.Net Core 3.1添加 JWT

我会带着你远行 2022-12-09 05:21 159阅读 0赞

### .Net Core 3.1添加 JWT ###

*   *  添加JWT包
     *  配置appsettings.json
     *  配置 Startup
     *  创建 TokenRequest （用户对象类）
     *  创建 AuthController（验证控制器）
     *  使用 Authorize

## 添加JWT包 ##

NuGet 添加 **Microsoft.AspNetCore.Authentication.JwtBearer**  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzIwMjU4NTcz_size_16_color_FFFFFF_t_70_pic_center]

## 配置appsettings.json ##

{ 
      "Logging": { 
        "LogLevel": { 
          "Default": "Information",
          "Microsoft": "Warning",
          "Microsoft.Hosting.Lifetime": "Information"
        }
      },
      "AllowedHosts": "*",
      //添加 JWT
      "JWT": { 
        "SecurityKey": "aescraescraescraescr" // 密钥（可以随便写 但是最好不要太短）
      }
    }

## 配置 Startup ##

在 **ConfigureServices** 方法里添加下面的代码

//添加jwt验证：
    services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
         .AddJwtBearer(options => { 
             options.TokenValidationParameters = new TokenValidationParameters
             { 
                 ValidateIssuer = true,//是否验证Issuer
                 ValidateAudience = true,//是否验证Audience
                 ValidateLifetime = true,//是否验证失效时间
                 ValidateIssuerSigningKey = true,//是否验证SecurityKey
                 ValidAudience = "AESCR",//Audience
                 ValidIssuer = "AESCR",//Issuer，这两项和后面签发jwt的设置一致
                 ClockSkew = TimeSpan.Zero, // // 默认允许 300s 的时间偏移量，设置为0
                 IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(Configuration["JWT:SecurityKey"]))//拿到SecurityKey
             };
         });

在 **Configure** 方法里面添加

app.UseAuthentication();//注意添加这一句，启用验证

## 创建 TokenRequest （用户对象类） ##

/// <summary>
        /// token实体类
        /// </summary>
        public class TokenRequest
        { 
            /// <summary>
            /// 用户名
            /// </summary>
            public string Username {  get; set; }
            /// <summary>
            /// 密码
            /// </summary>
            public string Password {  get; set; }
        }

## 创建 AuthController（验证控制器） ##

/// <summary>
        /// JWT验证控制器
        /// </summary>
        [Produces("application/json")]
        [Route("api/[controller]")]
        [ApiController]
        public class AuthController : ControllerBase
        { 
            private readonly IConfiguration _configuration;
            /// <summary>
            /// 构造函数
            /// </summary>
            /// <param name="configuration"></param>
            public AuthController(IConfiguration configuration)
            { 
                _configuration = configuration;
            }
            /// <summary>
            /// 请求token
            /// </summary>
            /// <param name="request"></param>
            /// <returns></returns>
            [AllowAnonymous]
            [HttpPost]
            public IActionResult RequestToken([FromBody] TokenRequest request)
            { 
                //判断用户名与密码（这个地方可以自己写逻辑判断）
                if (request.Username == "AESCR" && request.Password == "666666")
                { 
                    var claims = new[]
                    { 
                        new Claim(ClaimTypes.Name, request.Username)
                    };
                    var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_configuration["JWT:SecurityKey"]));
                    var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
                    var token = new JwtSecurityToken(
                        issuer: "AESCR",
                        audience: "AESCR",
                        claims: claims,
                        expires: DateTime.Now.AddMinutes(30), //token 过期时间
                        signingCredentials: creds);
                    return Ok(new
                    { 
                        token = new JwtSecurityTokenHandler().WriteToken(token)
                    });
                }
                return BadRequest("Could not verify username and password");
            }
        }

## 使用 Authorize ##

给需要验证的 action 添加 **Authorize** 特性就可以了

/// <summary>
            /// 获取 天气
            /// </summary>
            /// <returns></returns>
            [HttpGet]
            [Authorize] //使用验证
            public IEnumerable<WeatherForecast> Get()
            { 
                var rng = new Random();
                return Enumerable.Range(1, 5).Select(index => new WeatherForecast
                { 
                    Date = DateTime.Now.AddDays(index),
                    TemperatureC = rng.Next(-20, 55),
                    Summary = Summaries[rng.Next(Summaries.Length)]
                })
                .ToArray();
            }

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzIwMjU4NTcz_size_16_color_FFFFFF_t_70_pic_center]: /images/20221123/8df64f10346049edafad2771cdd00281.png