如何向IdentityServer DI框架注册ApplicationUserManager？

我正在使用 IdentityServer3 进行身份验证。所有用户都存储在 Sql DB 中，所以我也在使用Microsoft.AspNet.Identity实际身份验证的框架，出于同样的目的，我创建了自己的框架ApplicationUserManager class.

AspNet 身份将 IoC 功能集成到 OWIN 中间件中。并且它注册了ApplicationUserManager like:

 app.CreatePerOwinContext<ApplicationUserManager>(ApplicationUserManager.Create);  

它接受函数委托，返回一个新的实例ApplicationUserManager

public static ApplicationUserManager 
Create(IdentityFactoryOptions<ApplicationUserManager> options,
        IOwinContext context)
    {
        var manager = new ApplicationUserManager(new UserStore<ApplicationUser>(context.Get<ApplicationDbContext>()));

然而，IdentityServer 使用自己的 DI 框架并且（i think）我们不能使用静态Create()注册方法ApplicationUserManager还可以使用 IdentityServerCreate()方法需要IdentityFactoryOptions and a IOwinContext作为参数。

我跟着这个SO post我改变了实施ApplicationUserManager使用构造函数注入

public class ApplicationUserManager : UserManager<ApplicationUser, string>
{   
    public ApplicationUserManager(ApplicationUserStore store, IdentityFactoryOptions<ApplicationUserManager> options)
        : base(store)
    {          
        // Configure validation logic for usernames
        UserValidator = new UserValidator<ApplicationUser>(this)
        {
            AllowOnlyAlphanumericUserNames = false,
            RequireUniqueEmail = true
        };

        // Configure validation logic for passwords
        PasswordValidator = new PasswordValidator
        {
            RequiredLength = 6,
            RequireNonLetterOrDigit = true,
            RequireDigit = true,
            RequireLowercase = true,
            RequireUppercase = true,
        };

        // Configure user lockout defaults
        UserLockoutEnabledByDefault = true;
        DefaultAccountLockoutTimeSpan = TimeSpan.FromMinutes(5);
        MaxFailedAccessAttemptsBeforeLockout = 5;

        EmailService = new EmailService();
        SmsService = new SmsService();

        var dataProtectionProvider = options.DataProtectionProvider;
        if (dataProtectionProvider != null)
        {
            UserTokenProvider =
                new DataProtectorTokenProvider<ApplicationUser>(dataProtectionProvider.Create("ASP.NET Identity"));
        }
    }        
}

然后将所有服务注册到IdentityServer自己的DI框架中，如下所示

factory.UserService = new Registration<IUserService, UserService>();
factory.Register(new Registration<ApplicationUserManager>());
factory.Register(new Registration<ApplicationUserStore>());
factory.Register(new Registration<IdentityFactoryOptions<ApplicationUserManager>>(resolver => new IdentityFactoryOptions<ApplicationUserManager>
            {
                DataProtectionProvider = new Microsoft.Owin.Security.DataProtection.DpapiDataProtectionProvider("ASP.NET Identity")
            }));
factory.Register(new Registration<ApplicationDbContext>(resolver => new ApplicationDbContext(ApplicationConfig.ConnectionString)));

问题

1. 这是正确的注册方式吗ApplicationUserManager和 IdentityServer的DI框架？
2. 我正在创造DataProtectionProvider在注册期间和UserTokenProvider在构造函数内部。 IdentityServer 如何使用这两个提供程序？
3. 请注意，我没有注册IOwinContext从那时起任何地方 ApplicationUserManager的构造函数不再需要它，将 这会导致 OWIN 管道出现任何问题吗？
4. 什么是理想的注册模式ApplicationUserManager?

这两篇文章帮助解决了我的问题

http://tech.trailmax.info/2014/06/asp-net-identity-and-cryptographicexception-when-running-your-site-on-microsoft-azure-web-sites/

http://tech.trailmax.info/2014/09/aspnet-identity-and-ioc-container-registration/

然而我的ApplicationUserManager位于单独的类库中并且startup.cs是在网络项目中。类库没有对 Web 项目的引用。所以我重构了ApplicationUserManager构造函数

    public ApplicationUserManager(ApplicationUserStore store, IDataProtectionProvider dataProtectionProvider)
        : base(store)
    {
       // other stuff


        if (dataProtectionProvider != null)
        {
            UserTokenProvider =
                new DataProtectorTokenProvider<ApplicationUser>(dataProtectionProvider.Create("UserToken"));
        }
    }

并且还注册了IDataProtectionProvider与DI框架。我没有使用 Unity 作为 IoC。我正在使用 IdentityServer 自己的 DI 框架。所以我注册IDataProtectionProvider as

  factory.Register(new Registration<IDataProtectionProvider>(resolver => Startup.DataProtectionProvider));