.net core jwt 授权验证

代码我参考了一本书 Modern API Design with ASP.NET Core 2 Building Cross-Platform Back-End Systems 

网上也有一个很牛 https://jasonwatmore.com/post/2018/08/14/aspnet-core-21-jwt-authentication-tutorial-with-example-api

1.获取token 的controller

 [HttpGet]
        public IActionResult GetToken()
        {
            var authorizationHeader = Request.Headers["Authorization"].First();
            var key = authorizationHeader.Split(' ')[1];
            var credentials = Encoding.UTF8.GetString(Convert.FromBase64String(key)).Split(':');

            var serverSecret = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_configuration["JWT:ServerSecret"]));
            //验证是否是信任用户的用户名和密码,可在数据库中查询
            if (credentials[0] == "awesome-username" && credentials[1] == "awesome-password")
            {
                var result = new
                {
                    token = GenerateToken(serverSecret)
                };

                return Ok(result);
            }

            return BadRequest();
        }

        private string GenerateToken(SecurityKey key)
        {
            var now = DateTime.UtcNow;
            //发行人
            var issuer = _configuration["JWT:Issuer"];
            //接收者??
            var audience = _configuration["JWT:Audience"];
            var identity = new ClaimsIdentity();
            //可以放一些claim进去授权时候使用
            Claim claim = new Claim(ClaimTypes.Name, "Leo");
            identity.AddClaim(claim);
            //登录凭证
            var signingCredentials = new SigningCredentials(key,
                SecurityAlgorithms.HmacSha256);
            var handler = new JwtSecurityTokenHandler();
            //生成token,设置1小时的过期时间
            var token = handler.CreateJwtSecurityToken(issuer, audience, identity,
                now, now.Add(TimeSpan.FromHours(1)), now, signingCredentials);
            var encodedJwt = handler.WriteToken(token);
            return encodedJwt;
        }

2.Startup 配置类

 services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
                .AddJwtBearer(options =>
                {
                    var serverSecret = new SymmetricSecurityKey(Encoding.UTF8.
                        GetBytes(Configuration["JWT:ServerSecret"]));
                    options.TokenValidationParameters = new
                        TokenValidationParameters
                        {
                            IssuerSigningKey = serverSecret,
                            //RequireExpirationTime = true,
                            ClockSkew = TimeSpan.Zero,
                            ValidIssuer = Configuration["JWT:Issuer"],
                            ValidAudience = Configuration["JWT:Audience"]
                        };
                });

3.appsettings.json

"JWT": {
    "ServerSecret": "qwertyuiopasdfghjklzxcvbnm123456",
    "Issuer": "https://awesome.io",
    "Audience": "https://app.awesome.io"
  },

4.客户端调用

 static void Main(string[] args)
        {

            HttpClient client = new HttpClient();
            var identity = "awesome-username:awesome-password";
            string idString = Base64Code(identity);
            client.DefaultRequestHeaders.Add("Authorization", $"Basic {idString}");
            //var respMsg =  client.GetAsync("http://localhost:8082/api/Todo/GetTodoItems");
            var respMsg = client.GetAsync("http://localhost:8082/api/Authenticate/GetToken");
            string msgBody = respMsg.Result.Content.ReadAsStringAsync().Result;
            TokenClass obj = JsonConvert.DeserializeObject<TokenClass>(msgBody);
            string token = obj.token;
            Console.WriteLine(token);
            Console.ReadKey();

            //2.获取token后再次发送请求
            //var token = "123";
            HttpClient getItemsClient = new HttpClient();
            getItemsClient.DefaultRequestHeaders.Add("Authorization",$"Bearer {token}");
            var respGetItems = getItemsClient.GetAsync("http://localhost:8082/api/Todo/GetTodoItems");
            string msgGetItems = respGetItems.Result.Content.ReadAsStringAsync().Result;

            Console.WriteLine(msgGetItems);
            Console.ReadKey();



        }

5.必须在需要验证授权的controller或action上添加 [Authorize]特性才能生效

6.我后期在core2.2遇到了302 问题,找了半天在 stackoverflow 找到答案

    services.AddAuthentication(options =>
                {
                    options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
                    options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
                })
                .AddJwtBearer(JwtBearerDefaults.AuthenticationScheme, options =>
                {
                    var serverSecret = new SymmetricSecurityKey(Encoding.UTF8.
                        GetBytes(Configuration["JWT:ServerSecret"]));
                    options.TokenValidationParameters = new
                        TokenValidationParameters
                        {
                            IssuerSigningKey = serverSecret,
                            //RequireExpirationTime = true,
                            //ClockSkew = TimeSpan.Zero,
                            ValidIssuer = Configuration["JWT:Issuer"],
                            ValidAudience = Configuration["JWT:Audience"]
                        };


                });