/***********************************************************************
|
* Project: baifenBinfa
|
* ProjectName: 百分兵法管理系统
|
* Web: http://chuanyin.com
|
* Author:
|
* Email:
|
* CreateTime: 202403/02
|
* Description: 暂无
|
***********************************************************************/
|
|
using System;
|
using System.Collections.Generic;
|
using System.Text;
|
using Microsoft.AspNetCore.Authorization;
|
using Microsoft.IdentityModel.Tokens;
|
|
namespace CoreCms.Net.Auth.Policys
|
{
|
/// <summary>
|
/// 必要参数类
|
/// 继承 IAuthorizationRequirement，用于设计自定义权限处理器PermissionHandler
|
/// 因为AuthorizationHandler 中的泛型参数 TRequirement 必须继承 IAuthorizationRequirement
|
/// </summary>
|
public class PermissionRequirement : IAuthorizationRequirement
|
{
|
/// <summary>
|
/// 用户权限集合，一个订单包含了很多详情，
|
/// 同理，一个网站的认证发行中，也有很多权限详情(这里是Role和URL的关系)
|
/// </summary>
|
public List<PermissionItem> Permissions { get; set; }
|
/// <summary>
|
/// 无权限action
|
/// </summary>
|
public string DeniedAction { get; set; }
|
|
/// <summary>
|
/// 认证授权类型
|
/// </summary>
|
public string ClaimType { internal get; set; }
|
/// <summary>
|
/// 请求路径
|
/// </summary>
|
public string LoginPath { get; set; } = "/Api/Login";
|
/// <summary>
|
/// 发行人
|
/// </summary>
|
public string Issuer { get; set; }
|
/// <summary>
|
/// 订阅人
|
/// </summary>
|
public string Audience { get; set; }
|
/// <summary>
|
/// 过期时间
|
/// </summary>
|
public TimeSpan Expiration { get; set; }
|
/// <summary>
|
/// 签名验证
|
/// </summary>
|
public SigningCredentials SigningCredentials { get; set; }
|
|
|
/// <summary>
|
/// 构造
|
/// </summary>
|
/// <param name="deniedAction">拒约请求的url</param>
|
/// <param name="permissions">权限集合</param>
|
/// <param name="claimType">声明类型</param>
|
/// <param name="issuer">发行人</param>
|
/// <param name="audience">订阅人</param>
|
/// <param name="signingCredentials">签名验证实体</param>
|
/// <param name="expiration">过期时间</param>
|
public PermissionRequirement(string deniedAction, List<PermissionItem> permissions, string claimType, string issuer, string audience, SigningCredentials signingCredentials, TimeSpan expiration)
|
{
|
ClaimType = claimType;
|
DeniedAction = deniedAction;
|
Permissions = permissions;
|
Issuer = issuer;
|
Audience = audience;
|
Expiration = expiration;
|
SigningCredentials = signingCredentials;
|
}
|
}
|
}
|
