Web-API-Autorisierung über HttpWebRequest

Question

Ich habe eine Funktion, um meine Web-API aufzurufen. Es funktioniert gut, wenn TestCallingRemotely auf [AllowAnonymous] festgelegt ist.

var httpWebRequest = (HttpWebRequest)WebRequest.Create(
    "http://localhost/api/services/myApp/commonLookup/TestCallingRemotely"); 
httpWebRequest.ContentType = "application/json"; 
httpWebRequest.Method = "POST"; 

using (var streamWriter = new StreamWriter(httpWebRequest.GetRequestStream())) { 
    string input = "{}"; 

    streamWriter.Write(input); 
    streamWriter.Flush(); 
    streamWriter.Close(); 
} 

var httpResponse = (HttpWebResponse)httpWebRequest.GetResponse(); 

Wie gebe ich die username und password zum HttpWebRequest für die Zulassung?

Ich muss meine Web-API von CLR-Integration aufrufen, die nur unterstützt System.Net.

Answer 1

uses bearer token authentication infrastructure Start Vorlage des ABP.

var token = GetToken(username, password); 

// var httpWebRequest = (HttpWebRequest)WebRequest.Create(
//  "http://localhost/api/services/myApp/commonLookup/TestCallingRemotely"); 
// httpWebRequest.ContentType = "application/json"; 
// httpWebRequest.Method = "POST"; 

httpWebRequest.Headers.Add("Authorization", "Bearer " + token); 

// ... 

Get Token

Dieses eine rohe Art und Weise verwendet, indem an MSDN article das Token, inspiriert zu extrahieren.

private string GetToken(string username, string password, string tenancyName = null) 
{ 
    var httpWebRequest = (HttpWebRequest)WebRequest.Create(
     "http://localhost:6334/api/Account/Authenticate"); 
    httpWebRequest.ContentType = "application/json"; 
    httpWebRequest.Method = "POST"; 

    using (var streamWriter = new StreamWriter(httpWebRequest.GetRequestStream())) 
    { 
     var input = "{\"usernameOrEmailAddress\":\"" + username + "\"," + 
        "\"password\":\"" + password + "\"}"; 

     if (tenancyName != null) 
     { 
      input = input.TrimEnd('}') + "," + 
        "\"tenancyName\":\"" + tenancyName + "\"}"; 
     } 

     streamWriter.Write(input); 
     streamWriter.Flush(); 
     streamWriter.Close(); 
    } 

    var httpResponse = (HttpWebResponse)httpWebRequest.GetResponse(); 
    string response; 

    using (var streamReader = new StreamReader(httpResponse.GetResponseStream())) 
    { 
     response = streamReader.ReadToEnd(); 
    } 

    // Crude way 
    var entries = response.TrimStart('{').TrimEnd('}').Replace("\"", String.Empty).Split(','); 

    foreach (var entry in entries) 
    { 
     if (entry.Split(':')[0] == "result") 
     { 
      return entry.Split(':')[1]; 
     } 
    } 

    return null; 
} 

Answer 2

Wenn der Server die Standardauthentifizierung verwendet, kann man den Header wie folgt hinzu:

var httpWebRequest = (HttpWebRequest) WebRequest.Create(
"http://localhost/api/services/myApp/commonLookup/TestCallingRemotely"); 
httpWebRequest.ContentType = "application/json"; 
httpWebRequest.Method = "POST"; 

var username = "Aladdin"; 
var password = "opensesame"; 

var bytes = Encoding.UTF8.GetBytes($"{username}:{password}"); 
httpWebRequest.Headers.Add("Authorization", $"Basic {Convert.ToBase64String(bytes)}"); 

using (var streamWriter = new StreamWriter(httpWebRequest.GetRequestStream())) 
{ 
    string input = "{}"; 

    streamWriter.Write(input); 
    streamWriter.Flush(); 
    streamWriter.Close(); 
} 

var httpResponse = (HttpWebResponse)httpWebRequest.GetResponse();