Javascript 使用web api进行外部登录

成功后，数组将如下所示

 $.ajax({
    url: "http://localhost:54581/api/Account/ExternalLogins?returnUrl=%2F&generateState=true",
    type: Http_Get,
    dataType: "json",
    async: false,
    contentType: "application/json; charset=utf-8",

    success: function () {}

 [  {
"Name": "Facebook",
"Url": "/api/Account/ExternalLogin?provider=Facebook&response_type=token&client_id=self&redirect_uri=http%3A%2F%2Flocalhost%3A54581%2F&state=V8Tg_S0p2mnFNxJYMl2fEKrDWnTxg88lGS4PVnIGVFM1",
"State": "V8Tg_S0p2mnFNxJYMl2fEKrDWnTxg88lGS4PVnIGVFM1" }]

我将把Url传递给我的本地主机“”+数据[0]。Url

（window.location=“localhost:54581”+数据[0].Url；）

重定向后，我将获得访问令牌

url将如下所示

 $.ajax({
    url: "http://localhost:54581/api/Account/ExternalLogins?returnUrl=%2F&generateState=true",
    type: Http_Get,
    dataType: "json",
    async: false,
    contentType: "application/json; charset=utf-8",

    success: function () {}

 [  {
"Name": "Facebook",
"Url": "/api/Account/ExternalLogin?provider=Facebook&response_type=token&client_id=self&redirect_uri=http%3A%2F%2Flocalhost%3A54581%2F&state=V8Tg_S0p2mnFNxJYMl2fEKrDWnTxg88lGS4PVnIGVFM1",
"State": "V8Tg_S0p2mnFNxJYMl2fEKrDWnTxg88lGS4PVnIGVFM1" }]

但我想在我的html页面中使用访问令牌

比如像这样

 $.ajax({
    url: "http://localhost:54581/api/Account/ExternalLogins?returnUrl=%2F&generateState=true",
    type: Http_Get,
    dataType: "json",
    async: false,
    contentType: "application/json; charset=utf-8",

    success: function () {}

 [  {
"Name": "Facebook",
"Url": "/api/Account/ExternalLogin?provider=Facebook&response_type=token&client_id=self&redirect_uri=http%3A%2F%2Flocalhost%3A54581%2F&state=V8Tg_S0p2mnFNxJYMl2fEKrDWnTxg88lGS4PVnIGVFM1",
"State": "V8Tg_S0p2mnFNxJYMl2fEKrDWnTxg88lGS4PVnIGVFM1" }]

---

index.html？Access_token=“vqdotvdogfybpsapahrkhnck6”

我不完全确定您试图实现什么，但Access token表明这是某种身份验证值。因此，将其放入查询字符串中是一个安全问题。