities.User, Entities.Role>(options => {
            })
            .AddEntityFrameworkStores<SsoApplicationContext>()
            .AddDefaultTokenProviders();

        services
            .AddDbContext<SsoApplicationContext>()
            .AddScoped<Repositories.IAccountRepository, Repositories.AccountRepository>();
    }

    public void Configure(IApplicationBuilder app, IWebHostEnvironment env) {
        ...
    }
}
中央选项 
public class CentralOptions : OAuthOptions {
    public CentralOptions() {
        CallbackPath = new Microsoft.AspNetCore.Http.PathString("/signin-central");
        AuthorizationEndpoint = "https://localhost:44359/connect/authorize";
        TokenEndpoint = "https://localhost:44359/connect/token";
        UserInformationEndpoint = "https://localhost:44359/connect/userinfo";
    }
}

在这里，我重写了方法以检查哪些方法正在被调用，哪些方法没有被调用。注释行以下的所有内容都不会被调用。

中央处理程序 
public class CentralHandler : OAuthHandler<CentralOptions> {
    public CentralHandler(IOptionsMonitor<CentralOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock) : base(options, logger, encoder, clock) {
    }
    protected override async Task InitializeEventsAsync() {
        await base.InitializeEventsAsync();
    }
    protected override async Task InitializeHandlerAsync() {
        await base.InitializeHandlerAsync();
    }
    protected override string ResolveTarget(string scheme) {
        var result = base.ResolveTarget(scheme);
        return result;
    }
    protected override async Task HandleChallengeAsync(AuthenticationProperties properties) {
        await base.HandleChallengeAsync(properties);
    }
    protected override void GenerateCorrelationId(AuthenticationProperties properties) {
        base.GenerateCorrelationId(properties);
    }
    protected override string BuildChallengeUrl(AuthenticationProperties properties, string redirectUri) {
        var challengeUrl = base.BuildChallengeUrl(properties, redirectUri);
        return challengeUrl;
    }
    protected override string FormatScope() {
        var scope = base.FormatScope();
        return scope;
    }
    protected override string FormatScope(IEnumerable<string> scopes) {
        var scope = base.FormatScope(scopes);
        return scope;
    }
    // Everything below this line is never called
    protected override async Task<object> CreateEventsAsync() {
        var events = await base.CreateEventsAsync();
        return events;
    }
    protected override async Task<HandleRequestResult> HandleAccessDeniedErrorAsync(AuthenticationProperties properties) {
        var result = await base.HandleAccessDeniedErrorAsync(properties);
        return result;
    }
    protected override async Task HandleForbiddenAsync(AuthenticationProperties properties) {
        await base.HandleForbiddenAsync(properties);
    }
    protected override async Task<HandleRequestResult> HandleRemoteAuthenticateAsync() {
        var result = await base.HandleRemoteAuthenticateAsync();
        return result;
    }
    public override async Task<bool> HandleRequestAsync() {
        var result = await base.HandleRequestAsync();
        return result;
    }
    public override async Task<bool> ShouldHandleRequestAsync() {
        var result = await base.ShouldHandleRequestAsync();
        return result;
    }
    protected override bool ValidateCorrelationId(AuthenticationProperties properties) {
        var result = base.ValidateCorrelationId(properties);
        return result;
    }
    protected override async Task<AuthenticationTicket> CreateTicketAsync(ClaimsIdentity identity, AuthenticationProperties properties, OAuthTokenResponse tokens) {
        var endpoint = QueryHelpers.AddQueryString(Options.UserInformationEndpoint, "access_token", tokens.AccessToken);
        var response = await Backchannel.GetAsync(endpoint, Context.RequestAborted);
        if (!response.IsSuccessStatusCode)
        {
            throw new HttpRequestException($"An error occurred when retrieving Facebook user information ({response.StatusCode}). Please check if the authentication information is correct and the corresponding Facebook Graph API is enabled.");
        }

        var payload = JsonDocument.Parse(await response.Content.ReadAsStringAsync());

        var context = new OAuthCreatingTicketContext(new ClaimsPrincipal(identity), properties, Context, Scheme, Options, Backchannel, tokens, payload.RootElement);
        context.RunClaimActions();

        await Events.CreatingTicket(context);

        return new AuthenticationTicket(context.Principal, context.Properties, Scheme.Name);
    }
    protected override async Task<OAuthTokenResponse> ExchangeCodeAsync(OAuthCodeExchangeContext context) {
        var result = await base.ExchangeCodeAsync(context);
        return result;
    }
    protected override async Task<AuthenticateResult> HandleAuthenticateAsync() {
        var result = await base.HandleAuthenticateAsync();
        return result;
    }
}

这是身份服务器应用程序的重要代码

启动 
public class Startup {
    public Startup(IConfiguration configuration) {
        Configuration = configuration;
    }

    public IConfiguration Configuration { get; }

    public void ConfigureServices(IServiceCollection services) {
        services.AddRazorPages();
        services.AddAuthentication(options => { });
        services.AddAuthorization();
        services
            .AddDbContext<SsoCentralContext>()
            .AddScoped<Repositories.IAccountRepository, Repositories.AccountRepository>()
            .AddScoped<Services.IAccountService, Services.AccountService>();

        services.AddIdentity<Entities.User, Entities.Role>()
            .AddEntityFrameworkStores<SsoCentralContext>();

        var isBuilder = services.AddIdentityServer();
        isBuilder
            .AddDeveloperSigningCredential()
            .AddOperationalStore<SsoCentralContext>(identityServerOptions => {
                identityServerOptions.ConfigureDbContext = (builder) => builder
                    .UseSqlServer(@"Server=(localdb)mssqllocaldb;Database=SsoCentral;Trusted_Connection=True;ConnectRetryCount=0");
            }).AddConfigurationStore<SsoCentralContext>(identityServerOptions =>
                identityServerOptions.ConfigureDbContext = (builder) => builder
                    .UseSqlServer(@"Server=(localdb)mssqllocaldb;Database=SsoCentral;Trusted_Connection=True;ConnectRetryCount=0")
            ).AddAspNetIdentity<Entities.User>();
    }

    public void Configure(IApplicationBuilder app, IWebHostEnvironment env) {
        if (env.IsDevelopment()) {
            app.UseDeveloperExceptionPage();
        } else {
            app.UseExceptionHandler("/Error");
            app.UseHsts();
        }

        app.UseHttpsRedirection();
        app.UseStaticFiles();

        app.Use(async (context, next) => {
            if (context.Request.Path.Value.Contains("connect/authorize")) {
                // Inspect the parameters of the Authorization request here
            }
            await next();
        });

        app.UseRouting();
        app.UseIdentityServer();
        app.UseAuthorization();
        app.UseEndpoints(endpoints => {
            endpoints.MapControllers();
            endpoints.MapRazorPages();
        });
    }
}
SsoCentralContext 
internal class SsoCentralContext : IdentityDbContext<Entities.User, Entities.Role, string>, IPersistedGrantDbContext, IConfigurationDbContext {
    ...
}
帐户控制器 
[Route("[controller]")]
public class AccountController : Controller {
    private readonly IIdentityServerInteractionService interaction;
    private readonly IHttpContextAccessor httpContextAccessor;
    private readonly IEventService events;
    public AccountController(...) { ... }

    [HttpGet("Login")]
    public async Task<IActionResult> Login([FromQuery] string returnUrl) {
        var context = await interaction.GetAuthorizationContextAsync(returnUrl);
        return View(new ViewModels.Account.LoginVM {
            ReturnUrl = returnUrl,
            User = new Dtos.Dtos.User {
                UserName = context?.LoginHint,
            }
        });
    }

    [HttpPost("Login")]
    public async Task<IActionResult> LoginPost([FromForm] ViewModels.Account.LoginVM model) {
        var request = await interaction.GetAuthorizationContextAsync(redirectUrl);
        try {
            var user = await accountRepository.Login(model.User.Email, model.Password);
            await events.RaiseAsync(new UserLoginSuccessEvent(model.User.UserName, model.User.Id, model.User.UserName, clientId: request?.Client.ClientId));
            var isUser = new IdentityServer4.IdentityServerUser(model.User.Id) {
                DisplayName = model.User.UserName,
                AdditionalClaims = new[] {
                    new System.Security.Claims.Claim("sub", model.User.Id),
                    new System.Security.Claims.Claim("email", model.User.Email),
                    new System.Security.Claims.Claim("name", model.User.UserName),
                }
            };
            await httpContextAccessor.HttpContext.SignInAsync(isUser);

            if (request != null) {
                return Redirect(model.ReturnUrl);
            } else if (Url.IsLocalUrl(model.ReturnUrl)) {
                return Redirect(model.ReturnUrl);
            } else if (string.IsNullOrEmpty(model.ReturnUrl)) {
                return Redirect("~/");
            } else {
                throw new System.Exception("Invalid return url");
            }
        } catch (System.Exception ex) {
            await events.RaiseAsync(new UserLoginFailureEvent(loginEx.Email, "invalid credentials", clientId: request?.Client.ClientId));
            return View(model);
        }
    }
}

安装

调试代码：

git clone https://github.com/PieterjanDeClippel/SSO.git
cd SSO/Application/Sso.Application.Data
dotnet ef database update --project ..Sso.Application.Data --context SsoApplicationContext
cd ../../Central/Sso.Central.Data
dotnet ef database update --project ..Sso.Central.Data --context SsoCentralContext

在SSO.Central.Data/SQL/CreateClient.sql上运行SQL脚本

或者，您可以还原位于/dacpac文件夹中的dacpac，而不是上述所有内容。

设置以下启动项目：

  • Sso.Central
  • Sso.Application

以下是正在发生的情况的演示

下面是输出窗口的截图：

IdentityServer4.Startup: Information: Starting IdentityServer4 version 4.1.2+997a6cdd643e46cd5762b710c4ddc43574cbec2e
IdentityServer4.Startup: Information: Using the default authentication scheme Identity.Application for IdentityServer
IdentityServer4.Startup: Debug: Using Identity.Application as default ASP.NET Core scheme for authentication
IdentityServer4.Startup: Debug: Using Identity.External as default ASP.NET Core scheme for sign-in
IdentityServer4.Startup: Debug: Using Identity.External as default ASP.NET Core scheme for sign-out
IdentityServer4.Startup: Debug: Using Identity.Application as default ASP.NET Core scheme for challenge
IdentityServer4.Startup: Debug: Using Identity.Application as default ASP.NET Core scheme for forbid
Microsoft.Hosting.Lifetime: Information: Application started. Press Ctrl+C to shut down.
Microsoft.Hosting.Lifetime: Information: Hosting environment: Development
Microsoft.Hosting.Lifetime: Information: Content root path: C:UsersPieterjan De Clippelsource
eposSSOCentralSso.Central
IdentityServer4.Startup: Debug: Login Url: /Account/Login
IdentityServer4.Startup: Debug: Login Return Url Parameter: ReturnUrl
IdentityServer4.Startup: Debug: Logout Url: /Account/Logout
IdentityServer4.Startup: Debug: ConsentUrl Url: /consent
IdentityServer4.Startup: Debug: Consent Return Url Parameter: returnUrl
IdentityServer4.Startup: Debug: Error Url: /home/error
IdentityServer4.Startup: Debug: Error Id Parameter: errorId
IdentityServer4.Hosting.EndpointRouter: Trace: No endpoint entry found for request path: /
Sso.Application.CentralHandler: Debug: HandleChallenge with Location: https://localhost:44359/connect/authorize?client_id=SsoApplicationClient&scope=weatherforecasts.read%20weatherforecasts.write&response_type=code&redirect_uri=https%3A%2F%2Flocalhost%3A44384%2Fsignin-central&code_challenge=HawX6uXjjANMQJQbhwsxi5zlsFrQKzGzOiyefqEbfnI&code_challenge_method=S256&state=CfDJ8PC7ZLg_v2RDsl0VaXUuuT9WNuyCeQha-k3ea6NLsX65PkYCYTKtf9EK-wHqKcvECq5o6zsSVViHYi3gw66FydCTo_YImAwSpM7ShCcajz-Otdo0V8btKv-PtRLPZ2xoy1WBK90ZqAYk-EvZl59PUWBAJRaiU7VVkD8kV2YdY6wkQzwJJYA8qYQSJFgz-cMTwrYsZOzVjMx1lkHTVpyCZ9Lg48p5wBqN0y6R49yWIuDfLu3_7vAivlTJdgcXz9NT9HVeu89V2afjFxJLTQa2igeympC7JO-HRhdK5Zr-GM538kMAjZz5OW8dRWzKo-dX6rHSy3DC4hgaNXLuPK4b5qgStG4Wi4U5PH0LE9flO4bP; and Set-Cookie: .AspNetCore.Correlation.central.vhEd_no3ibUFd7fiocNPiZ25zTfFWfbuuM8BVh6LUMo=N; expires=Mon, 15 Nov 2021 20:47:22 GMT; path=/signin-central; secure; samesite=none; httponly.
Sso.Application.CentralHandler: Information: AuthenticationScheme: central was challenged.
IdentityServer4.Hosting.EndpointRouter: Debug: Request path /connect/authorize matched to endpoint type Authorize
IdentityServer4.Hosting.EndpointRouter: Debug: Endpoint enabled: Authorize, successfully created handler: IdentityServer4.Endpoints.AuthorizeEndpoint
IdentityServer4.Hosting.IdentityServerMiddleware: Information: Invoking IdentityServer endpoint: IdentityServer4.Endpoints.AuthorizeEndpoint for /connect/authorize
IdentityServer4.Endpoints.AuthorizeEndpoint: Debug: Start authorize request
IdentityServer4.Endpoints.AuthorizeEndpoint: Debug: No user present in authorize request
IdentityServer4.Validation.AuthorizeRequestValidator: Debug: Start authorize request protocol validation
IdentityServer4.EntityFramework.Stores.ClientStore: Debug: SsoApplicationClient found in database: True
IdentityServer4.Stores.ValidatingClientStore: Trace: Calling into client configuration validator: IdentityServer4.Validation.DefaultClientConfigurationValidator
IdentityServer4.Stores.ValidatingClientStore: Debug: client configuration validation for client SsoApplicationClient succeeded.
IdentityServer4.Validation.AuthorizeRequestValidator: Debug: Checking for PKCE parameters
IdentityServer4.EntityFramework.Stores.ResourceStore: Debug: Found  identity scopes in database
IdentityServer4.EntityFramework.Stores.ResourceStore: Debug: Found weatherforecasts API resources in database
IdentityServer4.EntityFramework.Stores.ResourceStore: Debug: Found weatherforecasts.read, weatherforecasts.write scopes in database
IdentityServer4.Validation.AuthorizeRequestValidator: Debug: Calling into custom validator: IdentityServer4.Validation.DefaultCustomAuthorizeRequestValidator
IdentityServer4.Validation.AuthorizeRequestValidator: Trace: Authorize request protocol validation successful
IdentityServer4.Endpoints.AuthorizeEndpoint: Debug: ValidatedAuthorizeRequest
{
  "ClientId": "SsoApplicationClient",
  "ClientName": "SsoApplicationClient",
  "RedirectUri": "https://localhost:44384/signin-central",
  "AllowedRedirectUris": [
    "https://localhost:44384/signin-central"
  ],
  "SubjectId": "anonymous",
  "ResponseType": "code",
  "ResponseMode": "query",
  "GrantType": "authorization_code",
  "RequestedScopes": "weatherforecasts.read weatherforecasts.write",
  "State": "CfDJ8PC7ZLg_v2RDsl0VaXUuuT9WNuyCeQha-k3ea6NLsX65PkYCYTKtf9EK-wHqKcvECq5o6zsSVViHYi3gw66FydCTo_YImAwSpM7ShCcajz-Otdo0V8btKv-PtRLPZ2xoy1WBK90ZqAYk-EvZl59PUWBAJRaiU7VVkD8kV2YdY6wkQzwJJYA8qYQSJFgz-cMTwrYsZOzVjMx1lkHTVpyCZ9Lg48p5wBqN0y6R49yWIuDfLu3_7vAivlTJdgcXz9NT9HVeu89V2afjFxJLTQa2igeympC7JO-HRhdK5Zr-GM538kMAjZz5OW8dRWzKo-dX6rHSy3DC4hgaNXLuPK4b5qgStG4Wi4U5PH0LE9flO4bP",
  "PromptMode": "",
  "SessionId": "",
  "Raw": {
    "client_id": "SsoApplicationClient",
    "scope": "weatherforecasts.read weatherforecasts.write",
    "response_type": "code",
    "redirect_uri": "https://localhost:44384/signin-central",
    "code_challenge": "HawX6uXjjANMQJQbhwsxi5zlsFrQKzGzOiyefqEbfnI",
    "code_challenge_method": "S256",
    "state": "CfDJ8PC7ZLg_v2RDsl0VaXUuuT9WNuyCeQha-k3ea6NLsX65PkYCYTKtf9EK-wHqKcvECq5o6zsSVViHYi3gw66FydCTo_YImAwSpM7ShCcajz-Otdo0V8btKv-PtRLPZ2xoy1WBK90ZqAYk-EvZl59PUWBAJRaiU7VVkD8kV2YdY6wkQzwJJYA8qYQSJFgz-cMTwrYsZOzVjMx1lkHTVpyCZ9Lg48p5wBqN0y6R49yWIuDfLu3_7vAivlTJdgcXz9NT9HVeu89V2afjFxJLTQa2igeympC7JO-HRhdK5Zr-GM538kMAjZz5OW8dRWzKo-dX6rHSy3DC4hgaNXLuPK4b5qgStG4Wi4U5PH0LE9flO4bP"
  }
}
IdentityServer4.ResponseHandling.AuthorizeInteractionResponseGenerator: Trace: ProcessInteractionAsync
IdentityServer4.ResponseHandling.AuthorizeInteractionResponseGenerator: Information: Showing login: User is not authenticated
IdentityServer4.Endpoints.AuthorizeEndpoint: Trace: End authorize request. result type: IdentityServer4.Endpoints.Results.LoginPageResult
IdentityServer4.Hosting.IdentityServerMiddleware: Trace: Invoking result: IdentityServer4.Endpoints.Results.LoginPageResult
IdentityServer4.Hosting.EndpointRouter: Trace: No endpoint entry found for request path: /Account/Login
IdentityServer4.Services.OidcReturnUrlParser: Trace: returnUrl is valid
IdentityServer4.Validation.AuthorizeRequestValidator: Debug: Start authorize request protocol validation
IdentityServer4.EntityFramework.Stores.ClientStore: Debug: SsoApplicationClient found in database: True
IdentityServer4.Stores.ValidatingClientStore: Trace: Calling into client configuration validator: IdentityServer4.Validation.DefaultClientConfigurationValidator
IdentityServer4.Stores.ValidatingClientStore: Debug: client configuration validation for client SsoApplicationClient succeeded.
IdentityServer4.Validation.AuthorizeRequestValidator: Debug: Checking for PKCE parameters
IdentityServer4.EntityFramework.Stores.ResourceStore: Debug: Found  identity scopes in database
IdentityServer4.EntityFramework.Stores.ResourceStore: Debug: Found weatherforecasts API resources in database
IdentityServer4.EntityFramework.Stores.ResourceStore: Debug: Found weatherforecasts.read, weatherforecasts.write scopes in database
IdentityServer4.Validation.AuthorizeRequestValidator: Debug: Calling into custom validator: IdentityServer4.Validation.DefaultCustomAuthorizeRequestValidator
IdentityServer4.Validation.AuthorizeRequestValidator: Trace: Authorize request protocol validation successful
IdentityServer4.Services.OidcReturnUrlParser: Trace: AuthorizationRequest being returned
IdentityServer4.Services.DefaultIdentityServerInteractionService: Trace: AuthorizationRequest being returned
Sso.Application.CentralHandler: Debug: HandleChallenge with Location: https://localhost:44359/connect/authorize?client_id=SsoApplicationClient&scope=weatherforecasts.read%20weatherforecasts.write&response_type=code&redirect_uri=https%3A%2F%2Flocalhost%3A44384%2Fsignin-central&code_challenge=8Y5LgodB0uHMn0_GM9CmNYmqEYGfJz15EDSf2xaYfNg&code_challenge_method=S256&state=CfDJ8PC7ZLg_v2RDsl0VaXUuuT8NE8XSs1AYCpL2ZvWOHqXb3wfqoMRmAH4sn59F6H58d2TcUTPijfKCPrL9GlynS0MZJSfzQVchhFExl9Q9Qg_7J9qLr_TP-4z9tOeCcwFKDdl9O-_ecFuNc1SzWGb_DkgtPfFvVBwlIPahb4SChuHwhkHHynIVGxTUb8Xpdtmtpu2wXjq9vW-G_ShcEdRxWBQBCSqAtu3w2XDPEmtz1GwaGwhc68sZ38-PF2RW2WmrY_E1OK7mET9yfxK1Y0IAfH4I8KodEoK6sQohtOgVKrJKZLfu6H7ndhsON85jtELk1uEYZHHmHJq544ce1TkxQkN030XSHrDAIgIKZKEyb1Ft; and Set-Cookie: .AspNetCore.Correlation.central.ndfb5rjEd-gqaE4rKKeJb2DBQ2hTgf9U22nCZ6Day-U=N; expires=Mon, 15 Nov 2021 20:47:43 GMT; path=/signin-central; secure; samesite=none; httponly.
Sso.Application.CentralHandler: Information: AuthenticationScheme: central was challenged.
IdentityServer4.Hosting.EndpointRouter: Debug: Request path /connect/authorize matched to endpoint type Authorize
IdentityServer4.Hosting.EndpointRouter: Debug: Endpoint enabled: Authorize, successfully created handler: IdentityServer4.Endpoints.AuthorizeEndpoint
IdentityServer4.Hosting.IdentityServerMiddleware: Information: Invoking IdentityServer endpoint: IdentityServer4.Endpoints.AuthorizeEndpoint for /connect/authorize
IdentityServer4.Endpoints.AuthorizeEndpoint: Debug: Start authorize request
IdentityServer4.Endpoints.AuthorizeEndpoint: Debug: No user present in authorize request
IdentityServer4.Validation.AuthorizeRequestValidator: Debug: Start authorize request protocol validation
IdentityServer4.EntityFramework.Stores.ClientStore: Debug: SsoApplicationClient found in database: True
IdentityServer4.Stores.ValidatingClientStore: Trace: Calling into client configuration validator: IdentityServer4.Validation.DefaultClientConfigurationValidator
IdentityServer4.Stores.ValidatingClientStore: Debug: client configuration validation for client SsoApplicationClient succeeded.
IdentityServer4.Validation.AuthorizeRequestValidator: Debug: Checking for PKCE parameters
IdentityServer4.EntityFramework.Stores.ResourceStore: Debug: Found  identity scopes in database
IdentityServer4.EntityFramework.Stores.ResourceStore: Debug: Found weatherforecasts API resources in database
IdentityServer4.EntityFramework.Stores.ResourceStore: Debug: Found weatherforecasts.read, weatherforecasts.write scopes in database
IdentityServer4.Validation.AuthorizeRequestValidator: Debug: Calling into custom validator: IdentityServer4.Validation.DefaultCustomAuthorizeRequestValidator
IdentityServer4.Validation.AuthorizeRequestValidator: Trace: Authorize request protocol validation successful

迪斯科

{
  "issuer": "https://localhost:44359",
  "jwks_uri": "https://localhost:44359/.well-known/openid-configuration/jwks",
  "authorization_endpoint": "https://localhost:44359/connect/authorize",
  "token_endpoint": "https://localhost:44359/connect/token",
  "userinfo_endpoint": "https://localhost:44359/connect/userinfo",
  "end_session_endpoint": "https://localhost:44359/connect/endsession",
  "check_session_iframe": "https://localhost:44359/connect/checksession",
  "revocation_endpoint": "https://localhost:44359/connect/revocation",
  "introspection_endpoint": "https://localhost:44359/connect/introspect",
  "device_authorization_endpoint": "https://localhost:44359/connect/deviceauthorization",
  "frontchannel_logout_supported": true,
  "frontchannel_logout_session_supported": true,
  "backchannel_logout_supported": true,
  "backchannel_logout_session_supported": true,
  "scopes_supported": [
    "openid",
    "profile",
    "email",
    "role",
    "weatherforecasts.read",
    "weatherforecasts.write",
    "offline_access"
  ],
  "claims_supported": [
    "role"
  ],
  "grant_types_supported": [
    "authorization_code",
    "client_credentials",
    "refresh_token",
    "implicit",
    "password",
    "urn:ietf:params:oauth:grant-type:device_code"
  ],
  "response_types_supported": [
    "code",
    "token",
    "id_token",
    "id_token token",
    "code id_token",
    "code token",
    "code id_token token"
  ],
  "response_modes_supported": [
    "form_post",
    "query",
    "fragment"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post"
  ],
  "id_token_signing_alg_values_supported": [
    "RS256"
  ],
  "subject_types_supported": [
    "public"
  ],
  "code_challenge_methods_supported": [
    "plain",
    "S256"
  ],
  "request_parameter_supported": true
}

推荐答案

好的，显然我错过了UseAuthentication中间件，但现在从标识服务器返回的令牌似乎不包含任何信息

这篇关于标识服务器4：登录回调返回404状态代码-未触发UserInfo终结点的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持编程学习网！

本站部分内容来源互联网,如果有图片或者内容侵犯您的权益请联系我们删除！

相关文档推荐

尝试更新ViewModel中的Ui属性时DispatcherQueue为空
DispatcherQueue null when trying to update Ui property in ViewModel(尝试更新ViewModel中的Ui属性时DispatcherQueue为空)
在多个监视器上绘制所有窗口
Drawing over all windows on multiple monitors(在多个监视器上绘制所有窗口)
以编程方式显示桌面
Programmatically show the desktop(以编程方式显示桌面)
按类型访问对象的C#泛型集实现
c# Generic Setlt;Tgt; implementation to access objects by type(按类型访问对象的C#泛型集实现)
在ASP.NET核心中使用上下文注入时发生InvalidOperationException
InvalidOperationException When using Context Injection in ASP.Net Core(在ASP.NET核心中使用上下文注入时发生InvalidOperationException)
LINQ多对多关系，如何写一个正确的WHERE子句？
LINQ many-to-many relationship, how to write a correct WHERE clause?(LINQ多对多关系，如何写一个正确的WHERE子句？)
前端问题php问题Java问题Python问题C/C++问题C#/.NET问题移动开发问题数据库问题
html vue validate adobe dreamweaver hbuilder vscode aptana editor dedecms ckeditor 编辑器 过滤 规则 织梦 图片本地化 模板 缩略图 图集 图片删除 ajax 瀑布流 无限下拉 cms 判断 sql 清除 tag 文档数 angularjs2 按钮 切换效果 vue3 thinkphp yii2 css 项目列表 li go Beego Buffalo Echo Gin Iris Revel 百度云 虚拟主机 pbootcms 伪静态 框架 排序 数据库 对象 字段 sql语句 php 字符串 分割 D3.js bootstrap 函数 svg selectAll 织梦cms 关键词 解析 采集 长度限制 日期 正则表达式