转移.net core 3.1，为.NET 5做准备

OpenAuth.Identity/CustomProfileService.cs

@@ -0,0 +1,100 @@
+using System.Linq;
+using System.Security.Claims;
+using System.Threading.Tasks;
+using IdentityModel;
+using IdentityServer4.Extensions;
+using IdentityServer4.Models;
+using IdentityServer4.Services;
+using IdentityServer4.Test;
+using Microsoft.Extensions.Logging;
+using OpenAuth.App;
+using OpenAuth.Repository.Domain;
+
+namespace OpenAuth.IdentityServer
+{
+    public class CustomProfileService : IProfileService
+    {
+        /// <summary>
+        /// The logger
+        /// </summary>
+        protected readonly ILogger Logger;
+
+        protected UserManagerApp UserManager;
+
+        /// <summary>
+        /// Initializes a new instance of the <see cref="TestUserProfileService"/> class.
+        /// </summary>
+        /// <param name="users">The users.</param>
+        /// <param name="logger">The logger.</param>
+        public CustomProfileService( ILogger<TestUserProfileService> logger, UserManagerApp userManager)
+        {
+            Logger = logger;
+            UserManager = userManager;
+        }
+
+        /// <summary>
+        /// 只要有关用户的身份信息单元被请求（例如在令牌创建期间或通过用户信息终点），就会调用此方法
+        /// </summary>
+        /// <param name="context">The context.</param>
+        /// <returns></returns>
+        public virtual Task GetProfileDataAsync(ProfileDataRequestContext context)
+        {
+            context.LogProfileRequest(Logger);
+
+            //判断是否有请求Claim信息
+            if (context.RequestedClaimTypes.Any())
+            {
+                var user = GetUserById(context.Subject.GetSubjectId());
+                if (user != null)
+                {
+                    //调用此方法以后内部会进行过滤，只将用户请求的Claim加入到 context.IssuedClaims 集合中 这样我们的请求方便能正常获取到所需Claim
+                    var claims = new[]
+                    {
+                        new Claim(ClaimTypes.Name, user.Account),  //请求用户的账号，这个可以保证User.Identity.Name有值
+                        new Claim(JwtClaimTypes.Name, user.Name),  //请求用户的姓名
+                    };
+                    //返回apiresource中定义的claims   
+                    context.AddRequestedClaims(claims);
+                }
+            }
+
+            context.LogIssuedClaims(Logger);
+
+            return Task.CompletedTask;
+        }
+
+        /// <summary>
+        /// 验证用户是否有效 例如：token创建或者验证
+        /// </summary>
+        /// <param name="context">The context.</param>
+        /// <returns></returns>
+        public virtual Task IsActiveAsync(IsActiveContext context)
+        {
+            Logger.LogDebug("IsActive called from: {caller}", context.Caller);
+
+              var user = GetUserById(context.Subject.GetSubjectId());
+            context.IsActive = user?.Status == 0;
+            return Task.CompletedTask;
+        }
+
+        private User GetUserById(string id)
+        {
+            User user;
+            if (id == Define.SYSTEM_USERNAME)
+            {
+                user = new User
+                {
+                    Account = Define.SYSTEM_USERNAME,
+                    Id = Define.SYSTEM_USERNAME,
+                    Name = Define.SYSTEM_USERNAME
+                };
+            }
+            else
+            {
+                user = UserManager.Get(id);
+            }
+
+            return user;
+        }
+    }
+}