首先在Startup的ConfigureServices方法添加一段权限代码
services.AddAuthentication(x=> { ???????????????x.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme; ???????????????x.DefaultChallengeScheme = CookieAuthenticationDefaults.AuthenticationScheme; ???????????????x.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme; ???????????}).AddCookie(CookieAuthenticationDefaults.AuthenticationScheme, x => ???????????????????{ ???????????????????????//登录地址 ???????????????????????x.LoginPath = "/Home/Login"; ???????????????????????//sid ???????????????????????x.Cookie.Name = "mycookie"; ???????????????????????x.Cookie.Path = "/"; ???????????????????????x.Cookie.HttpOnly = true; ???????????????????????x.Cookie.Expiration = new TimeSpan(0, 0, 30); ???????????????????????x.ExpireTimeSpan = new TimeSpan(0, 0, 30); ???????????????????});这里整理下目录。
有个HomeController，首页的Index页面添加[Authorize]，需要权限进入
有个Login的action，登录页
添加登录方法SignIn
public async Task<IActionResult> SignIn(LoginViewModel model) ???????{ ???????????if (ModelState.IsValid) ???????????{ ???????????????var claims = new List<Claim>(); ???????????????claims.Add(new Claim(ClaimTypes.Name, model.UserName)); ???????????????var identity = new ClaimsIdentity(claims, "login"); ???????????????var principal = new ClaimsPrincipal(identity); ???????????????await HttpContext.SignInAsync(CookieAuthenticationDefaults.AuthenticationScheme, principal); ???????????????if (principal.Identity.IsAuthenticated) ???????????????????return RedirectToAction("Index"); ???????????} ???????????return View(); ???????}添加登录页面
@{ ???ViewData["Title"] = "Login";}<h2>Login</h2><form method="post" action="/home/SignIn"> ???用户名<input type="text" name="username" /> ???密码<input type="password" name="password" /> ???<button type="submit" class="btn">登录</button></form>因为在Startup里面配置了当没权限时进入登录页面
???????????????????????x.LoginPath = "/Home/Login";
此时运行程序，会跳转到登录页面
输入用户名密码登陆，登录验证成功后就可以跳转到Index了。
再添加个退出
public async Task<IActionResult> SignOut() ???????{ ???????????if (HttpContext.User.Identity.IsAuthenticated) ???????????????await HttpContext.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme); ???????????return RedirectToAction("Login"); ???????} 在页面上可以通过这段代码判断是否登录
Context.User.Identity.IsAuthenticated
.net core 2.0 登陆权限验证
原文地址：http://www.cnblogs.com/xiaoquangege/p/7472346.html