.net Core API接口 JWT Token创建与认证(源码实例)

视频讲解地址 https://www.bilibili.com/video/BV1XN4y1x758/

1、添加服务(Nuget 安装 Microsoft.AspNetCore.Authentication.JwtBearer)

//添加JWT身份验证服务
builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
        .AddJwtBearer(options =>
        {
            options.TokenValidationParameters = new TokenValidationParameters
            {
                ValidateIssuer = true,//是否效验Issuer 
                ValidateAudience = true,//是否效验Audience
                ValidateLifetime = true,//是否验证失效时间
                ValidateIssuerSigningKey = true,//是否效验SigningKey
                ValidIssuer = TokenParameter.Issuer,//颁发者
                ValidAudience = TokenParameter.Audience,//接收者 
                IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(TokenParameter.Secret))
            };
        });
//配置Swagger身份验证输入（可选）
builder.Services.AddSwaggerGen(options =>
{
    options.AddSecurityDefinition("Bearer", new OpenApiSecurityScheme
    {
        Description = "请输入token,格式为 【Bearer JWT字符串】（注意中间必须有空格）",
        Name = "Authorization",
        In = ParameterLocation.Header,
        Type = SecuritySchemeType.ApiKey,
        BearerFormat = "JWT",
        Scheme = "Bearer"
    });
    //添加安全要求
    options.AddSecurityRequirement(new OpenApiSecurityRequirement {
        {
            new OpenApiSecurityScheme{
                Reference =new OpenApiReference{
                    Type = ReferenceType.SecurityScheme,
                    Id ="Bearer"
                }
            },new string[]{ }
        }
    });
});

2、使用中间件

app.UseAuthentication();

app.UseAuthorization();

3、JWT帮助类

using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.IdentityModel.Tokens;
using System.IdentityModel.Tokens.Jwt;
using System.Security.Claims;
using System.Text;

namespace WebApplication1
{
    public class JwtHelper
    {
        public static string GenerateJsonWebToken(User userInfo)
        {
            var securityKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(TokenParameter.Secret));
            var credentials = new SigningCredentials(securityKey, SecurityAlgorithms.HmacSha256);
            var claimsIdentity = new ClaimsIdentity(CookieAuthenticationDefaults.AuthenticationScheme);
            claimsIdentity.AddClaim(new Claim("ID", "1001"));
            claimsIdentity.AddClaim(new Claim(ClaimTypes.Name, userInfo.UserName));
            claimsIdentity.AddClaim(new Claim(ClaimTypes.Role, "超级管理员"));
            var token = new JwtSecurityToken(TokenParameter.Issuer,
              TokenParameter.Audience,
              claimsIdentity.Claims,
              expires: DateTime.Now.AddMinutes(TokenParameter.AccessExpiration),
              signingCredentials: credentials);

            return new JwtSecurityTokenHandler().WriteToken(token);
        }
    }
    public class TokenParameter
    {
        public const string Issuer = "lqwvje";//颁发者        
        public const string Audience = "LuoFenMing";//接收者    
        public const string Secret = "1122334455667788";//签名秘钥        
        public const int AccessExpiration = 30;//AccessToken过期时间（分钟）
    }
    public class User
    {
        public string UserName { get; set; }
        public string UserPwd { get; set; }
    }
}

4、创建JWT Token API接口

using Microsoft.AspNetCore.Mvc;

namespace WebApplication1.Controllers
{
    [Route("api/[controller]/[Action]")]
    [ApiController]
    public class AuthController : ControllerBase
    {
        [HttpPost]
        public ActionResult GetToken(User user)
        {
            if (user.UserName == "admin" && user.UserPwd == "123456")
            {
                string token = JwtHelper.GenerateJsonWebToken(user);
                return Ok(token);
            }

            Dictionary<string,object> data = new Dictionary<string, object>();
            data["code"] = 2;
            data["msg"] = "帐号或密码错误";
            return Ok(data);
        }
    }
}

5、测试接口

using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using static System.Net.Mime.MediaTypeNames;
using System.Security.Claims;

namespace WebApplication1.Controllers
{
    [Authorize]
    [Route("api/[controller]/[Action]")]
    [ApiController]
    public class TestController : ControllerBase
    {
        [HttpPost]
        public ActionResult GetTestInfo()
        {
            var claimsPrincipal = this.HttpContext.User;
            var name = claimsPrincipal.Claims.FirstOrDefault(r => r.Type == ClaimTypes.Name)?.Value;
            var role = claimsPrincipal.Claims.FirstOrDefault(r => r.Type == ClaimTypes.Role)?.Value;
         
            Dictionary<string, object> dic = new Dictionary<string, object>();
            dic["Code"] = 1;
            dic["Msg"] = "token 认证 成功";
            return Ok(dic);
        }
    }
}

本文来自 www.luofenming.com

源码地址 : https://pan.baidu.com/s/1kAMGM0UPoPSw5j8t8_5E2A?pwd=a775 提取码: a775