简介
主要是采用identity Server4 和ocelot 加上consul 实现简单的客户端模式
开发准备
环境准备
- 下载并安装Consul具体请参考前几篇的内容
项目介绍
- 创建ocelotServerTest项目
- 创建IdentityServer4Test项目
- 创建consulServer项目(API项目)
1.创建Consulserver项目
参考该地址进行创建:微服务(入门二):netcore通过consul注册服务
2.创建identityServer项目
参考该地址进行创建:微服务(入门四):identityServer的简单使用(客户端授权)
3.创建ocelotServerTest项目
3.1创建一个webAPI项目
3.2 修改startUP配置,添加authentication认证
![复制代码](https://common.cnblogs.com/images/copycode.gif)
using System; using System.Collections.Generic; using System.Linq; using System.Threading.Tasks; using IdentityServer4.AccessTokenValidation; using Microsoft.AspNetCore.Authentication.JwtBearer; using Microsoft.AspNetCore.Builder; using Microsoft.AspNetCore.Hosting; using Microsoft.AspNetCore.HttpsPolicy; using Microsoft.AspNetCore.Mvc; using Microsoft.Extensions.Configuration; using Microsoft.Extensions.DependencyInjection; using Microsoft.Extensions.Logging; using Microsoft.Extensions.Options; using netCore; using Ocelot.DependencyInjection; using Ocelot.Middleware; using Ocelot.Provider.Consul; using Ocelot.Provider.Polly; namespace IdentityServer4Test { public class Startup { public Startup(IConfiguration configuration) { Configuration = configuration; } public IConfiguration Configuration { get; } // This method gets called by the runtime. Use this method to add services to the container. public void ConfigureServices(IServiceCollection services) { services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_1); services .AddAuthentication(JwtBearerDefaults.AuthenticationScheme)//添加认证 .AddIdentityServerAuthentication("TestKey", o => { o.Authority = "http://127.0.0.1:3322";//要认证的服务器地址 o.RequireHttpsMetadata = false;//不启用https o.ApiName = "api1";//要认证的服务名称 }); services.AddOcelot(Configuration).AddConsul().AddPolly(); } // This method gets called by the runtime. Use this method to configure the HTTP request pipeline. public void Configure(IApplicationBuilder app, IHostingEnvironment env) { if (env.IsDevelopment()) { app.UseDeveloperExceptionPage(); } else { app.UseHsts(); } app.UseMvc(); app.UseOcelot().Wait(); app.UseAuthentication(); } } }
![复制代码](https://common.cnblogs.com/images/copycode.gif)
3.3创建ocelot.json文件并且添加AuthenticationOptions
"AuthenticationOptions": { "AuthenticationProviderKey": "TestKey", "AllowedScopes": [] }
![复制代码](https://common.cnblogs.com/images/copycode.gif)
{ "ReRoutes": [ { //下游路由模板,真实请求的路径 "DownstreamPathTemplate": "/api/{everything}", //请求的方式,例如:http,https "DownstreamScheme": "http", //服务器名称 "ServiceName": "zyz1", //启用consul服务 "UseServiceDiscovery": true, //服务熔断 "QoSOptions": { "ExceptionsAllowedBeforeBreaking": 3, //允许多少次异常请求 "DurationOfBreak": 5, //熔断时间,单位为秒 "TimeoutValue": 5000 //如果下游请求的处理时间超过多少则自动设置超时 }, //"RateLimitOptions": { // "ClientWhitelist": [ "admin" ], // 白名单 // "EnableRateLimiting": true, // 是否启用限流 // "Period": "1m", // 统计时间段:1s, 5m, 1h, 1d // "PeriodTimespan": 15, // 多少秒之后客户端可以重试 // "Limit": 5 // 在统计时间段内允许的最大请求数量 //},//负载均衡: //RoundRobin轮流发送; //LeastConnection – 将请求发往最空闲的那个服务器 //NoLoadBalance – 总是发往第一个请求或者是服务发现 "LoadBalancerOptions": { "Type": "RoundRobin" }, //上游地址配置 "UpstreamPathTemplate": "/test/{everything}", //上游支持的请求类型 "UpstreamHttpMethod": [ "GET", "POST" ], "AuthenticationOptions": { "AuthenticationProviderKey": "TestKey", "AllowedScopes": [] } }, { "DownstreamPathTemplate": "/api/Token", "DownstreamScheme": "http", "DownstreamHostAndPorts": [ { "Host": "127.0.0.1", "Port": 3322 } ], "UpstreamPathTemplate": "/GetToken", "UpstreamHttpMethod": [ "Get" ] } ], "GlobalConfiguration": { "BaseUrl": "https://localhost:8596", //consul服务器地址和ip "ServiceDiscoveryProvider": { "Host": "localhost", "Port": 8500 } } }
![复制代码](https://common.cnblogs.com/images/copycode.gif)
3.4 修改program文件,添加访问地址,以及ocelot的配置文件
![复制代码](https://common.cnblogs.com/images/copycode.gif)
using System; using System.Collections.Generic; using System.IO; using System.Linq; using System.Threading.Tasks; using Microsoft.AspNetCore; using Microsoft.AspNetCore.Hosting; using Microsoft.Extensions.Configuration; using Microsoft.Extensions.Logging; namespace IdentityServer4Test { public class Program { public static void Main(string[] args) { CreateWebHostBuilder(args).Build().Run(); } public static IWebHostBuilder CreateWebHostBuilder(string[] args) => WebHost.CreateDefaultBuilder(args) .UseUrls("http://localhost:8596") .ConfigureAppConfiguration(conf => { conf.AddJsonFile("ocelot.json", optional: false, reloadOnChange: true); }) .UseStartup<Startup>(); } }
![复制代码](https://common.cnblogs.com/images/copycode.gif)
测试
1.首先开启consul服务
2.接下来把服务注册到consul当中,启动ConsulServer
3.启动IdentityServer4Test和ocelotServerTest服务
4.通过postMan获取token(正式开发中不会如此使用)
5.根据获取的token去请求Consulserver当中的数据,可正常返回数据
标签:AspNetCore,consul,System,public,ocelot,using,Microsoft,identityServer4 From: https://www.cnblogs.com/weihengblogs/p/17030499.html