這篇文章給大家分享的是有關(guān).net core webapi jwt認(rèn)證的示例分析的內(nèi)容。小編覺(jué)得挺實(shí)用的，因此分享給大家做個(gè)參考，一起跟隨小編過(guò)來(lái)看看吧。
jwt認(rèn)證分為兩部分，第一部分是加密解密，第二部分是靈活的應(yīng)用于中間件，我的處理方式是將獲取token放到api的一個(gè)具體的controller中，將發(fā)放token與驗(yàn)證分離，token的失效時(shí)間，發(fā)證者，使用者等信息存放到config中。
1.配置：
在appsettings.json中增加配置
重慶分公司
重慶分公司
"Jwt": {
"Issuer": "issuer",//隨意定義
"Audience": "Audience",//隨意定義
"SecretKey": "abc",//隨意定義
"Lifetime": 20, //單位分鐘
"ValidateLifetime": true,//驗(yàn)證過(guò)期時(shí)間
"HeadField": "useless", //頭字段
"Prefix": "prefix", //前綴
"IgnoreUrls": [ "/Auth/GetToken" ]//忽略驗(yàn)證的url
}2:定義配置類(lèi)：
internal class JwtConfig
{
public string Issuer { get; set; }
public string Audience { get; set; }
///
/// 加密key
///
public string SecretKey { get; set; }
///
/// 生命周期
///
public int Lifetime { get; set; }
///
/// 是否驗(yàn)證生命周期
///
public bool ValidateLifetime { get; set; }
///
/// 驗(yàn)證頭字段
///
public string HeadField { get; set; }
///
/// jwt驗(yàn)證前綴
///
public string Prefix { get; set; }
///
/// 忽略驗(yàn)證的url
///
public List IgnoreUrls { get; set; }
} 3.加密解密接口：
public interface IJwt
{
string GetToken(Dictionary Clims);
bool ValidateToken(string Token,out Dictionary Clims);
} 4.加密解密的實(shí)現(xiàn)類(lèi)：
install -package System.IdentityModel.Tokens.Jwt
public class Jwt : IJwt
{
private IConfiguration _configuration;
private string _base64Secret;
private JwtConfig _jwtConfig = new JwtConfig();
public Jwt(IConfiguration configration)
{
this._configuration = configration;
configration.GetSection("Jwt").Bind(_jwtConfig);
GetSecret();
}
///
/// 獲取到加密串
///
private void GetSecret()
{
var encoding = new System.Text.ASCIIEncoding();
byte[] keyByte = encoding.GetBytes("salt");
byte[] messageBytes = encoding.GetBytes(this._jwtConfig.SecretKey);
using (var hmacsha256 = new HMACSHA256(keyByte))
{
byte[] hashmessage = hmacsha256.ComputeHash(messageBytes);
this._base64Secret= Convert.ToBase64String(hashmessage);
}
}
///
/// 生成Token
///
///
/// Claims)
{
List claimsAll = new List();
foreach (var item in Claims)
{
claimsAll.Add(new Claim(item.Key, item.Value));
}
var symmetricKey = Convert.FromBase64String(this._base64Secret);
var tokenHandler = new JwtSecurityTokenHandler();
var tokenDescriptor = new SecurityTokenDescriptor
{
Issuer = _jwtConfig.Issuer,
Audience = _jwtConfig.Audience,
Subject = new ClaimsIdentity(claimsAll),
NotBefore = DateTime.Now,
Expires = DateTime.Now.AddMinutes(this._jwtConfig.Lifetime),
SigningCredentials =new SigningCredentials(new SymmetricSecurityKey(symmetricKey),
SecurityAlgorithms.HmacSha256Signature)
};
var securityToken = tokenHandler.CreateToken(tokenDescriptor);
return tokenHandler.WriteToken(securityToken);
}
public bool ValidateToken(string Token, out Dictionary Clims)
{
Clims = new Dictionary();
ClaimsPrincipal principal = null;
if (string.IsNullOrWhiteSpace(Token))
{
return false;
}
var handler = new JwtSecurityTokenHandler();
try
{
var jwt = handler.ReadJwtToken(Token);
if (jwt == null)
{
return false;
}
var secretBytes = Convert.FromBase64String(this._base64Secret);
var validationParameters = new TokenValidationParameters
{
RequireExpirationTime = true,
IssuerSigningKey = new SymmetricSecurityKey(secretBytes),
ClockSkew = TimeSpan.Zero,
ValidateIssuer = true,//是否驗(yàn)證Issuer
ValidateAudience = true,//是否驗(yàn)證Audience
ValidateLifetime = this._jwtConfig.ValidateLifetime,//是否驗(yàn)證失效時(shí)間
ValidateIssuerSigningKey = true,//是否驗(yàn)證SecurityKey
ValidAudience = this._jwtConfig.Audience,
ValidIssuer = this._jwtConfig.Issuer
};
SecurityToken securityToken;
principal = handler.ValidateToken(Token, validationParameters, out securityToken);
foreach (var item in principal.Claims)
{
Clims.Add(item.Type, item.Value);
}
return true;
}
catch (Exception ex)
{
return false;
}
}
} 5.定義獲取Token的Controller:
在Startup.ConfigureServices中注入 IJwt
