.net core Jwt 添加

Jwt 已经成为跨平台身份验证通用方案，如不了解请关注：https://jwt.io/。

为了和微软其他验证模块有个比较好的衔接，项目中采用了微软开发的jwt组件： System.IdentityModel.Tokens.Jwt。首先安装：Install-Package System.IdentityModel.Tokens.Jwt。

   在config方法中添加

  if (!HostingEnvironment.IsEnvironment("test"))
             {
                 app.UseJwtBearerAuthentication(Jwt.GetJwtOptions());
             }

实现一个jwt工具类：

 using System;
 using System.Collections.Generic;
 using System.IdentityModel.Tokens.Jwt;
 using System.Security.Claims;
 using System.Text;
 using System.Threading.Tasks;
 using AutoMapper;
 using Microsoft.AspNet.Hosting;
 using Microsoft.AspNetCore.Authentication.JwtBearer;
 using Microsoft.AspNetCore.Builder;
 using Microsoft.AspNetCore.Hosting;
 using Microsoft.AspNetCore.Http;
 using Microsoft.AspNetCore.Http.Extensions;
 using Microsoft.Extensions.Configuration;
 using Microsoft.IdentityModel.Tokens;
 using NDaisy.Core.ServiceLocator;
 using WebApiCore.Core.Utility.Extension;
 using IHostingEnvironment = Microsoft.AspNetCore.Hosting.IHostingEnvironment;

 namespace WebApiCore.Utility
 {
     public class Jwt
     {
         private static SecurityKey _signKey;
         private static IConfigurationSection _config;
         private const string Issue = "webcore";
         static Jwt()
         {
             _config= ServiceLocator.Current.GetInstance<IConfigurationRoot>().GetSection("Jwt");
             var keyAsBytes = Encoding.ASCII.GetBytes(_config.GetValue<string>("Salt"));
             _signKey = new SymmetricSecurityKey(keyAsBytes);

         }

         public static JwtBearerOptions GetJwtOptions()
         {
             return new JwtBearerOptions
             {
                 TokenValidationParameters =
                 {
                     ValidIssuer = Issue,
                     IssuerSigningKey = _signKey,
                     ValidateLifetime = true,
                     ValidateIssuer = true,
                     ValidateAudience = false
                 },
                   Events = new JwtBearerEvents()
                   {
                       OnAuthenticationFailed = c =>
                       {

                           return Task.Run(() =>
                           {
                               if (ServiceLocator.Current.GetInstance<IHostingEnvironment>().IsDevelopment())
                               {
                                   c.Request.GetDisplayUrl().LogInfo();
                                   c.Exception.LogError();
                               }

                           } );
                       }

                   }
             };
         }

         public static string SignToken(IList<Claim> claims)
         {
             var seconds= _config.GetValue<int>("SlideTime");

             JwtSecurityToken jwtSecurityToken = new JwtSecurityToken(issuer: Issue, claims: claims, expires: DateTime.UtcNow.AddSeconds(seconds), signingCredentials: new SigningCredentials(_signKey, SecurityAlgorithms.HmacSha256));

             return new JwtSecurityTokenHandler().WriteToken(jwtSecurityToken);
         }
     }

 }

添加一个获取token的入口，实际项目中，放在登录授权里面：

  app.Map("/auth/test", appbuilder =>
             {
                 appbuilder.Run(d =>
                 {
                     var token= Jwt.SignToken(new List<Claim>() {new Claim("name", "ryan")});

                     return d.Response.WriteAsync(token);
                 });
             });