ASP.NET標(biāo)識的IUserSecurityStampStore<TUser>接口是什么？查看ASP.NET標(biāo)識(ASP.NET中的新成員關(guān)系實現(xiàn))，我在實現(xiàn)自己的接口時遇到了這個接口UserStore://Microsoft.AspNet.Identity.Core.dllnamespace Microsoft.AspNet.Identity{
public interface IUserSecurityStampStore<TUser> :
{
// Methods
Task<string> GetSecurityStampAsync(TUser user);
Task SetSecurityStampAsync(TUser user, string stamp);
}}IUserSecurityStampStore在默認(rèn)情況下實現(xiàn)。EntityFramework.UserStore<TUser>從本質(zhì)上獲取并設(shè)置TUser.SecurityStamp財產(chǎn)。經(jīng)過進(jìn)一步的挖掘，似乎SecurityStamp是Guid中的關(guān)鍵點新生成的UserManager(例如，更改密碼)。除了這個，我不能破譯更多的代碼，因為我正在檢查這段代碼反射器..幾乎所有的符號和異步信息都被優(yōu)化了。此外，谷歌對此也沒有多大幫助。問題如下：什么是SecurityStamp在ASP.NET標(biāo)識中，它用于什么？是否SecurityStamp在創(chuàng)建身份驗證cookie時扮演什么角色？是否需要采取任何安全措施或預(yù)防措施？例如，不要將此值向下發(fā)送給客戶端？這里有源代碼：https://github.com/aspnet/Identity/https://github.com/aspnet/Security/
3 回答
MM們
TA貢獻(xiàn)1886條經(jīng)驗 獲得超2個贊
更新為2.0.0。SecurityStamp
OnValidateIdentityCookieMiddlewareSecurityStamprefreshInterval
app.UseCookieAuthentication(new CookieAuthenticationOptions {
AuthenticationType = DefaultAuthenticationTypes.ApplicationCookie,
LoginPath = new PathString("/Account/Login"),
Provider = new CookieAuthenticationProvider {
// Enables the application to validate the security stamp when the user logs in.
// This is a security feature which is used when you change a password or add an external login to your account.
OnValidateIdentity = SecurityStampValidator.OnValidateIdentity<ApplicationUserManager, ApplicationUser>(
validateInterval: TimeSpan.FromMinutes(30),
regenerateIdentity: (manager, user) => user.GenerateUserIdentityAsync(manager))
}});UserManager.UpdateSecurityStampAsync(userId);
狐的傳說
TA貢獻(xiàn)1804條經(jīng)驗 獲得超3個贊
隔江千里
TA貢獻(xiàn)1906條經(jīng)驗 獲得超10個贊
services.Configure<SecurityStampValidatorOptions>(o => o.ValidationInterval = TimeSpan.FromSeconds(10));
- 3 回答
- 0 關(guān)注
- 541 瀏覽
添加回答
舉報
0/150
提交
取消