在.NET中使用JWT

1.配置文件添加

//jwt配置文件
  "JWT": {
    "SigningKey": "14fa5f2rrwsg627fs256fdgff2r5rf5222fsh26",
    "ExpireSeconds": 3600
  }

2.在Program添加中间件相关代码

builder.Services.Configure<JWTOptions>(builder.Configuration.GetSection("JWT"));
builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
.AddJwtBearer(x =>
{
    var jwtOpt = builder.Configuration.GetSection("JWT").Get<JWTOptions>();
    byte[] keyBytes = Encoding.UTF8.GetBytes(jwtOpt.SigningKey);
    var secKey = new SymmetricSecurityKey(keyBytes);
    x.TokenValidationParameters = new()
    {
        ValidateIssuer = false,
        ValidateAudience = false,
        ValidateLifetime = true,
        ValidateIssuerSigningKey = true,
        IssuerSigningKey = secKey
    };
});

3. 在Program中 app.UseAuthorization()前添加app.UseAuthentication();

app.UseAuthentication();
app.UseAuthorization();

4.在登录代码成功后生成token

private readonly IOptionsSnapshot<JWTOptions> _jwtOptions;
public UserController(IUserService userService, IOptionsSnapshot<JWTOptions> jwtOptions)
{
     _userService = userService;
     _jwtOptions = jwtOptions;
 }

List<Claim> claims = new List<Claim>();
claims.Add(new Claim("UserName",user.UserName!));
claims.Add(new Claim("UserId", user.UserId.ToString()!));

string key = _jwtOptions.Value.SigningKey;
DateTime expire = DateTime.Now.AddHours(1);
Byte[] secBytes = Encoding.UTF8.GetBytes(key);
var secKey = new SymmetricSecurityKey(secBytes);
var credentials = new SigningCredentials(secKey, SecurityAlgorithms.HmacSha256Signature);
var tokenDes = new JwtSecurityToken(claims:claims,expires:expire,signingCredentials:credentials);
string JwtToken = new JwtSecurityTokenHandler().WriteToken(tokenDes);

5.验证授权只需要在接口前或者控制器加上 [Authorize]