asp.net JWT

1、通过NuGet添加包

2、写一个JWTHelper帮助类

using JWT;
using JWT.Algorithms;
using JWT.Exceptions;
using JWT.Serializers;
using System;
using System.Collections.Generic;

namespace XXXXX.IM.API.Tool
{
    public class JWTHelper
    {
        static IJwtAlgorithm algorithm = new HMACSHA256Algorithm();//HMACSHA256加密
        static IJsonSerializer serializer = new JsonNetSerializer();//序列化和反序列
        static IBase64UrlEncoder urlEncoder = new JwtBase64UrlEncoder();//Base64编解码
        static IDateTimeProvider provider = new UtcDateTimeProvider();//UTC时间获取
        const string secret = "8888888888888888888888888888888888888888";//服务端
        public static string CreateJWT(Dictionary<string, object> payload)
        {
            IJwtEncoder encoder = new JwtEncoder(algorithm, serializer, urlEncoder);
            return encoder.Encode(payload, secret);
        }
        public static bool ValidateJWT(string token, out string payload, out string message)
        {
            bool isValidted = false;
            payload = "";
            try
            {
                IJwtValidator validator = new JwtValidator(serializer, provider);//用于验证JWT的类

                IJwtDecoder decoder = new JwtDecoder(serializer, validator, urlEncoder, algorithm);//用于解析JWT的类
                payload = decoder.Decode(token, secret, verify: true);

                isValidted = true;

                message = "token验证通过";
            }
            catch (TokenExpiredException ex)//当前时间大于负载过期时间（负荷中的exp），会引发Token过期异常
            {
                message = "token过期";
            }
            catch (SignatureVerificationException ex)//如果签名不匹配，引发签名验证异常
            {
                message = "token验证失败";
            }
            return isValidted;
        }
        public static long UnixTimeStampUTC(DateTime dateTime)
        {
            Int32 unixTimeStamp;
            DateTime zuluTime = dateTime.ToUniversalTime();
            DateTime unixEpoch = new DateTime(1970, 1, 1);
            unixTimeStamp = (Int32)(zuluTime.Subtract(unixEpoch)).TotalSeconds;
            return unixTimeStamp;
        }
    }
}

3、使用 

 　　　　　　　　//载荷（payload）
                var payload = new Dictionary<string, object>
                {
                    { "iss","XXXX.IM.API"},//发行人
                    { "exp",JWTHelper.UnixTimeStampUTC(DateTime.Now.AddHours(2))},//到期时间
                    { "sub", "XXXX.IM.API.Token" }, //主题
                    { "aud", "XXXX.IM" }, //用户
                    { "iat", DateTime.Now.ToString() }, //发布时间 
                    { "data" ,new { autor=" ",description=""} }
                };

                string JWTString = JWTHelper.CreateJWT(payload);

                string ResultMessage;//解析完毕的消息
                string Payload;//获取负载
                var checkResult = JWTHelper.ValidateJWT(JWTString, out Payload, out ResultMessage);

 4、head中携带token

新建一个js文件，例如：api-key-header-auth.js，位置随便放，我是放在scripts文件夹

(function () {
    $(function () {
        $('#input_apiKey').show();
        $('#input_apiKey').on('change', function () {
            var key = this.value;
            if (key && key.trim() !== '') {
                swaggerUi.api.clientAuthorizations.add("key", new SwaggerClient.ApiKeyAuthorization("Authorization", key, "header"));
            }
        });
    });
})();

  然后在SwaggerConfig.cs文件中找到如下代码取消注释即可 

c.BasicAuth("basic")
                            .Description("Basic HTTP Authentication");

c.InjectJavaScript(thisAssembly, "XXXX.IM.API.Scripts.api-key-header-auth.js");

  这里注意下文件位置写自己的位置，然后在页面中录入token就可以了

感谢：

https://www.jb51.net/article/172028.htm

https://blog.csdn.net/weixin_39885282/article/details/79462443

https://www.cnblogs.com/cr-cool/p/12448724.html