ASP.NET Web Api：如何使用URL参数传递访问令牌(oAuth 2.0)？

无论如何 – 这个功能内置在Katana OAuth2中间件中：@H_696_5@

http://leastprivilege.com/2013/10/31/retrieving-bearer-tokens-from-alternative-locations-in-katanaowin/@H_696_5@

public class QueryStringOAuthBearerProvider : OAuthBearerAuthenticationProvider
{
    readonly String _name;

    public QueryStringOAuthBearerProvider(String Name)
    {
        _name = name;
    }

    public override Task requestToken(OAuthrequestTokenContext context)
    {
        var value = context.request.Query.Get(_Name);

        if (!String.IsNullOrEmpty(value))
        {
            context.Token = value;
        }

        return Task.FromResult<object>(null);
    }
}

接着：@H_696_5@

var options = new JwtBearerAuthenticationOptions
{
    AllowedAudiences = new[] { audience },IssuerSecurityTokenProviders = new[]
        {
            new SymmetricKeyIssuerSecurityTokenProvider(
                issuer,signingKey)
        },Provider = new QueryStringOAuthBearerProvider(“access_token”)
};