转载 发布者：长行 发表于：2022-06-28
1：导入NuGet包 Microsoft.AspNetCore.Authentication.JwtBearer
2:配置 jwt相关信息
3：在 startUp中
1 public void ConfigureServices(IServiceCollection services){ 2 #region JWT 认证 3 services 4 .AddAuthentication(JwtBearerDefaults.AuthenticationScheme) 5 .AddJwtBearer(options => { 6 var jsonmodel = AppJsonHelper.InitJsonModel(); 7 options.TokenValidationParameters = new TokenValidationParameters 8 { 9 ValidIssuer = jsonmodel.Issuer,// Configuration["JwtSetting:Issuer"], 10 ValidAudience = jsonmodel.Audience,// Configuration["JwtSetting:Audience"], 11 // IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(Configuration["JwtSetting:SecurityKey"])), 12 IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(jsonmodel.TockenSecrete)), 13 // 默认允许 300s 的时间偏移量，设置为0即可 14 ClockSkew = TimeSpan.Zero 15 }; 16 }); 17 #endregion 18 } 19 20 //注意需要放在addmvc上面 services.AddMvc(); 21 22 public void Configure(IApplicationBuilder app, IWebHostEnvironment env) 23 { 24 app.UseAuthentication();//身份验证 25 app.UseAuthorization();// 授权 26 }
4:使用时在Controller /action 上打上特性 [Authorize]
可以单独在Action上打上特性[Authorize] 不需要检查授权认证的话打上特性： [AllowAnonymous]
两个特性类都在如下命名空间下：
using Microsoft.AspNetCore.Authorization;
5：登陆成功后端并返回生成的Tocken，可以在PostMan上面测试，和JWT.io官网上面来测试
6: 发送请求到后端，带上Tocken 如Get ://localhost:5000/user/login
Key value
Authorization Bearer qweTdfdsfsJhdsfd0.fdsfdsgfdsewDDQDD.fdsfdsg***
7：action上面的code
1 [HttpPost, Route("Login")] 2public ApiResult Login(personnel p) 3 { 4 ApiResult result = new ApiResult(); 5 try 6 { 7 string tockenStr = ZrfJwtHelper.GetTocken(p); 8 result.data = tockenStr; 9 result.code = statuCode.success; 10 result.message = "获取成功!"; 11 } 12 catch (Exception ex) 13 { 14 result.message = "查询异常:" + ex.Message; 15 } 16 return result; 17 } 18 19 20[HttpPost, Route("authTest")] 21 [Authorize] 22[AllowAnonymous]// 跳过授权认证 23public ApiResult authTest(string accesTocken) 24 { 25 ApiResult result = new ApiResult(); 26 try 27 { 28 var info = ZrfJwtHelper.GetTockenInfo(accesTocken); 29 result.data = info; 30 result.code = statuCode.success; 31 result.message = "获取成功!"; 32 } 33 catch (Exception ex) 34 { 35 result.message = "查询异常:" + ex.Message; 36 } 37 return result; 38}
8：完整的Jwt代码封装
1 using System; 2 using System.Collections.Generic; 3 using System.Linq; 4 using System.Threading.Tasks; 5 namespace ZRFCoreTestMongoDB.Commoms 6 { 7 using Microsoft.AspNetCore.Http; 8 using Microsoft.IdentityModel.Tokens; 9 using System.IdentityModel.Tokens.Jwt; 10 using System.Security.Claims; 11 using System.Text; 12 using ZRFCoreTestMongoDB.Model; 13 14 /// <summary> 15 /// @auth fengge 16 /// </summary> 17 public class ZrfJwtHelper 18 { 19/// <summary> 20/// 生成Tocken 21/// </summary> 22/// <param name="p"></param> 23/// <returns></returns> 24public static string GetTocken(personnel p) 25 { 26 //读取配置文件获得Jwt的json文件信息 27 var model = AppJsonHelper.InitJsonModel(); 28 string _issuer = model.Issuer;//分发者 29 string audience = model.Audience;//接受者 30 string TockenSecrete = model.TockenSecrete;//秘钥 31 32 //秘钥 33 var securityKey = new SigningCredentials(new SymmetricSecurityKey(Encoding.ASCII.GetBytes(TockenSecrete)), SecurityAlgorithms.HmacSha256); 34 // 設定要加入到 JWT Token 中的聲明資訊(Claims) 35 //var claims = new List<Claim>(); 36 //// 在 RFC 7519 規格中(Section#4)，總共定義了 7 個預設的 Claims，我們應該只用的到兩種！ 37 ////claims.Add(new Claim(JwtRegisteredClaimNames.Iss, issuer)); 38 //claims.Add(new Claim(JwtRegisteredClaimNames.Sub, userInfo.UserId)); 39 40 //Claim 41 var claims = new Claim[] { 42new Claim(JwtRegisteredClaimNames.Sid,p.Uid), 43new Claim(JwtRegisteredClaimNames.Iss,_issuer), 44new Claim(JwtRegisteredClaimNames.Sub,p.Name), 45new Claim("Guid",Guid.NewGuid().ToString("D")), 46new Claim("Roleid",p.Roleid.ToString()), 47new Claim("Age",p.Age.ToString()), 48new Claim("BirthDay",p.BirthDay.ToString()) 49 }; 50 51 SecurityToken securityToken = new JwtSecurityToken( 52 issuer: _issuer, 53 audience: audience, 54 signingCredentials: securityKey, 55 expires: DateTime.Now.AddMinutes(2),//过期时间 56 claims: claims 57 ); 58 59 return new JwtSecurityTokenHandler().WriteToken(securityToken); 60 } 61 62/// <summary> 63/// 获取accessTocken 64/// </summary> 65/// <param name="context"></param> 66/// <returns></returns> 67public static string GetTockenString(HttpContext context) 68 { 69 return context != null ? context.Request.Headers["Authorization"].ToString() : ""; 70 } 71 72/// <summary> 73/// 解析Jwt生成的 Tocken 74/// </summary> 75/// <param name="accesTocken"></param> 76/// <returns></returns> 77public static TockenInfo GetTockenInfo(string accesTocken) 78 { 79 try 80 { 81 if (accesTocken.Contains("Bearer")) //防止前端传过来的tocken 为待了 Bearer 的字符串 82 { 83accesTocken = accesTocken.Replace("Bearer ", ""); 84 } 85 var tockHandler = new JwtSecurityToken(accesTocken); 86 TockenInfo info = new TockenInfo 87 { 88// Age=tockHandler.Claims.FirstOrDefault(c=>c.Type==JwtRegisteredClaimNames.Email) 89U => c.Type == JwtRegisteredClaimNames.Sid).Value, 90Name = tockHandler.Claims.FirstOrDefault(c => c.Type ==JwtRegisteredClaimNames.Sub).Value,//在于自己来定义了，上面生成是和下面获取时Key要一致 91 92Age = tockHandler.Claims.FirstOrDefault(c => c.Type == "Age").Value, 93BirthDay = tockHandler.Claims.FirstOrDefault(c => c.Type == "BirthDay").Value, 94Role => c.Type == "Roleid").Value, 95 }; 96 return info; 97 } 98 catch (Exception ex) 99 { 100 throw new Exception("解析Tocken时错误！"); 101 } 102 } 103 } 104 public class TockenInfo 105 { 106public string Uid { get; set; } 107public string Name { get; set; } 108public string Age { get; set; } 109public string BirthDay { get; set; } 110public string Roleid { get; set; } 111 } 112 }
9：模型实体
1 using System; 2 using System.Collections.Generic; 3 using System.Linq; 4 using System.Threading.Tasks; 5 6 namespace ZRFCoreTestMongoDB.Model 7 { 8 using System.ComponentModel.DataAnnotations; 9 [Serializable] 10 public class personnel 11 { 12 13[Required(ErrorMessage = "姓名必填")] 14[StringLength(maximumLength: 10, ErrorMessage = "姓名最多是10个字符")] 15[MinLength(2, ErrorMessage = "姓名长度最少为两个字符")] 16public string Name { get; set; } 17 18[Range(1, 150, ErrorMessage = "年龄范围为：1-150")] 19public int Age { get; set; } 20[DataType(DataType.Date, ErrorMessage = "生日不学为日期格式，例如：1998-10-10")] 21public DateTime BirthDay { get; set; } 22 23[Required(ErrorMessage = "密码必填")] 24[StringLength(maximumLength: 10, MinimumLength = 6, ErrorMessage = "密码长度最多10位")] 25public string Password { get; set; } 26public int Roleid { get; set; } 27public string Uid { get; set; } 28 } 29 }
10：配置内容：
11：测试效果
