1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

///

        ///

        ///

        public async Task> AuthorizeAsync(List<string> policys)

        {

            Listlist = new List();

            foreach (string policy in policys)

            {

                bool isGranted= (await AuthorizationService.AuthorizeAsync(policy)).Succeeded;

                PermissionGrantedDto permissionGrantedDto = new PermissionGrantedDto();

                permissionGrantedDto.PermissionName = policy;

                permissionGrantedDto.IsGranted = isGranted;

                list.Add(permissionGrantedDto);

            }

            return list;

        }

1

2

3

4

5

6

7

public class PermissionData

    {

        public const string CategoryManagement = "Category_Management";

        public const string CategoryManagementCreate = "Category_Management_Create";

        public const string CategoryManagementEdit = "Category_Management_Edit";

        public const string CategoryManagementDelete = "Category_Management_Delete";

    }

public class PermissionGrantedCache

    {

        ///

        public string PermissionName { get; set; }

        ///

        public bool IsGranted { get; set; }

    }

public class CustomAuthorizationPolicyProvider : DefaultAuthorizationPolicyProvider

    {

        private readonly AuthorizationOptions _options;

        public CustomAuthorizationPolicyProvider(IOptionsoptions): base(options)

        {

            _options = options.Value;

        }

        public override async TaskGetPolicyAsync(string policyName)

        {

            var policy = await base.GetPolicyAsync(policyName);

            if (policy != null)

            {

                return policy;

            }

            var policyBuilder = new AuthorizationPolicyBuilder(Array.Empty<string>());

            policyBuilder.Requirements.Add(new PermissionRequirement(policyName));

            return policyBuilder.Build();

        }

    }

public class PermissionRequirement : IAuthorizationRequirement

    {

        public string PermissionName { get; }

        public PermissionRequirement(string permissionName)

        {

            PermissionName = permissionName;

        }

    }

public class PermissionRequirementHandler : AuthorizationHandler

    {

        private static List_permissionGrantedCaches;

        private readonly TokenHttpClient _tokenHttpClient;

        public PermissionRequirementHandler(TokenHttpClient tokenHttpClient)

        {

            _tokenHttpClient = tokenHttpClient;

        }

        protected override async Task HandleRequirementAsync(

            AuthorizationHandlerContext context,

            PermissionRequirement requirement)

        {

            if ((await PermissionGranted(requirement.PermissionName)))

            {

                context.Succeed(requirement);

            }

            else

            {

                context.Fail();

            }

            //return Task.CompletedTask;

        }

        protected async Task<bool> PermissionGranted(string permissionName)

        {

            _permissionGrantedCaches= _permissionGrantedCaches ?? new List();

            var grantedCache = _permissionGrantedCaches.FirstOrDefault(p => p.PermissionName == permissionName);

            if (grantedCache != null)

            {

                return grantedCache.IsGranted;

            }

            else

            {

                _permissionGrantedCaches.Clear();

                //获取所有权限

                FieldInfo[] fis = typeof(PermissionData).GetFields();

                List<string> pinfoList = new List<string>();

                foreach (FieldInfo pinfo in fis)

                {

                    pinfoList.Add(pinfo.GetRawConstantValue().ToString());

                }

                var response = await _tokenHttpClient.PostAsJsonWithTokenAsync($"/api/Test/authorization/authorize", pinfoList);

                if (response.IsSuccessStatusCode)

                {

                    string content = await response.Content.ReadAsStringAsync();

                    _permissionGrantedCaches.AddRange(JsonConvert.DeserializeObject>(content));

                    var grantedCacheNew = _permissionGrantedCaches.FirstOrDefault(p => p.PermissionName == permissionName);

                    if (grantedCacheNew != null)

                    {

                        return grantedCacheNew.IsGranted;

                    }

                    else

                    {

                        return false;

                    }

                }

                else

                {

                    return false;

                }

            }

        }

    }

builder.Services.AddScoped();

            builder.Services.AddScoped(s => s.GetRequiredService());

            builder.Services.AddScoped();,>

            builder.Services.AddSingleton();,>

            builder.Services.AddSingleton();,>

@page "/commodities/categorymanage"

@attribute [Authorize(PermissionData.CategoryManagement)]

类别设置

@code {

}