identityserver使用記錄

系列：

https://www.cnblogs.com/stulzq/p/8119928.html

自定義認證token

https://www.cnblogs.com/stulzq/p/8726002.html

https://www.cnblogs.com/CreateMyself/p/9399118.html

與API內建

https://www.cnblogs.com/stulzq/p/10346095.html

https://identityserver4.readthedocs.io/en/latest/topics/add_apis.html

scope設定

https://github.com/IdentityServer/IdentityServer4/blob/main/src/IdentityServer4/host/Configuration/Resources.cs

https://www.cnblogs.com/xhznl/p/13223964.html

jwt

https://www.cnblogs.com/bruce1992/p/14065582.html

nginx轉發設定

https://github.com/IdentityServer/IdentityServer4/issues/4631

#identityserver使用ForwardedHeaders
services.Configure<ForwardedHeadersOptions>(options =>
{
    options.ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto;
    options.KnownNetworks.Clear();
    options.KnownProxies.Clear();
});

app.UseForwardedHeaders();

#如果identityserver轉發至網站的子路徑中
app.Use(async (ctx, next) =>
{
    string prefix = ctx.Request.Headers["X-Forwarded-Prefix"];
    if(!string.IsNullOrWhiteSpace(prefix))
    {
        string host = ctx.Request.Host.Value;
        ctx.Request.Host = new HostString($"{host}/{prefix}");
    }
    await next();
});

#nginx設定：
location /msg/ {
    proxy_pass         http://ip:port/;
    proxy_http_version 1.1;
    proxy_set_header   Upgrade $http_upgrade;
    proxy_set_header   Connection keep-alive;
    proxy_set_header   Host $host;
    proxy_cache_bypass $http_upgrade;
    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header   X-Forwarded-Proto $scheme;
    proxy_set_header   X-Forwarded-Prefix msg;
}

           

轉載請注明出處: cnblogs.com/wswind