为您的.NET网站增加OpenID,Window Live,人人网等多种登录方式之一: 增加OpenID登录

1

<

form

action

=

"Authenticate?ReturnUrl=<%=HttpUtility.UrlEncode(Request.QueryString["

ReturnUrl"]) %>" method="post">

2

<

label

for

=

"openid_identifier"

>OpenID: </

label

>

3

<

input

id

=

"openid_identifier"

name

=

"openid_identifier"

size

=

"40"

/>

4

<

input

type

=

"submit"

value

=

"Login"

/>

5

</

form

>

01

[ValidateInput(

false

)]

02

public

ActionResult Authenticate(

string

returnUrl) {

03

var response = openid.GetResponse();

04

if

(response ==

null

) {

05

// Stage 2: user submitting Identifier

06

Identifier id;

07

if

(Identifier.TryParse(Request.Form[

"openid_identifier"

],

out

id)) {

08

try

{

09

return

openid.CreateRequest(Request.Form[

"openid_identifier"

]).RedirectingResponse.AsActionResult();

10

}

catch

(ProtocolException ex) {

11

ViewData[

"Message"

] =ex.Message;

12

return

View(

"Login"

);

13

}

14

}

else

{

15

ViewData[

"Message"

] =

"Invalid identifier"

;

16

return

View(

"Login"

);

17

}

18

}

else

{

19

// Stage 3: OpenID Provider sending assertion response

20

switch

(response.Status) {

21

case

AuthenticationStatus.Authenticated:

22

Session[

"FriendlyIdentifier"

] =response.FriendlyIdentifierForDisplay;

23

FormsAuthentication.SetAuthCookie(response.ClaimedIdentifier,

false

);

24

if

(!

string

.IsNullOrEmpty(returnUrl)) {

25

return

Redirect(returnUrl);

26

}

else

{

27

return

RedirectToAction(

"Index"

,

"Home"

);

28

}

29

case

AuthenticationStatus.Canceled:

30

ViewData[

"Message"

] =

"Canceled at provider"

;

31

return

View(

"Login"

);

32

case

AuthenticationStatus.Failed:

33

ViewData[

"Message"

] =response.Exception.Message;

34

return

View(

"Login"

);

35

}

36

}

37

return

new

EmptyResult();

38

}

39

}

01

public

class

HomeController : Controller {

02

public

ActionResult Index() {

03

Response.AppendHeader(

04

"X-XRDS-Location"

,

05

new

Uri(Request.Url,Response.ApplyAppPathModifier(

"~/Home/xrds"

)).AbsoluteUri);

06

return

View(

"Index"

);

07

}

08

09

public

ActionResult Xrds() {

10

return

View(

"Xrds"

);

11

}

12

}

01

<%@ Page Language=

"C#"

Inherits=

"System.Web.Mvc.ViewPage"

ContentType=

"application/xrds+xml"

%><?xml version=

"1.0"

encoding=

"UTF-8"

?>

02

<%--

03

This page

is

a required

for

relying party discovery per OpenID 2.0.

04

It allows Providers to call back to the relying party site to confirm the

05

identity that it

is

claiming

in

the realm and return_to URLs.

06

This pageshould be pointed to by the 

'realm'

home page,which 

in

this

sample

07

is

default

.aspx.

08

--%>

09

<xrds:XRDS

10

xmlns:xrds=

"xri://
$xrds"

11

xmlns:openid=

"http://openid.net/xmlns/1.0
"

12

xmlns=

"xri://
$xrd*($v*2.0)"

>

13

<XRD>

14

<Service priority=

"1"

>

15

<Type>http:

//specs.openid.net/auth/2.0/return_to</Type>

16

<%-- Every page with an OpenID login should be listed here. --%>

17

<%-- We use the Authenticate action instead of Login because Authenticate

18

is

the action that receives OpenId assertions. --%>

19

<URI><%=

new

Uri(Request.Url,Response.ApplyAppPathModifier(

"~/user/authenticate"

))%></URI>

20

</Service>

21

</XRD>

22

</xrds:XRDS>

01

[AcceptVerbs(HttpVerbs.Post)]

02

public

ActionResult Login(

string

openid_identifier)

03

{

04

try

05

{

06

var openid =

new

OpenIdRelyingParty();

07

IAuthenticationRequest request = openid.CreateRequest(Identifier.Parse(openid_identifier));

08

09

10

var fetch =

new

FetchRequest();

11

fetch.Attributes.AddRequired(WellKnownAttributes.Contact.Email);

12

fetch.Attributes.AddRequired(WellKnownAttributes.Name.Alias);

13

fetch.Attributes.AddRequired(WellKnownAttributes.Name.FullName);

14

fetch.Attributes.AddRequired(WellKnownAttributes.Media.Images.Default);

15

request.AddExtension(fetch);

16

17

18

/*

19

request.AddExtension(new ClaimsRequest

20

{

21

Email = DemandLevel.Require,

22

FullName = DemandLevel.Require,

23

Nickname = DemandLevel.Require

24

});*/

25

return

request.RedirectingResponse.AsActionResult();

26

}

27

catch

28

{

29

ViewData[

"ErrorMessage"

] =

"您输入的OpenID不正确或您的帐号的提供商不提供OpenID服务"

;

30

31

ViewData[

"OpenIDLoginURL"

] =openid_identifier;

32

return

View();

33

}

34

}

01

<

dotNetOpenAuth

>

02

<

openid

>

03

<

relyingParty

>

04

<

security

requireSsl

=

"false"

/>

05

<

behaviors

>

06

<!-- The following OPTIONAL behavior allows RPs to use SREG only,but be compatible

07

with OPs that use Attribute Exchange (in various formats). -->

08

<

add

type

=

"DotNetOpenAuth.OpenId.Behaviors.AXFetchAsSregTransform,DotNetOpenAuth"

/>

09

</

behaviors

>

10

</

relyingParty

>

11

</

openid

>

12

<

messaging

>

13

<

untrustedWebRequest

>

14

<

whitelistHosts

>

15

<!-- since this is a sample,and will often be used with localhost -->

16

<

add

name

=

"localhost"

/>

17

</

whitelistHosts

>

18

</

untrustedWebRequest

>

19

</

messaging

>

20

<!-- Allow DotNetOpenAuth to publish usage statistics to library authors to improve the library. -->

21

<

reporting

enabled

=

"false"

/>

22

</

dotNetOpenAuth

>

01

switch

(response.Status) {

02

case

AuthenticationStatus.Authenticated:

03

string

nickName = response.FriendlyIdentifierForDisplay;

04

if

(

string

.IsNullOrEmpty(nickName)) nickName =

"匿名用户"

;

05

string

email =

string

.Empty;

06

string

picIcon =

string

.Empty;

07

08

if

(nickName.Length > 50) { nickName = nickName.Substring(0,50); }

09

10

var claim = response.GetExtension<ClaimsResponse>();

11

var fetch =response.GetExtension<FetchResponse>();

12

13

string

picKey = WellKnownAttributes.Media.Images.Default;

14

15

if

(fetch !=

null

&& fetch.Attributes !=

null

&& fetch.Attributes.Contains(picKey))

16

{

17

var picAttr = fetch.Attributes[picKey];

18

if

(picAttr !=

null

&& picAttr.Values.Count > 0) { picIcon =picAttr.Values[0]; }

19

}

20

if

(claim !=

null

)

21

{

22

nickName = claim.Nickname;

23

24

if

(

string

.IsNullOrEmpty(nickName))

25

{

26

int

ttIndex = claim.Email.IndexOf(

"@"

);

27

if

(ttIndex > 0)

28

{

29

nickName = claim.Email.Substring(0,ttIndex);

30

}

31

else

32

{

33

nickName = claim.Email;

34

}

35

}

36

email =claim.Email;

37

}

38

// 最后授权,入库等.

39

case

AuthenticationStatus.Canceled:

40

ViewData[

"Message"

] =

"Canceled at provider"

;

41

return

View(

"Login"

);

42

case

AuthenticationStatus.Failed:

43

ViewData[

"Message"

] =response.Exception.Message;

44

return

View(

"Login"

);

45

}