{"id":18994,"date":"2020-11-12T11:11:34","date_gmt":"2020-11-12T11:11:34","guid":{"rendered":"https:\/\/www.gencayyildiz.com\/blog\/?p=18994"},"modified":"2020-11-12T11:14:35","modified_gmt":"2020-11-12T11:14:35","slug":"identityserver4-yazi-serisi-14-merkezi-uyelik-sistemi-refresh-token-ile-yeni-access-token-alma","status":"publish","type":"post","link":"https:\/\/www.gencayyildiz.com\/blog\/identityserver4-yazi-serisi-14-merkezi-uyelik-sistemi-refresh-token-ile-yeni-access-token-alma\/","title":{"rendered":"IdentityServer4 Yaz\u0131 Serisi #14 \u2013 Merkezi \u00dcyelik Sistemi \u2013 Refresh Token \u0130le Yeni Access Token Alma"},"content":{"rendered":"

<\/div>\n

Merhaba,<\/p>\n

IdentityServer4 Yaz\u0131 Serisinin<\/a> bir \u00f6nceki Merkezi \u00dcyelik Sistemi \u2013 Access Token \u0130le API’lerle Haberle\u015fme<\/a> ba\u015fl\u0131kl\u0131 makalemizde IdentityServer’dan elde edilen access token ile API’lara nas\u0131l istek yap\u0131ld\u0131\u011f\u0131n\u0131 ele alm\u0131\u015ft\u0131k. Bu i\u00e7eri\u011fimizde ise client taraf\u0131nda authentication property’ler aras\u0131nda elde edilen refresh token’\u0131 kullanarak nas\u0131l yeni bir access token ve id token’\u0131n al\u0131nabilece\u011fini ve bunlar\u0131n mevcut authentication propertyler ile nas\u0131l de\u011fi\u015ftirilebilece\u011fini inceleyece\u011fiz.<\/p>\n

Bizler refresh token \u00f6rneklendirmesini, bu ond\u00f6rd\u00fcnc\u00fc makaleye kadar hasbel kader geli\u015ftirdi\u011fimiz IdentityServer4Example<\/a> uygulamas\u0131 \u00fczerinden irdeleyece\u011fiz. Geli\u015ftirdi\u011fimiz uygulaman\u0131n son versiyonu zaten mevcudiyette refresh token \u00fcretimi i\u00e7in t\u00fcm alt yap\u0131y\u0131 sa\u011flad\u0131\u011f\u0131ndan dolay\u0131 direkt olarak refresh token ile access token talebini ele alacak ve bu i\u015flemin mant\u0131\u011f\u0131n\u0131 daha net kavrayabilmek i\u00e7in, Postman ve client uygulamas\u0131 olmak \u00fczere iki farkl\u0131 istemcide ayr\u0131 ayr\u0131 \u00f6rneklendirece\u011fiz.<\/p>\n

Postman’de Refresh Token \u0130le Yeni Token Alma<\/h3>\n

\u0130lk olarak client uygulamas\u0131nda bir refresh token elde edelim.
\n $\"IdentityServer4$ <\/a>
\nArd\u0131ndan bu refresh token de\u011ferini kullanarak Postman uygulamas\u0131 \u00fczerinden a\u015fa\u011f\u0131daki konfig\u00fcrasyonlar e\u015fli\u011finde yeni bir access token talebinde bulunal\u0131m.<\/p>\n\n\n\n\n\n\n\n\n
client_id<\/strong><\/td>\n Client id de\u011feri.<\/td>\n<\/tr>\n
client_secret<\/strong><\/td>\n Client secret de\u011feri.<\/td>\n<\/tr>\n
grant_type<\/strong><\/td>\n \n\u0130stek t\u00fcr\u00fc. Hangi istek yap\u0131lacaksa ona uygun t\u00fcr bildirilmelidir. Bizler refresh token talebinde bulunaca\u011f\u0131m\u0131zdan dolay\u0131 ‘refresh_token’ de\u011ferini verece\u011fiz. Di\u011fer taleplere nazaran alabilece\u011fi de\u011ferleri orjinal kayna\u011f\u0131ndan<\/a> ‘grant_type’ ba\u015fl\u0131\u011f\u0131 alt\u0131nda inceleyebilirsiniz.\n<\/td>\n<\/tr>\n
username<\/strong><\/td>\n Kullan\u0131c\u0131 ad\u0131.<\/td>\n<\/tr>\n
password<\/strong><\/td>\n Kullan\u0131c\u0131 \u015fifresi.<\/td>\n<\/tr>\n
refresh_token<\/strong><\/td>\n Refresh token de\u011feri. Yeni bir access token de\u011feri talep edebilmek i\u00e7in mevcudiyetteki refresh token de\u011ferinin verilmesi gerekmektedir.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
$\"IdentityServer4$ <\/a><\/p>\n
Yukar\u0131daki ekran g\u00f6r\u00fcnt\u00fcs\u00fcnde g\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere her talep neticesinde yeni bir access token ve refresh token \u00fcretilmektedir. Her talepte access token’\u0131ndan ziyade refresh token’\u0131n yeniden \u00fcretilme sebebi ise Auth Server’da ilgili client’\u0131 tan\u0131mlayan nesnede ‘RefreshTokenUsage’ \u00f6zelli\u011fine ‘OneTimeOnly’ de\u011ferinin verilmesidir. E\u011fer ki ‘ReUse’ de\u011feri verilseydi her talep neticesinde ayn\u0131 refresh token de\u011feri kullan\u0131labilecekti.
\n $\"IdentityServer4$ <\/a><\/p>\n
Client Uygulamas\u0131nda Refresh Token \u0130le Yeni Token Alma<\/h3>\n
Esas itibar\u0131yla refresh token ile client uygulamas\u0131 \u00fczerinden access token talebinde bulunulmas\u0131 gerekecektir. Bu duruma istinaden a\u015fa\u011f\u0131daki \u00f6rne\u011fi irdelemekte fayda vard\u0131r.<\/p>\n
\r\n public class AuthController : Controller\r\n {\r\n public async Task<IActionResult> NewAccessToken()\r\n {\r\n string refreshToken = await HttpContext.GetTokenAsync(OpenIdConnectParameterNames.RefreshToken);\r\n HttpClient httpClient = new HttpClient();\r\n RefreshTokenRequest refreshTokenRequest = new RefreshTokenRequest()\r\n {\r\n ClientId = "OnlineBankamatik",\r\n ClientSecret = "onlinebankamatik",\r\n RefreshToken = refreshToken,\r\n Address = (await httpClient.GetDiscoveryDocumentAsync("https:\/\/localhost:1000")).TokenEndpoint\r\n };\r\n TokenResponse tokenResponse = await httpClient.RequestRefreshTokenAsync(refreshTokenRequest);\r\n AuthenticationProperties properties = (await HttpContext.AuthenticateAsync()).Properties;\r\n\r\n properties.StoreTokens(\r\n new List<AuthenticationToken> {\r\n new AuthenticationToken\r\n {\r\n Name = OpenIdConnectParameterNames.IdToken,\r\n Value = tokenResponse.IdentityToken\r\n },\r\n new AuthenticationToken\r\n {\r\n Name = OpenIdConnectParameterNames.AccessToken,\r\n Value = tokenResponse.AccessToken\r\n },\r\n new AuthenticationToken\r\n {\r\n Name = OpenIdConnectParameterNames.RefreshToken,\r\n Value = tokenResponse.RefreshToken\r\n },\r\n new AuthenticationToken\r\n {\r\n Name = OpenIdConnectParameterNames.ExpiresIn,\r\n Value = DateTime.UtcNow.AddSeconds(tokenResponse.ExpiresIn).ToString("O")\r\n },\r\n });\r\n await HttpContext.SignInAsync("OnlineBankamatikCookie", (await HttpContext.AuthenticateAsync()).Principal, properties);\r\n return RedirectToAction(nameof(BankamatikController.Index));\r\n }\r\n public async Task<IActionResult> Index()\r\n {\r\n AuthenticateResult authenticateResult = await HttpContext.AuthenticateAsync();\r\n IOrderedEnumerable<KeyValuePair<string, string>> properties = authenticateResult.Properties.Items.OrderBy(p => p.Key);\r\n return View(properties);\r\n }\r\n }\r\n<\/pre>\n
Yukar\u0131daki kod blo\u011funun 5<\/strong> ile 14.<\/strong> sat\u0131rlar\u0131 aras\u0131nda refresh token ile yeni bir access token talebinde bulunulmas\u0131, 15<\/strong> ile 41.<\/strong> sat\u0131rlar\u0131 aras\u0131nda ise elde edilen authentication property’ler ile mevcudiyette bulunanlar\u0131n de\u011fi\u015ftirilmesi ele al\u0131nm\u0131\u015ft\u0131r. Tek tek bu kodlar\u0131 izah etmemiz gerekirse e\u011fer;<\/p>\n
\n
5. sat\u0131r<\/strong>
\nAuthentication property’ler i\u00e7erisinden refresh token de\u011feri elde edilmi\u015ftir.<\/li>\n
7 – 13. sat\u0131r<\/strong>
\nRefresh token ile request yapabilmemiz i\u00e7in ilgili client’\u0131n bilgilerini tutan nesne olu\u015fturulmu\u015ftur. Burada dikkat ederseniz kullan\u0131c\u0131n\u0131n username ve password bilgileri girilmemektedir. Bunun nedeni, ilgili datalar\u0131n cookie’de tutuluyor ve talep neticesinde IdentityServer4’e g\u00f6nderiliyor olmas\u0131d\u0131r. <\/li>\n
14. sat\u0131r<\/strong>
\n‘RefreshTokenRequest’ nesnesini kullanarak IdentityServer4 sunucusuna ‘grant_type’ de\u011feri ‘refresh_token’ olan bir istek g\u00f6nderir ve neticede ‘TokenResponse’ olarak yeni access token, id token ve refresh token de\u011ferlerini elde eder.\n<\/li>\n
15. sat\u0131r<\/strong>
\nMevcudiyetteki t\u00fcm authentication property’ler elde edilir.\n<\/li>\n
17 – 39. sat\u0131r<\/strong>
\nMevcudiyette elde edilen authentication property’ler ile talep neticesinde \u00fcretilen yeni de\u011ferleri ‘StoreTokens’ fonksiyonu ile de\u011fi\u015ftirmekteyiz.\n<\/li>\n
40. sat\u0131r<\/strong>
\n\u0130lgili kullan\u0131c\u0131 yeni authentication property’ler ile g\u00fcncellenmekte ve bunun i\u00e7in tekrar ilgili de\u011ferler e\u015fli\u011finde SignIn yapt\u0131r\u0131lmaktad\u0131r.\n<\/li>\n
43 – 47. sat\u0131r<\/strong>
\nAuthentication property’leri \u00e7ekip, listeleyen bir action tasarlanm\u0131\u015ft\u0131r.\n<\/li>\n<\/ul>\n
$\"IdentityServer4$ <\/a>
\nG\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere refresh token ile yeni bir access token talep edilmekte ve elde edilen t\u00fcm de\u011ferler \u00f6ncekileriyle de\u011fi\u015ftirilmektedir.<\/p>\n
\u0130lgilenenlerin faydalanmas\u0131 dile\u011fiyle…
\nSonraki yaz\u0131lar\u0131mda g\u00f6r\u00fc\u015fmek \u00fczere…
\n\u0130yi \u00e7al\u0131\u015fmalar…<\/p>\n
Not : \u00d6rnek uygulamay\u0131 indirebilmek i\u00e7in buraya<\/a> t\u0131klay\u0131n\u0131z.<\/p>\n","protected":false},"excerpt":{"rendered":"
Merhaba, IdentityServer4 Yaz\u0131 Serisinin bir \u00f6nceki Merkezi \u00dcyelik Sistemi \u2013 Access Token \u0130le API’lerle Haberle\u015fme ba\u015fl\u0131kl\u0131 makalemizde IdentityServer’dan elde edilen access token ile API’lara nas\u0131l istek yap\u0131ld\u0131\u011f\u0131n\u0131 ele alm\u0131\u015ft\u0131k. Bu i\u00e7eri\u011fimizde ise client taraf\u0131nda...<\/p>\n","protected":false},"author":1,"featured_media":18168,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3826],"tags":[3914,3827,3895,3896],"class_list":["post-18994","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-identityserver4","tag-get-access-token-with-refresh-token","tag-identityserver4","tag-identityserver4-access-token","tag-identityserver4-refresh-token"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/18994","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/comments?post=18994"}],"version-history":[{"count":37,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/18994\/revisions"}],"predecessor-version":[{"id":19039,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/18994\/revisions\/19039"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media\/18168"}],"wp:attachment":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media?parent=18994"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/categories?post=18994"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/tags?post=18994"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}