■ IClaimsTransformation 인터페이스의 TransformAsync 메소드를 사용해 클레임 정책에 클레임을 추가하는 방법을 보여준다.
▶ Controllers/HomeController.cs
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 |
using Microsoft.AspNetCore.Authentication; using Microsoft.AspNetCore.Authorization; using Microsoft.AspNetCore.Mvc; using System.Collections.Generic; using System.Security.Claims; using System.Threading.Tasks; namespace TestProject.Controllers { /// <summary> /// 홈 컨트롤러 /// </summary> public class HomeController : Controller { //////////////////////////////////////////////////////////////////////////////////////////////////// Method ////////////////////////////////////////////////////////////////////////////////////////// Public #region 인덱스 페이지 처리하기 - Index() /// <summary> /// 인덱스 페이지 처리하기 /// </summary> /// <returns>액션 결과</returns> public IActionResult Index() { return View(); } #endregion #region 비밀 페이지 처리하기 - Secret() /// <summary> /// 비밀 페이지 처리하기 /// </summary> /// <returns>액션 결과</returns> [Authorize] public IActionResult Secret() { return View(); } #endregion #region 로그인 페이지 처리하기 - Login(returnURL) /// <summary> /// 로그인 페이지 처리하기 /// </summary> /// <param name="returnURL">반환 URL</param> /// <returns>액션 결과</returns> [HttpGet] public IActionResult Login(string returnURL = null) { ViewData["ReturnURL"] = returnURL; return View(); } #endregion #region 로그인 페이지 처리하기 - Login(userName, password, returnURL) /// <summary> /// 로그인 페이지 처리하기 /// </summary> /// <param name="userName">사용자명</param> /// <param name="password">패스워드</param> /// <param name="returnURL">반환 URL</param> /// <returns>액션 결과</returns> [HttpPost] public async Task<IActionResult> Login(string userName, string password, string returnURL) { if(userName == "홍길동" && password == "1234") { List<Claim> personClaimList = new List<Claim>() { new Claim(ClaimTypes.Name , "홍길동" ), new Claim(ClaimTypes.Gender , "남성" ), new Claim(ClaimTypes.DateOfBirth, "2000-01-01" ), new Claim(ClaimTypes.HomePhone , "02-700-1000" ), new Claim(ClaimTypes.MobilePhone, "010-3000-4000" ), new Claim(ClaimTypes.Email , "hkd@daum.net" ), new Claim(ClaimTypes.Country , "한국" ), new Claim(ClaimTypes.PostalCode , "300-400" ), new Claim(ClaimTypes.Role , "User" ), //new Claim("SalesLevel" , "A" ) }; List<Claim> licenseClaimList = new List<Claim>() { new Claim(ClaimTypes.Name , "홍길동"), new Claim("License" , "1급" ) }; ClaimsIdentity personClaimsIdentity = new ClaimsIdentity(personClaimList , "개인"); ClaimsIdentity licenseClaimsIdentity = new ClaimsIdentity(licenseClaimList, "정부"); ClaimsPrincipal claimsPrincipal = new ClaimsPrincipal ( new [] { personClaimsIdentity, licenseClaimsIdentity } ); await HttpContext.SignInAsync("CookieAuthentication", claimsPrincipal); if(returnURL == null) { return RedirectToAction("Index"); } else { return Redirect(returnURL); } } else { ViewData["Message"] = "등록되지 않은 사용자 입니다."; return View(); } } #endregion #region 로그아웃 페이지 처리하기 - Logout() /// <summary> /// 로그아웃 페이지 처리하기 /// </summary> /// <returns>액션 결과 태스크</returns> public async Task<IActionResult> Logout() { await HttpContext.SignOutAsync("CookieAuthentication"); return RedirectToAction("Index"); } #endregion #region 권한 없음 페이지 처리하기 - NoAuthorized() /// <summary> /// 권한 없음 페이지 처리하기 /// </summary> /// <returns>액션 결과</returns> public IActionResult NoAuthorized() { return View(); } #endregion } } |
▶ Transformation/ClaimsTransformation.cs
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 |
using Microsoft.AspNetCore.Authentication; using System.Linq; using System.Security.Claims; using System.Threading.Tasks; namespace TestProject.Transformation { /// <summary> /// 클레임 변환 /// </summary> public class ClaimsTransformation : IClaimsTransformation { //////////////////////////////////////////////////////////////////////////////////////////////////// Method ////////////////////////////////////////////////////////////////////////////////////////// Public #region 변환하기 (비동기) - TransformAsync(principal) /// <summary> /// 변환하기 (비동기) /// </summary> /// <param name="principal">클레임 정책</param> /// <returns>클레임 정책 태스크</returns> public Task<ClaimsPrincipal> TransformAsync(ClaimsPrincipal principal) { bool hasClaim = principal.Claims.Any(x => x.Type == "SalesLevel"); if(!hasClaim) { ((ClaimsIdentity)principal.Identity).AddClaim(new Claim("SalesLevel", "A")); } return Task.FromResult(principal); } #endregion } } |
▶ Startup.cs
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 |
using Microsoft.AspNetCore.Authentication; using Microsoft.AspNetCore.Authorization; using Microsoft.AspNetCore.Builder; using Microsoft.AspNetCore.Hosting; using Microsoft.Extensions.DependencyInjection; using Microsoft.Extensions.Hosting; using TestProject.Handlers; using TestProject.Transformation; namespace TestProject { /// <summary> /// 시작 /// </summary> public class Startup { //////////////////////////////////////////////////////////////////////////////////////////////////// Method ////////////////////////////////////////////////////////////////////////////////////////// Public #region 서비스 컬렉션 구성하기 - ConfigureServices(services) /// <summary> /// 서비스 컬렉션 구성하기 /// </summary> /// <param name="services">서비스 컬렉션</param> public void ConfigureServices(IServiceCollection services) { services.AddAuthentication("CookieAuthentication") .AddCookie ( "CookieAuthentication", options => { options.Cookie.Name = "TestProject.Cookie"; options.LoginPath = "/Home/Login"; options.AccessDeniedPath = "/Home/NoAuthorized"; } ); services.AddScoped<IAuthorizationHandler, DocumentAuthorizationHandler>(); services.AddScoped<IClaimsTransformation, ClaimsTransformation>(); services.AddControllersWithViews(); } #endregion #region 구성하기 - Configure(app, environment) /// <summary> /// 구성하기 /// </summary> /// <param name="app">애플리케이션 빌더</param> /// <param name="environment">웹 호스트 환경</param> public void Configure(IApplicationBuilder app, IWebHostEnvironment environment) { if(environment.IsDevelopment()) { app.UseDeveloperExceptionPage(); } app.UseRouting(); app.UseAuthentication(); app.UseAuthorization(); app.UseEndpoints ( endpoints => { endpoints.MapDefaultControllerRoute(); } ); } #endregion } } |
