Question

我刚在主机上安装了ssl证书，并认为我会将所有http流量重定向到https。我发现有一个新的软件包可以在.net核心中帮助它。

问题在于它对我不起作用，我无法弄清楚原因。当我尝试导航到http://mysite.co.uk以测试重定向时，它会失败并显示一条消息

页面未正确重定向 Firefox检测到服务器正在以永远不会完成的方式重定向此地址的请求。有时可能会因禁用或拒绝接受Cookie而导致此问题。

这是我的stratup.cs：

using System;
using System.Collections.Generic;
using System.Threading.Tasks;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Hosting;
using Microsoft.AspNetCore.Identity.EntityFrameworkCore;
using Microsoft.EntityFrameworkCore;
using Microsoft.Extensions.Configuration;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Logging;
using Playabout.Data;
using Playabout.Models;
using Playabout.Services;
using Microsoft.AspNetCore.Identity;
using System.Security.Claims;
using Microsoft.AspNetCore.Localization;
using Microsoft.Net.Http.Headers;
using System.Globalization;
using Sakura.AspNetCore.Mvc;
using Microsoft.AspNetCore.ResponseCompression;
using System.IO.Compression;
using System.Linq;
using Microsoft.AspNetCore.Rewrite;
using System.Net;

namespace Playabout
{
public class Startup
{
    public Startup(IHostingEnvironment env)
    {
        var builder = new ConfigurationBuilder()
            .SetBasePath(env.ContentRootPath)
            .AddJsonFile("appsettings.json", optional: false,     reloadOnChange: true)
            .AddJsonFile($"appsettings.{env.EnvironmentName}.json",     optional: true);

        if (env.IsDevelopment())
        {
            // For more details on using the user secret store see http://go.microsoft.com/fwlink/?LinkID=532709
            //builder.AddUserSecrets<Startup>();
        }

        builder.AddEnvironmentVariables();
        Configuration = builder.Build();
    }

    public IConfigurationRoot Configuration { get; }

    // This method gets called by the runtime. Use this method to add services to the container.
    public void ConfigureServices(IServiceCollection services)
    {
        // Add framework services.
        services.AddDbContext<ApplicationDbContext>(options =>
            options.UseSqlServer(Configuration.GetConnectionString("DefaultConnection")));

        services.AddIdentity<ApplicationUser, IdentityRole>(
            config =>
            {
                config.SignIn.RequireConfirmedEmail = true;
            })
            .AddEntityFrameworkStores<ApplicationDbContext>()
            .AddDefaultTokenProviders();

        services.Configure<GzipCompressionProviderOptions>
            (options => options.Level = CompressionLevel.Optimal);
            services.AddResponseCompression(options =>
            {
                options.MimeTypes = ResponseCompressionDefaults.MimeTypes.Concat(new[]
                {
                    "text/plain",
                    "text/css",
                    "application/javascript",
                    "text/html",
                    "application/xml",
                    "text/xml",
                    "application/json",
                    "text/json",
                    // Custom
                    "text/javascript",
                    "image/svg+xml"
                });
                options.Providers.Add<GzipCompressionProvider>();
            });

        services.AddMvc();


        // Add application services.
        services.Configure<SmtpConfig>(optionsSetup =>
        {
            //get from config.json file
            optionsSetup.EmailDisplayName = Configuration["SMTP:DisplayName"];
            optionsSetup.SmtpPassworrd = Configuration["SMTP:Password"];
            optionsSetup.SmtpUserEmail = Configuration["SMTP:Email"];
            optionsSetup.SmtpHost = Configuration["SMTP:Host"];
            optionsSetup.SmtpPort = Convert.ToInt32(Configuration["SMTP:Port"]);
        });
        services.Configure<RecaptchaConfig>(optionsSetup =>
        {
            //get from config.json file
            optionsSetup.RecaptchaPublicKey = Configuration["Recaptcha:PublicKey"];
            optionsSetup.RecaptchaPrivateKey = Configuration["Recaptcha:PrivateKey"];
        });
        // Add default bootstrap-styled pager implementation
        services.AddBootstrapPagerGenerator(options =>
        {
            // Use default pager options.
            options.ConfigureDefault();
        });
        services.AddTransient<IEmailSender, AuthMessageSender>();
        services.AddTransient<ISmsSender, AuthMessageSender>();
        services.AddSession();
    }

    // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
    public async void Configure(IApplicationBuilder app, IHostingEnvironment env,
        ILoggerFactory loggerFactory, IServiceProvider serviceProvider, ApplicationDbContext context)
    {
        loggerFactory.AddConsole(Configuration.GetSection("Logging"));
        loggerFactory.AddDebug();

        if (env.IsDevelopment())
        {
            app.UseDeveloperExceptionPage();
            app.UseDatabaseErrorPage();
            app.UseBrowserLink();
        }
        else
        {
            app.UseExceptionHandler("/Home/Error");
        }
        var supportedCultures = new[]
        {
            new CultureInfo("en-GB"),

        };
        app.UseRequestLocalization(new RequestLocalizationOptions
        {
            DefaultRequestCulture = new RequestCulture("en-GB"),
            SupportedCultures = supportedCultures,
            SupportedUICultures = supportedCultures
        });
        app.UseRewriter(new RewriteOptions()
            .AddRedirectToHttps());
        app.UseResponseCompression();
        app.UseStaticFiles(new StaticFileOptions
        {
            OnPrepareResponse = ctx =>
            {
                const int durationInSeconds = 60 * 60 * 730;
                ctx.Context.Response.Headers[HeaderNames.CacheControl] =
                    "public,max-age=" + durationInSeconds;
            }
        });

        app.UseSession();
        app.UseIdentity();

        // Add external authentication middleware below. To configure them please see http://go.microsoft.com/fwlink/?LinkID=532715
        app.UseFacebookAuthentication(new FacebookOptions()
        {
            AppId = Configuration["Authentication:Facebook:AppId"],
            AppSecret = Configuration["Authentication:Facebook:AppSecret"]
        });
        app.UseGoogleAuthentication(new GoogleOptions()
        {
            ClientId = Configuration["Authentication:Google:ClientId"],
            ClientSecret = Configuration["Authentication:Google:ClientSecret"]
        });

        app.UseMvc(routes =>
        {
            routes.MapRoute(
                name: "default",
                template: "{controller=Home}/{action=Index}/{id?}");
        });

        try
        {
            await CreateRoles(context, serviceProvider);
        }
        catch (Exception)
        { }
    }
    private async Task CreateRoles(ApplicationDbContext context, IServiceProvider serviceProvider)
    {
        var userManager = serviceProvider.GetRequiredService<UserManager<ApplicationUser>>();
        var RoleManager = serviceProvider.GetRequiredService<RoleManager<IdentityRole>>();
        // Create a list of roles with both name and normalised name attributes
        List<IdentityRole> roles = new List<IdentityRole>
        {
            new IdentityRole { Name = "Admin", NormalizedName = "ADMIN" },
            new IdentityRole { Name = "Member", NormalizedName = "MEMBER" },
            new IdentityRole { Name = "Moderator", NormalizedName = "MODERATOR" }
        };
        // Check if the role already exists
        foreach (var role in roles)
        {
            var roleExist = await RoleManager.RoleExistsAsync(role.Name);
            if (!roleExist)
            {   // Add it if it doesn't
                context.Roles.Add(role);
                context.SaveChanges();
            }
        }
        var user = await userManager.FindByEmailAsync("markperry.uk@gmail.com");
        if (user != null)
        {
            var gotRoles = userManager.GetRolesAsync(user);
            if (!gotRoles.Equals("Admin"))
            {
                await userManager.AddToRoleAsync(user, "Admin");
            }
        }
        else if (user == null)
        {
            var nuser = new ApplicationUser
            {
                FirstName = Configuration["AppSettings:Admin:FirstName"],
                LastName = Configuration["AppSettings:Admin:LastName"],
                PhoneNumber = Configuration["AppSettings:Admin:PhoneNumber"],
                UserName = Configuration["AppSettings:Admin:UserName"],
                Email = Configuration["AppSettings:Admin:Email"],
                JoinDate = DateTime.Now,
                EmailConfirmed = true,
                PhoneNumberConfirmed = true
            };
            var result = await userManager.CreateAsync(nuser, Configuration["AppSettings:Admin:Password"]);
            if (result.Succeeded)
            {
                await userManager.AddClaimAsync(nuser, new Claim("GivenName", nuser.FirstName));
                await userManager.AddClaimAsync(nuser, new Claim("Surname", nuser.LastName));
                await userManager.AddToRoleAsync(nuser, "Admin");
            }
        }
    }
}
}

我添加到配置的代码段是：

        app.UseRewriter(new RewriteOptions()
        .AddRedirectToHttps());

使用Microsoft.AspNetCore.Rewrite;

我刚刚使用chrome进行检查，并显示重复的重定向，并且由于＆＃34; ERR_TOO_MANY_REDIRECTS＆＃34;而失败。所以有些东西会导致循环。

有没有办法检查请求是否已经是＆＃34; https＆＃34;，还是有其他方式可以做某事？

Answer 1

花了一整天的时间尝试对此进行排序，添加[RequireHttps]属性，尝试各种片段，我发现谷歌搜索问题，尝试传递标题...最后我采取了我之前尝试过的东西好像有用了。我编辑了服务器上的web.config文件（我不知道如何在发布时这样做）添加以下内容：

  <system.webServer>
    <rewrite>
      <rules>
        <rule name="HTTP/S to HTTPS Redirect" enabled="true" stopProcessing="true">
            <match url="(.*)" />
            <conditions logicalGrouping="MatchAny">
              <add input="{SERVER_PORT_SECURE}" pattern="^0$" />
            </conditions>
            <action type="Redirect" url="https://{HTTP_HOST}/{R:1}" redirectType="Permanent" />
        </rule>
      </rules>
    </rewrite>
  </system.webServer>

取自此处的评论：https://github.com/aspnet/KestrelHttpServer/issues/916

从我读过的内容来看，它与Kestrel有关，但我并不完全确定：D但是它有效！每次发布都要改变它会很烦人，所以明天我会试着弄清楚每次都能为我做这件事。

Answer 2

我能够通过以下方式解决类似的问题：

if (env.IsProduction())
{
    app.UseRewriter(new RewriteOptions().AddRedirectToHttpsPermanent());
}

asp.net核心将http流量重定向到https问题

2 个答案: