Asp.net mvc 4 在mvc客户端中使用identityserver3库注销identityserver4
我有一个IdentityServer4身份验证服务器。我还有一个ASP.NET MVC（.NET Framework 4.6）web客户端。我正在尝试注销用户，使用Asp.net mvc 4 在mvc客户端中使用identityserver3库注销identityserver4,asp.net-mvc-4,identityserver4,identityserver3,Asp.net Mvc 4,Identityserver4,Identityserver3,我有一个IdentityServer4身份验证服务器。我还有一个ASP.NET MVC（.NET Framework 4.6）web客户端。我正在尝试注销用户，使用 Request.GetOwinContext().Authentication.SignOut(); 然后将其重定向到身份验证服务器帐户/注销视图- 您现在已注销。单击此处返回到客户端应用程序 单击注销重定向后，我被重定向到我的页面，在那里我可以再次单击登录。单击“登录”后，我将自动登录。似乎注销不起作用。我错过了什么？多谢各位
Request.GetOwinContext().Authentication.SignOut();
“客户端名称”：“DPCD Web客户端”
[HttpGet]
public ActionResult SignOut()
{
Request.GetOwinContext().Authentication.SignOut();
return Redirect("/");
}
//signout-oidc redirect
[AllowAnonymous]
public ActionResult LogoutCallback()
{
Request.GetOwinContext().Authentication.SignOut("Cookies");
return RedirectToAction("Index", "Home");
}
[HttpPost]
[ValidateAntiForgeryToken]
public async Task<IActionResult> Logout(LogoutInputModel model)
{
// build a model so the logged out page knows what to display
var vm = await _account.BuildLoggedOutViewModelAsync(model.LogoutId);
var user = HttpContext.User;
if (user?.Identity.IsAuthenticated == true)
{
// delete local authentication cookie
await HttpContext.SignOutAsync();
// raise the logout event
await _events.RaiseAsync(new UserLogoutSuccessEvent(user.GetSubjectId(), user.GetDisplayName()));
}
// check if we need to trigger sign-out at an upstream identity provider
if (vm.TriggerExternalSignout)
{
// build a return URL so the upstream provider will redirect back
// to us after the user has logged out. this allows us to then
// complete our single sign-out processing.
string url = Url.Action("Logout", new { logoutId = vm.LogoutId });
// this triggers a redirect to the external provider for sign-out
return SignOut(new AuthenticationProperties { RedirectUri = url }, vm.ExternalAuthenticationScheme);
}
return View("LoggedOut", vm);
}
new Client
{
ClientId = "dpcdwebclient",
ClientName = "DPCD Web Client",
AllowedGrantTypes = GrantTypes.HybridAndClientCredentials,
Enabled = true,
RequireConsent = false,
ClientSecrets =
{
new Secret("secret".Sha256())
},
RedirectUris = { "http://localhost:9002/signin-oidc" },
PostLogoutRedirectUris = { "http://localhost:9002/signout-callback-oidc" },
AlwaysIncludeUserClaimsInIdToken = true,
AllowedScopes =
{
IdentityServerConstants.StandardScopes.OpenId,
IdentityServerConstants.StandardScopes.Profile,
IdentityServerConstants.StandardScopes.OfflineAccess,
"myapi"
},
AllowOfflineAccess = true
},
RedirectToIdentityProvider = n =>
{
// if signing out, add the id_token_hint
if (n.ProtocolMessage.RequestType == OpenIdConnectRequestType.LogoutRequest)
{
var idTokenHint = n.OwinContext.Authentication.User.FindFirst("id_token");
if (idTokenHint != null)
{
n.ProtocolMessage.IdTokenHint = idTokenHint.Value;
}
}
return Task.FromResult(0);
},
public ActionResult Logout()
{
Request.GetOwinContext().Authentication.SignOut();
return Redirect("/");
}
public void SignoutCleanup(string sid)
{
var cp = (ClaimsPrincipal)User;
var sidClaim = cp.FindFirst("sid");
if (sidClaim != null && sidClaim.Value == sid)
{
Request.GetOwinContext().Authentication.SignOut("Cookies");
}
}