文章目录目标登录新建项目运行DbMigrator查看Scope和Client Id登录和刷新token访问接口强制登出目标初始化一个ABP项目然后进行登录和刷新token登录新建项目abp new Lottery-u no-ui-csf-dbms PostgreSQL-sm-smr-nsl--dont-run-install-libs-nkc-csServer127.0.0.1;Port5432;DatabaseLottery;User Idpostgres;Password123;Sqliteabp new Lottery-u no-ui-csf-dbms SQLite-sm-smr-nsl--dont-run-install-libs-nkc-csData SourceLottery.db;运行DbMigrator将启动项目切到DbMigrator然后直接运行它会初始化数据库查看Scope和Client Idselectois.NameScopeNamefromOpenIddictScopesois;selectoia.ClientIdfromOpenIddictApplicationsoia;client一般会包含_App和_Swagger两个用_App作为前端调用的client id登录和刷新token访问接口访问接口的时候带token就行了强制登出没办法真正实现强制登出deactive user 也不行只能删掉OpenIddictTokens和OpenIddictAuthorizations里的数据来禁掉refresh tokenselectau.IdfromAbpUsersauwhereau.UserNameadmin;deletefromOpenIddictTokenswhereSubject3a1ec1f2-25bd-b7a4-e558-adfce887b846;deletefromOpenIddictAuthorizationswhereSubject3a1ec1f2-25bd-b7a4-e558-adfce887b846;还可以通过缩短access_token的life time加强效果context.Services.AddOpenIddict().AddServer(options{options.SetAccessTokenLifetime(TimeSpan.FromMinutes(10));});当token和refresh token都失效后不得不重新密码登录这个时候deactive user才有用。