ASP.NET Core中如何为注入的HttpClient添加认证HttpClientHandler？

方案一：动态添加Basic认证请求头（推荐） #

既然你的IoT设备使用的是Basic认证，完全可以在发送请求时动态生成并添加Authorization头，无需修改HttpClientHandler。这种方式既符合HttpClient复用的最佳实践，又能让主应用统一管理HttpClient的生命周期和日志输出。

类库代码实现 #

public class IoTRequestClient
{
    private readonly HttpClient _httpClient;

    // 从主应用注入由IHttpClientFactory管理的HttpClient
    public IoTRequestClient(HttpClient httpClient)
    {
        _httpClient = httpClient;
    }

    public async Task SendDeviceRequestAsync(IoTDevice device, string endpoint, HttpMethod method)
    {
        var requestUri = new Uri($"http://{device.IpAddress}/{endpoint}");
        using var request = new HttpRequestMessage(method, requestUri);

        // 当设备提供凭证时，添加Basic认证头
        if (!string.IsNullOrWhiteSpace(device.Username) && !string.IsNullOrWhiteSpace(device.Password))
        {
            var authBytes = Encoding.ASCII.GetBytes($"{device.Username}:{device.Password}");
            var authToken = Convert.ToBase64String(authBytes);
            request.Headers.Authorization = new AuthenticationHeaderValue("Basic", authToken);
        }

        var response = await _httpClient.SendAsync(request);
        response.EnsureSuccessStatusCode();
        // 后续响应处理逻辑...
    }
}

// IoT设备模型示例
public class IoTDevice
{
    public string IpAddress { get; set; }
    public string Username { get; set; }
    public string Password { get; set; }
}

主应用注册配置 #

在ASP.NET Core的Program.cs中注册Typed HttpClient，由IHttpClientFactory统一管理：

builder.Services.AddHttpClient<IoTRequestClient>();

这种方式下，HttpClient会复用连接池，日志会自动集成到主应用的日志系统，完全满足你的需求。

方案二：动态创建带自定义Handler的HttpClient（适配特殊场景） #

如果你的设备必须依赖HttpClientHandler的Credentials配置（比如需要开启PreAuthenticate，或者设备要求必须通过Handler层面完成认证），可以通过共享底层连接池的方式，避免频繁创建HttpClient导致的Socket资源耗尽问题。

主应用注册共享连接池Handler #

builder.Services.AddSingleton<SocketsHttpHandler>(sp =>
{
    return new SocketsHttpHandler
    {
        PooledConnectionLifetime = TimeSpan.FromMinutes(5),
        PooledConnectionIdleTimeout = TimeSpan.FromMinutes(2),
        MaxConnectionsPerServer = 100
        // 可添加主应用统一配置的其他Handler参数
    };
});

builder.Services.AddSingleton<IoTClientFactory>();

类库中动态创建带认证的HttpClient #

public class IoTClientFactory
{
    private readonly SocketsHttpHandler _sharedConnectionHandler;
    private readonly ILogger<HttpClient> _logger;

    public IoTClientFactory(SocketsHttpHandler sharedConnectionHandler, ILogger<HttpClient> logger)
    {
        _sharedConnectionHandler = sharedConnectionHandler;
        _logger = logger;
    }

    public HttpClient CreateClientForDevice(IoTDevice device)
    {
        HttpMessageHandler handler = _sharedConnectionHandler;

        // 当设备有凭证时，包装一层带认证的HttpClientHandler
        if (!string.IsNullOrWhiteSpace(device.Username) && !string.IsNullOrWhiteSpace(device.Password))
        {
            var authHandler = new HttpClientHandler
            {
                Credentials = new NetworkCredential(device.Username, device.Password),
                PreAuthenticate = true
            };
            authHandler.InnerHandler = _sharedConnectionHandler;
            handler = authHandler;
        }

        return new HttpClient(handler)
        {
            BaseAddress = new Uri($"http://{device.IpAddress}/")
        };
    }
}

使用时，从IoTClientFactory获取对应设备的HttpClient，使用完毕后可直接Dispose（不会关闭共享连接池的连接），或交由GC回收。

内容的提问来源于stack exchange，提问作者jason.kaisersmith