请求标头

Question

我从ASP.NET Web API应用程序调用的API需要两个令牌，即accessToken和userToken。

以下代码无效，因为它只使用第二个令牌，而不是两者。看起来第二行覆盖了第一行。

如何在我的请求标头中添加多个令牌？

_client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("APIAccessToken", "token1");
_client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("UserToken", "token2");

更新：这就是我设置它的方式，它不起作用。基本上，我的API调用似乎无处可去。我没有错。只是没有回应。

首先，我的HttpClientAccessor看起来像这样：

public static class HttpClientAccessor
{
    private static Lazy<HttpClient> client = new Lazy<HttpClient>(() => new HttpClient());

    public static HttpClient HttpClient
    {
       get
         {
             client.Value.BaseAddress = new Uri("https://api.someurl.com");
             client.Value.DefaultRequestHeaders.Accept.Clear();
             client.Value.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));     

             client.Value.DefaultRequestHeaders.TryAddWithoutValidation("APIAccessToken", "token1");
             client.Value.DefaultRequestHeaders.TryAddWithoutValidation("UserToken", "token2");

             return client.Value;
           }
     }
}

然后让我的ApiClient执行我的API调用，如下所示：

public class MyApiClient
{
    HttpClient _client;

    public MyApiClient()
    {
        _client = HttpClientAccessor.HttpClient;
    }

    public async Task Get()
    {
        try
        {
            HttpResponseMessage response = await _client.GetAsync("/myendpoint"); // This is where it gets lost
            var data = await response.Content.ReadAsStringAsync();
        }
        catch(Exception e)
        {
            var error = e.Message;
        }
    }
}

这是我的控制器动作：

public class MyController : Controller
{
   private readonly MyApiClient _client;

   public MyController()
   {
      _client = new MyApiClient();
   }

   public IActionResult SomeAction()
   {
       _client.Get().Wait();
   }
}

Answer 1

您将标准授权标头与自定义标头混淆

根据链接文档

请求标头

将生成的令牌添加到请求标头＆＃34; APIAccessToken＆＃34;和＆＃34; UserToken＆＃34;

示例请求
APIAccessToken: zjhVgRIvcZItU8sCNjLn+0V56bJR8UOKOTDYeLTa43eQX9eynX90QntWtINDjLaRjAyOPgrWdrGK12xPaOdDZQ==
UserToken: 5sb8Wf94B0g3n4RGOqkBdPfX+wr2pmBTegIK73S3h7uL8EzU6cjsnJ0+B6vt5iqn0q+jkZgN+gMRU4Y5+2AaXw==

要获得上述标题，请将其添加到客户端，如下所示

_client.DefaultRequestHeaders.TryAddWithoutValidation("APIAccessToken", "token1");
_client.DefaultRequestHeaders.TryAddWithoutValidation("UserToken", "token2");

根据显示的更新，客户端每次调用客户端时都会添加标头。这应该是懒惰客户端的值工厂。

public static class HttpClientAccessor {

    public static Func<HttpClient> ValueFactory = () => {
        var client = new HttpClient();
        client.BaseAddress = new Uri("https://someApiUrl");
        client.DefaultRequestHeaders.Accept.Clear();
        client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
        client.DefaultRequestHeaders.TryAddWithoutValidation("APIAccessToken", "token1");
        client.DefaultRequestHeaders.TryAddWithoutValidation("UserToken", "token2");
        return client;
    };

    private static Lazy<HttpClient> client = new Lazy<HttpClient>(ValueFactory);

    public static HttpClient HttpClient {
        get {
            return client.Value;
        }
    }
}

由于混合了.Wait()或.Result之类的异步和阻止调用，还需要重构控制器操作以避免死锁。

public class MyController : Controller {
   private readonly MyApiClient _client;

   public MyController() {
      _client = new MyApiClient();
   }

   public async Task<IActionResult> SomeAction() {
       await _client.Get();

       //... code removed for brevity
   }
}

在HttpClient中将多个标记添加到DefaultRequestHeaders.Authorization中

1 个答案:

请求标头