1 public class OAuthController : Controller 2     { 3         PRivate static string _authorizeUrl = ConfigurationManager.AppSettings["AuthorizeUrl"]; 4         private static string[] _queryParameters = new string[] { "client_id", "redirect_uri", "state", "response_type", "scope" }; 5         private readonly AuthorizationServer _authorizationServer = new AuthorizationServer(new OAuth2AuthorizationServer()); 6          7         [AcceptVerbs(HttpVerbs.Get)] 8         public ActionResult Authorize(string userkey) 9         {10             var pendingRequest = this._authorizationServer.ReadAuthorizationRequest(Request);11             if (pendingRequest == null)12             {13                 throw new HttpException((int)HttpStatusCode.BadRequest, "Missing authorization request.");14             }15 16             if (string.IsNullOrEmpty(userkey))17             {18                 string url = _authorizeUrl, callback = Request.Url.GetLeftPart(Uripartial.Path);19                 StringBuilder querystring = new StringBuilder(string.Format("client_id={0}&", HttpUtility.UrlEncode(this.Request.QueryString["client_id"]))), callbackQuery = new StringBuilder();20                 foreach (string key in this.Request.QueryString.Keys)21                 {22                     if (!_queryParameters.Contains(key))23                         querystring.Append(string.Format("{0}={1}&", key, HttpUtility.UrlEncode(this.Request.QueryString[key])));24                     else25                         callbackQuery.Append(string.Format("{0}={1}&", key, HttpUtility.UrlEncode(this.Request.QueryString[key])));26                 }27                 if (callbackQuery.Length > 0)28                 {29                     callback += ("?" + callbackQuery.ToString().TrimEnd('&'));30                     querystring.Append(string.Format("callback={0}&", HttpUtility.UrlEncode(callback)));31                 }32                 if (querystring.Length > 0)33                 {34                     url += ("?" + querystring.ToString().TrimEnd('&'));35                 }36                 return Redirect(url);37             }38             else39             {40                 using (var db = new OAuthDbContext())41                 {42                     var client = db.Clients.FirstOrDefault(o => o.ClientIdentifier == pendingRequest.ClientIdentifier);43                     if (client == null)44                         throw new AuthorizeException("40143", "不受信任的商戶");45                     else46                     {47                         var user = DESCrypt.Decrypt(userkey, client.ClientSecret);48                         var approval = this._authorizationServer.PrepareApproveAuthorizationRequest(pendingRequest, user);49                         var response = this._authorizationServer.Channel.PrepareResponse(approval);50                         return response.AsActionResult();51                     }52                 }53             }54         }55 56         public ActionResult Index()57         {58             ViewBag.Body = "Welcome To OAuth2.0";59             return View();60         }61     }