在 HttpClient 中将多个令牌添加到 DefaultRequestHeaders.Authorization

Question

我从我的 ASP.NET Web API 应用调用的 API 应用程序需要两个令牌，即 accessToken 和 userToken。

以下代码无效，因为它只需要第二个令牌，而不是两个。看起来第二行是 over-writing 第一行。

如何向我的请求添加多个令牌header？

_client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("APIAccessToken", "token1");
_client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("UserToken", "token2");

更新：这是我设置它的方式，但它不起作用。基本上，我的 API 电话似乎无处可去。我没有错误。只是没有回应。

首先，我的 HttpClientAccessor 看起来像这样：

public static class HttpClientAccessor
{
    private static Lazy<HttpClient> client = new Lazy<HttpClient>(() => new HttpClient());

    public static HttpClient HttpClient
    {
       get
         {
             client.Value.BaseAddress = new Uri("https://api.someurl.com");
             client.Value.DefaultRequestHeaders.Accept.Clear();
             client.Value.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));     

             client.Value.DefaultRequestHeaders.TryAddWithoutValidation("APIAccessToken", "token1");
             client.Value.DefaultRequestHeaders.TryAddWithoutValidation("UserToken", "token2");

             return client.Value;
           }
     }
}

然后我的 ApiClient 将执行我的 API 调用，如下所示：

public class MyApiClient
{
    HttpClient _client;

    public MyApiClient()
    {
        _client = HttpClientAccessor.HttpClient;
    }

    public async Task Get()
    {
        try
        {
            HttpResponseMessage response = await _client.GetAsync("/myendpoint"); // This is where it gets lost
            var data = await response.Content.ReadAsStringAsync();
        }
        catch(Exception e)
        {
            var error = e.Message;
        }
    }
}

这是我的控制器操作：

public class MyController : Controller
{
   private readonly MyApiClient _client;

   public MyController()
   {
      _client = new MyApiClient();
   }

   public IActionResult SomeAction()
   {
       _client.Get().Wait();
   }
}

Answer 1

您将标准授权 header 与自定义 headers

混淆了

根据链接文档

Request Header

Add the generated tokens to the request headers "APIAccessToken" and "UserToken"

Example Request
APIAccessToken: zjhVgRIvcZItU8sCNjLn+0V56bJR8UOKOTDYeLTa43eQX9eynX90QntWtINDjLaRjAyOPgrWdrGK12xPaOdDZQ==
UserToken: 5sb8Wf94B0g3n4RGOqkBdPfX+wr2pmBTegIK73S3h7uL8EzU6cjsnJ0+B6vt5iqn0q+jkZgN+gMRU4Y5+2AaXw==

要获得上面的 header，请将它们添加到客户端，如下所示

_client.DefaultRequestHeaders.TryAddWithoutValidation("APIAccessToken", "token1");
_client.DefaultRequestHeaders.TryAddWithoutValidation("UserToken", "token2");

根据显示的更新，每次调用客户端时，客户端都会添加 header。这个应该在懒客户端的值工厂里面。

public static class HttpClientAccessor {
   
    public static Func<HttpClient> ValueFactory = () => {
        var client = new HttpClient();
        client.BaseAddress = new Uri("https://someApiUrl");
        client.DefaultRequestHeaders.Accept.Clear();
        client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
        client.DefaultRequestHeaders.TryAddWithoutValidation("APIAccessToken", "token1");
        client.DefaultRequestHeaders.TryAddWithoutValidation("UserToken", "token2");
        return client;
    };

    private static Lazy<HttpClient> client = new Lazy<HttpClient>(ValueFactory);

    public static HttpClient HttpClient {
        get {
            return client.Value;
        }
    }
}

控制器操作也需要重构以避免死锁，因为混合了异步和阻塞调用，如 .Wait() 或 .Result。

public class MyController : Controller {
   private readonly MyApiClient _client;

   public MyController() {
      _client = new MyApiClient();
   }

   public async Task<IActionResult> SomeAction() {
       await _client.Get();
       
       //... code removed for brevity
   }
}

在 HttpClient 中将多个令牌添加到 DefaultRequestHeaders.Authorization

Add multiple tokens into DefaultRequestHeaders.Authorization in HttpClient

c#

asp.net

asp.net-web-api

dotnet-httpclient

Request Header