在Asp.Net Core Web API中使用JWT鉴权(1)创建鉴权中心

该系列简单介绍了在Asp.Net Core Web API中如何使用JWT创建token进行鉴权。

1、创建Asp.Net Core Web API项目

这里使用的环境是VS2019 + .Net Core 3.1。

2、添加JWT服务

(1) 使用Nuget安装System.IdentityModel.Tokens.Jwt。
(2) 实现JWT服务

public interface IJwtService
{
    string GetToken(string name);
}

using Microsoft.Extensions.Configuration;
using Microsoft.IdentityModel.Tokens;
using System;
using System.IdentityModel.Tokens.Jwt;
using System.Security.Claims;
using System.Text;

namespace TestWebApi.AuthCenter.Utility
{
    public class JwtService : IJwtService
    {
        private readonly IConfiguration _configuration;

        public JwtService(IConfiguration configuration)
        {
            _configuration = configuration;
        }

        public string GetToken(string name)
        {
            /**
             * Claims(Payload)
             * Claims包含了一些跟这个token有关的重要信息。JWT标准规定的字段：
             * 
             * iss: The issuer of the token, 签发人
             * sub: The subject of the token, 主题
             * exp: Expiration Time. 过期时间(Unix时间戳格式)
             * iat: Issued At. 签发时间(Unix时间戳格式)
             * jti: JWT ID. 编号
             * aud: audience. 受众
             * nbf: Not Before. 生效时间
             * 
             * 除了规定的字段外，可以包含其他任何JSON兼容的字段。
             * */
            var claims = new[]
            {
                new Claim(ClaimTypes.Name, name),
                new Claim("NickName", "NetCore"),
                new Claim("Role", "Administrator")
            };

            var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_configuration["SecurityKey"]));
            var credentials = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);

            var token = new JwtSecurityToken(
                issuer: _configuration["issuer"], //签发人
                audience: _configuration["audience"],
                claims: claims,
                expires: DateTime.Now.AddMinutes(20), //20分钟有效期
                signingCredentials: credentials);
            var tokenStr = new JwtSecurityTokenHandler().WriteToken(token);
            return tokenStr;
        }
    }
}

(3) 注入JWT服务

//注入JWT服务
services.AddScoped<IJwtService, JwtService>();

3、添加JWT配置信息(appsettings.json)

"issuer": "http://localhost:9527",
"audience": "http://localhost:9527",
"SecurityKey": "4A9A70D2-B8AD-42E1-B002-553BDEF4E76F"

其中，SecurityKey为新建的一个GUID。

4、添加授权控制器
(1) 使用Nuget安装Newtonsoft.Json
(2) 控制器类实现

using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.Configuration;
using Microsoft.Extensions.Logging;
using Newtonsoft.Json;
using TestWebApi.AuthCenter.Utility;

namespace TestWebApi.AuthCenter.Controllers
{
    [Route("api/[controller]")]
    [ApiController]
    public class AuthController : ControllerBase
    {
        //需要注入的服务
        private readonly ILogger<AuthController> _logger;
        private readonly IConfiguration _configuration;
        private readonly IJwtService _jwtService;

        public AuthController(IConfiguration configuration,
            ILogger<AuthController> logger,
            IJwtService jwtService)
        {
            _configuration = configuration;
            _logger = logger;
            _jwtService = jwtService;
        }

        [Route("Login")]
        [HttpGet]
        public string Login(string username, string password)
        {
            var result = VerifyLogin(username, password);
            var token = result ? _jwtService.GetToken(username) : "";

            return JsonConvert.SerializeObject(new
            {
                result,
                token
            });
        }

        private bool VerifyLogin(string username, string password)
        {
            return "admin".Equals(username) && "123456".Equals(password);
        }
    }
}

5、运行

(1) 运行Web API项目，在浏览器中输入https://localhost:5001/api/auth/Login，正常情况下会输出下面的内容：

{"result":false,"token":""}

(2) 在浏览器中输入https://localhost:5001/api/auth/Login?username=admin&password=123456，正常情况下会输出类似下面的内容：

{"result":true,"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1lIjoiYWRtaW4iLCJOaWNrTmFtZSI6Ik5ldENvcmUiLCJSb2xlIjoiQWRtaW5pc3RyYXRvciIsImV4cCI6MTYxMzk1OTM0NSwiaXNzIjoiaHR0cDovL2xvY2FsaG9zdDo5NTI3IiwiYXVkIjoiaHR0cDovL2xvY2FsaG9zdDo5NTI3In0.JdkUR3MV2uC8dQAnqzskFreVFdrHK4WTRrMJSDm7STY"}