asp.net core 添加breaer token认证

迷南。 2023-02-12 10:24 7阅读 0赞

### Step 1. 增加配置信息和配置类 ###

增加一个类与配置信息绑定

public class JWTConfig
        {
            public string Issuer { get; set; }
            public string Audience { get; set; }
            public string IssuerSigningKey { get; set; }
            public int AccessTokenExpiresMinutes { get; set; }
        }

appsetting.json

"JWT": {
        "Issuer": "AZDigital",
        "Audience": "allCustomer",
        "IssuerSigningKey": "AZDigital67451147",
        "AccessTokenExpiresMinutes": "1440"
      }

### Step 2. Startup.cs增加 ###

ConfigureServices函数增加

public void ConfigureServices(IServiceCollection services)
            {
                services.AddControllersWithViews();
                //services.AddControllers();
    
                //增加报错异常提示
                services.AddControllers().AddHttpExceptions();
    
                //这里可以添加注入对象并与配置内容绑定
                services.AddOptions();
                services.Configure<JWTConfig>(Configuration.GetSection("JWT"));
    
                #region 读取配置文件
                JWTConfig config = new JWTConfig();
                Configuration.GetSection("JWT").Bind(config);
                #endregion
    
                #region 开启JWT
                services.AddAuthentication(options =>
                {
                    options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
                    options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
                }).
                AddJwtBearer(options =>
                {
                    options.TokenValidationParameters = new TokenValidationParameters
                    {
                        ValidIssuer = config.Issuer,
                        ValidAudience = config.Audience,
                        IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(config.IssuerSigningKey)),
                        ClockSkew = TimeSpan.FromMinutes(1),
                    };
                });
                #endregion
                
                services.AddSwaggerGen(c =>
                {
                    c.SwaggerDoc("v1", new OpenApiInfo { Title = "AZReport API", Version = "v1" });
                });
            }

Configure函数增加

public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
            {
                if (env.IsDevelopment())
                {
                    app.UseDeveloperExceptionPage();
                }
                else
                {
                    app.UseExceptionHandler("/Home/Error");
                    // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
                    app.UseHsts();
                }
    
                // Enable middleware to serve generated Swagger as a JSON endpoint.
                app.UseSwagger();
                // Enable middleware to serve swagger-ui (HTML, JS, CSS, etc.),
                // specifying the Swagger JSON endpoint.
                app.UseSwaggerUI(c =>
                {
                    c.SwaggerEndpoint("/swagger/v1/swagger.json", "Report V1");
                });
    
                // 这里使用http异常信息
                app.UseHttpExceptions();
                app.UseHttpsRedirection();
                app.UseStaticFiles();
    
                app.UseRouting();
    
                // brerer token 开启使用认证必须加到上下两个函数之间
                app.UseAuthentication();
                app.UseAuthorization();
    
                app.UseEndpoints(endpoints =>
                {
                    endpoints.MapControllerRoute(
                        name: "default",
                        pattern: "{controller=Home}/{action=Index}/{id?}");
                });
                
            }

### Step 3. 创建token的函数 ###

// 创建和认证的时候
            // issuer + audience + signingCredentials 和 认证的时候必须一致才行
            private string CreateToken()
            {
                var now = DateTime.Now;
                var expires = now.Add(TimeSpan.FromMinutes(_options.Value.AccessTokenExpiresMinutes));
                Claim[] claims = { new Claim(ClaimTypes.Email, "admin"), new Claim(ClaimTypes.Name, "admin") };
                var token = new JwtSecurityToken(
                       issuer: _options.Value.Issuer,
                       audience: _options.Value.Audience,
                       claims: claims,
                       notBefore: now,
                       expires: expires,
                       signingCredentials: new SigningCredentials(new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_options.Value.IssuerSigningKey)), SecurityAlgorithms.HmacSha256));
                return new JwtSecurityTokenHandler().WriteToken(token);
            }

### Step 4. 增加需要认证的控制器 ###

[Route("api/test")]
        [Authorize] //添加这个配置
        public class ValuesController : ControllerBase
        {
            [HttpGet("aaa")]
            [AllowAnonymous]  //这个意思是跳过认证
            public string getsss()
            {
                return "aaaaa";
            }
    
            [HttpGet("bbb")]
            public string getcccc()
            {
                return "bbbbb";
            }
    
        }

ok。。至此完了。。