core Webapi jwt 认证

core cookie 验证

Web API Jwt

在这里插入图片描述

在这里插入图片描述
》》》》用户信息

namespace WebAPI001.Coms
{
    public class Account
    {
        public string UserName { get; set; }
        public string UserPassword { get; set; }
        public string UserRole { get; set; }
    }
}

》》》获取jwt类



using Microsoft.AspNetCore.Mvc;
using Microsoft.IdentityModel.Tokens;
using System.IdentityModel.Tokens.Jwt;
using System.Runtime.CompilerServices;
using System.Security.Claims;
using System.Text;

namespace WebAPI001.Coms
{
    public  class JwtHelper
    {      
       
      
        public static string GenerateJWT(Account user, IConfiguration _configuration)
        {           
            byte[] keyBytes = Encoding.UTF8.GetBytes(_configuration?.GetValue<string>("TokenParameter:Secret"));
            var securityKey = new SymmetricSecurityKey(keyBytes);
            // 创建JWT的签名凭证
            var signingCredentials = new SigningCredentials(securityKey, SecurityAlgorithms.HmacSha256);

            // 设置JWT的Claims
            var claims = new[]
            {
               new Claim(ClaimTypes.Name, user.UserName),
               new Claim(ClaimTypes.Role, user.UserRole),
               // 添加其他需要的声明
            };

            // 创建JWT的Token
            var token = new JwtSecurityToken(
               issuer: _configuration.GetValue<string>("TokenParameter:Issuer"),
               audience: _configuration.GetValue<string>("TokenParameter:Audience"),
               claims: claims,
               expires: DateTime.Now.AddMinutes(_configuration.GetValue<int>("TokenParameter:AccessExpiration")),
               signingCredentials: signingCredentials
            );

            // 生成JWT字符串
            var jwtToken = new JwtSecurityTokenHandler().WriteToken(token);
            return jwtToken;
        }
    }
}

在这里插入图片描述

 builder.Services.AddAuthentication(options =>
 {
     // 设置默认的身份验证和挑战方案为 JwtBearer
     options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
     options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
 }) // 配置 JWT Bearer 选项
 .AddJwtBearer(options =>
 {
     // 配置 Token 验证参数
     options.TokenValidationParameters = new TokenValidationParameters
     {
         // 验证发行者
         ValidateIssuer = true,
         // 验证受众
         ValidateAudience = true,
         // 验证令牌有效期
         ValidateLifetime = true,
         // 验证签名密钥
         ValidateIssuerSigningKey = true,
         // 发行者
         ValidIssuer = builder.Configuration["TokenParameter:Issuer"],
         // 受众
         ValidAudience = builder.Configuration["JokenParameter:Audience"],
         // 签名密钥
         IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(builder.Configuration["TokenParameter:Secret"])),
         AudienceValidator = (m, n, z) => {
             //自定义验证逻辑
             return true;
         }
     };
 });