Azure函数：在Cosmos DB绑定中使用用户

Answer 1

这篇文章提供了如何在CosmosDB中处理用户和权限的详细描述，甚至是一个示例。

或者，如果您只想从接收到的令牌中获取oid，并将其用作分区键，那么我会采用如下所示的方法，然后根据值创建查询。

Azure Functions v3.NET Core 3.1的安装程序（Nuget）：

<PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="3.1.8" />
<PackageReference Include="Microsoft.NET.Sdk.Functions" Version="3.0.9" />
<PackageReference Include="Microsoft.Azure.WebJobs.Extensions.CosmosDB" Version="3.0.7" />

    [FunctionName("CosmosDBAccess")]
        public static async Task<IActionResult> Run(
            [HttpTrigger(AuthorizationLevel.Anonymous, "get", "post", Route = null)] HttpRequest req,
            [CosmosDB(ConnectionStringSetting = "CosmosDBConnection")]DocumentClient client,
            ILogger log)
        {
            // Get oid from your token 
            var token = string.Empty;
            var hasToken = req.Headers.TryGetValue("Authorization", out var tokenHeader);
            if (hasToken)
            {
                // Assuming token is in header as "Bearer <token>"
                token = tokenHeader[0].Split(" ")[1];
            }
            var handler = new JwtSecurityTokenHandler();
            var tokenS = handler.ReadToken(token) as JwtSecurityToken;
            var jti = tokenS.Claims.First(claim => claim.Type == "oid").Value;

            // Create query
            var uri = UriFactory.CreateDocumentCollectionUri("db", "collection");
            using (var query = client.CreateDocumentQuery(uri, 
                new FeedOptions() { PartitionKey = new Microsoft.Azure.Documents.PartitionKey(jti) })
                .AsDocumentQuery())
            {
                while (query.HasMoreResults)
                {
                    // Get results
                    FeedResponse<Document> recordSet = await query.ExecuteNextAsync<Document>();
                }
            }

            // more stuff

module.exports = async function (context, req) {
    
    const { CosmosClient } = require("@azure/cosmos");
    const endpoint = "<your-cosmosdb-connection>";
    const key = "<your-key>"
    const client = new CosmosClient({ endpoint, key });

    var results = []

    async function main() {
        // Get oid
        var oid = req.headers.authorization.split(" ")[1]
        console.log(oid)

        // Get Database 
        const { database } = await client.databases.createIfNotExists({ id: "db" });
        console.log(database.id);
        
        // Get Collection
        const { container } = await database.containers.createIfNotExists({ id: "collection" });
        console.log(container.id);

        // Query items
        const { resources } = await container.items
            .query("SELECT * from c", { partitionKey: oid })
            .fetchAll();
        
        for (var r of resources)
        {
            results.push(r)
            console.log(r.id)
        }
    }

    main().catch((error) => {
        console.error(error);
    });

    await main()

    // Return response
    context.res = {
        // status: 200, /* Defaults to 200 */
        body: results
    };
}