build: 升级目标框架到net10.0并完善模板配置
1. 将Hua.Cli.Tests、项目共享库、模块项目等所有项目的TargetFramework从net8.0/net9.0升级到net10.0 2. 完善dotnet-tools.json、模板配置文件，添加必要的构建和发布配置 3. 新增微服务、网关、应用程序的启动脚本和基础配置文件 4. 补充产品管理模块的领域、应用、Web层基础代码和多语言资源
This commit is contained in:
ShaoHua
@@ -0,0 +1,243 @@
|
||||
using System;
|
||||
using System.Collections.Generic;
|
||||
using System.Linq;
|
||||
using System.Threading.Tasks;
|
||||
using Volo.Abp.Data;
|
||||
using Volo.Abp.DependencyInjection;
|
||||
using Volo.Abp.Guids;
|
||||
using Volo.Abp.Identity;
|
||||
using Volo.Abp.IdentityServer.ApiResources;
|
||||
using Volo.Abp.IdentityServer.ApiScopes;
|
||||
using Volo.Abp.IdentityServer.Clients;
|
||||
using Volo.Abp.IdentityServer.IdentityResources;
|
||||
using Volo.Abp.PermissionManagement;
|
||||
using Volo.Abp.TenantManagement;
|
||||
using Volo.Abp.Uow;
|
||||
using ApiResource = Volo.Abp.IdentityServer.ApiResources.ApiResource;
|
||||
using Client = Volo.Abp.IdentityServer.Clients.Client;
|
||||
|
||||
namespace Company.Project.AuthServer;
|
||||
|
||||
public class AuthServerDataSeeder : IDataSeedContributor, ITransientDependency
|
||||
{
|
||||
private readonly IApiResourceRepository _apiResourceRepository;
|
||||
private readonly IClientRepository _clientRepository;
|
||||
private readonly IApiScopeRepository _apiScopeRepository;
|
||||
private readonly IIdentityResourceDataSeeder _identityResourceDataSeeder;
|
||||
private readonly IGuidGenerator _guidGenerator;
|
||||
private readonly IPermissionDataSeeder _permissionDataSeeder;
|
||||
|
||||
public AuthServerDataSeeder(
|
||||
IClientRepository clientRepository,
|
||||
IApiResourceRepository apiResourceRepository,
|
||||
IIdentityResourceDataSeeder identityResourceDataSeeder,
|
||||
IGuidGenerator guidGenerator,
|
||||
IPermissionDataSeeder permissionDataSeeder,
|
||||
IApiScopeRepository apiScopeRepository)
|
||||
{
|
||||
_clientRepository = clientRepository;
|
||||
_apiResourceRepository = apiResourceRepository;
|
||||
_identityResourceDataSeeder = identityResourceDataSeeder;
|
||||
_guidGenerator = guidGenerator;
|
||||
_permissionDataSeeder = permissionDataSeeder;
|
||||
_apiScopeRepository = apiScopeRepository;
|
||||
}
|
||||
|
||||
[UnitOfWork]
|
||||
public virtual async Task SeedAsync(DataSeedContext context)
|
||||
{
|
||||
await _identityResourceDataSeeder.CreateStandardResourcesAsync();
|
||||
await CreateApiScopesAsync();
|
||||
await CreateApiResourcesAsync();
|
||||
await CreateClientsAsync();
|
||||
}
|
||||
|
||||
private async Task CreateApiScopesAsync()
|
||||
{
|
||||
await CreateApiScopeAsync("IdentityService");
|
||||
await CreateApiScopeAsync("ProductService");
|
||||
await CreateApiScopeAsync("InternalGateway");
|
||||
await CreateApiScopeAsync("BackendAdminAppGateway");
|
||||
await CreateApiScopeAsync("PublicWebGateway");
|
||||
}
|
||||
|
||||
private async Task<ApiScope> CreateApiScopeAsync(string name)
|
||||
{
|
||||
var apiScope = await _apiScopeRepository.FindByNameAsync(name);
|
||||
if (apiScope == null)
|
||||
{
|
||||
apiScope = await _apiScopeRepository.InsertAsync(
|
||||
new ApiScope(
|
||||
_guidGenerator.Create(),
|
||||
name,
|
||||
name + " API"
|
||||
),
|
||||
autoSave: true
|
||||
);
|
||||
}
|
||||
|
||||
return apiScope;
|
||||
}
|
||||
|
||||
private async Task CreateApiResourcesAsync()
|
||||
{
|
||||
var commonApiUserClaims = new[]
|
||||
{
|
||||
"email",
|
||||
"email_verified",
|
||||
"name",
|
||||
"phone_number",
|
||||
"phone_number_verified",
|
||||
"role"
|
||||
};
|
||||
|
||||
await CreateApiResourceAsync("IdentityService", commonApiUserClaims);
|
||||
await CreateApiResourceAsync("ProductService", commonApiUserClaims);
|
||||
await CreateApiResourceAsync("InternalGateway", commonApiUserClaims);
|
||||
await CreateApiResourceAsync("BackendAdminAppGateway", commonApiUserClaims);
|
||||
await CreateApiResourceAsync("PublicWebGateway", commonApiUserClaims);
|
||||
}
|
||||
|
||||
private async Task<ApiResource> CreateApiResourceAsync(string name, IEnumerable<string> claims)
|
||||
{
|
||||
var apiResource = await _apiResourceRepository.FindByNameAsync(name);
|
||||
if (apiResource == null)
|
||||
{
|
||||
apiResource = await _apiResourceRepository.InsertAsync(
|
||||
new ApiResource(
|
||||
_guidGenerator.Create(),
|
||||
name,
|
||||
name + " API"
|
||||
),
|
||||
autoSave: true
|
||||
);
|
||||
}
|
||||
|
||||
foreach (var claim in claims)
|
||||
{
|
||||
if (apiResource.FindClaim(claim) == null)
|
||||
{
|
||||
apiResource.AddUserClaim(claim);
|
||||
}
|
||||
}
|
||||
|
||||
return await _apiResourceRepository.UpdateAsync(apiResource);
|
||||
}
|
||||
|
||||
private async Task CreateClientsAsync()
|
||||
{
|
||||
const string commonSecret = "E5Xd4yMqjP5kjWFKrYgySBju6JVfCzMyFp7n2QmMrME=";
|
||||
|
||||
var commonScopes = new[]
|
||||
{
|
||||
"email",
|
||||
"openid",
|
||||
"profile",
|
||||
"role",
|
||||
"phone",
|
||||
"address"
|
||||
};
|
||||
|
||||
await CreateClientAsync(
|
||||
"backend-admin-app-client",
|
||||
commonScopes.Union(new[] { "BackendAdminAppGateway", "IdentityService", "ProductService" }),
|
||||
new[] { "hybrid" },
|
||||
commonSecret,
|
||||
permissions: new[] { IdentityPermissions.Users.Default, "ProductManagement.Product" },
|
||||
redirectUri: "https://localhost:44354/signin-oidc",
|
||||
postLogoutRedirectUri: "https://localhost:44354/signout-callback-oidc"
|
||||
);
|
||||
|
||||
await CreateClientAsync(
|
||||
"public-website-client",
|
||||
commonScopes.Union(new[] { "PublicWebGateway", "ProductService" }),
|
||||
new[] { "hybrid" },
|
||||
commonSecret,
|
||||
redirectUri: "https://localhost:44335/signin-oidc",
|
||||
postLogoutRedirectUri: "https://localhost:44335/signout-callback-oidc"
|
||||
);
|
||||
}
|
||||
|
||||
private async Task<Client> CreateClientAsync(
|
||||
string name,
|
||||
IEnumerable<string> scopes,
|
||||
IEnumerable<string> grantTypes,
|
||||
string secret,
|
||||
string? redirectUri = null,
|
||||
string? postLogoutRedirectUri = null,
|
||||
IEnumerable<string>? permissions = null)
|
||||
{
|
||||
var client = await _clientRepository.FindByClientIdAsync(name);
|
||||
if (client == null)
|
||||
{
|
||||
client = await _clientRepository.InsertAsync(
|
||||
new Client(
|
||||
_guidGenerator.Create(),
|
||||
name
|
||||
)
|
||||
{
|
||||
ClientName = name,
|
||||
ProtocolType = "oidc",
|
||||
Description = name,
|
||||
AlwaysIncludeUserClaimsInIdToken = true,
|
||||
AllowOfflineAccess = true,
|
||||
AbsoluteRefreshTokenLifetime = 31536000,
|
||||
AccessTokenLifetime = 31536000,
|
||||
AuthorizationCodeLifetime = 300,
|
||||
IdentityTokenLifetime = 300,
|
||||
RequireConsent = false,
|
||||
RequirePkce = false
|
||||
},
|
||||
autoSave: true
|
||||
);
|
||||
}
|
||||
|
||||
foreach (var scope in scopes)
|
||||
{
|
||||
if (client.FindScope(scope) == null)
|
||||
{
|
||||
client.AddScope(scope);
|
||||
}
|
||||
}
|
||||
|
||||
foreach (var grantType in grantTypes)
|
||||
{
|
||||
if (client.FindGrantType(grantType) == null)
|
||||
{
|
||||
client.AddGrantType(grantType);
|
||||
}
|
||||
}
|
||||
|
||||
if (client.FindSecret(secret) == null)
|
||||
{
|
||||
client.AddSecret(secret);
|
||||
}
|
||||
|
||||
if (redirectUri != null)
|
||||
{
|
||||
if (client.FindRedirectUri(redirectUri) == null)
|
||||
{
|
||||
client.AddRedirectUri(redirectUri);
|
||||
}
|
||||
}
|
||||
|
||||
if (postLogoutRedirectUri != null)
|
||||
{
|
||||
if (client.FindPostLogoutRedirectUri(postLogoutRedirectUri) == null)
|
||||
{
|
||||
client.AddPostLogoutRedirectUri(postLogoutRedirectUri);
|
||||
}
|
||||
}
|
||||
|
||||
if (permissions != null)
|
||||
{
|
||||
await _permissionDataSeeder.SeedAsync(
|
||||
ClientPermissionValueProvider.ProviderName,
|
||||
name,
|
||||
permissions
|
||||
);
|
||||
}
|
||||
|
||||
return await _clientRepository.UpdateAsync(client);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user