1：引用需要的程序集 ：System.IdentityModel.Token.JWT 2：创建一个新的控制器，用于授权功能
using Demo.APIDbcontext;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Http;
using Microsoft.AspNetCore.Mvc;
using Microsoft.AspNetCore.Cors;
using Microsoft.IdentityModel.Tokens;
using System.IdentityModel.Tokens.Jwt;
using System.Security.Claims;
using System.Text;
namespace Demo.Controllers
{
[Route("api/[controller]/[Action]")]
[ApiController]
public class JWT : ControllerBase
{
private readonly IConfiguration _configuration; //注入钥匙
private readonly BloggingContext _context; //EF框架注入依赖
public JWT(BloggingContext context, IConfiguration configuration)
{
_context = context;
_configuration = configuration;
}
[HttpPost]
public IActionResult Login(string username, string pwd)
{
//var writerInfo = _context.Users.Find(username);
//使用EF与数据库交互获取用户信息
//验证密码
if (username == "1")
//writerInfo != null && writerInfo.pwd == int.Parse(pwd) 验证数据库内的密码
{
//登录成功
//header
var signingAlgorithm = SecurityAlgorithms.HmacSha256;
//payload
var claims = new Claim[] {
new Claim(JwtRegisteredClaimNames.Sub,"qq"),
new Claim("Id","1"),
new Claim("UserName","admin")
//qq 1 admin为模拟信息，实际情况通过前面的EF框架查询数据库信息后插入
};
//signiture
var secretByte = Encoding.UTF8.GetBytes(_configuration["Authentication:SecretKey"]);
var signingKey = new SymmetricSecurityKey(secretByte);
var signingCredentials = new SigningCredentials(signingKey, signingAlgorithm);
var token = new JwtSecurityToken(
issuer: "xiechengwang",//谁发布 输入网址或者localhost：这类
audience: "xiechengwang",//发布给谁 输入网址或者localhost：这类
claims: claims,
notBefore: DateTime.Now,
expires: DateTime.Now.AddDays(1),
signingCredentials //字符串签名
);
var tokenStr = new JwtSecurityTokenHandler().WriteToken(token);
return Ok(tokenStr);
}
else
{
return BadRequest();
}
}
}
}
3：服务中进行注册
builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
.AddJwtBearer(option =>
{
option.TokenValidationParameters = new TokenValidationParameters
{
ValidateIssuerSigningKey = true,
IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes("SDMC-CJAS1-SAD-DFSFA-SADHJVF-VF")),
//SDMC-CJAS1-SAD-DFSFA-SADHJVF-VF为密钥
ValidateIssuer = true,
ValidIssuer = "xiechengwang",
ValidateAudience = true,
ValidAudience = "xiechengwang",
ValidateLifetime = true,
ClockSkew = TimeSpan.FromDays(1)
};
});
4：启动鉴权授权
if (app.Environment.IsDevelopment())
{
app.UseSwagger();
app.UseSwaggerUI();
}
app.UseAuthentication();//鉴权
app.UseAuthorization();//授权
app.MapControllers();
app.Run();
5：在需要的鉴权授权的API 中调用
[Authorize]//需要
[AllowAnonymous]//不需要
[HttpGet]
public Users? GetUsers()
{
}
6：发送请求接口时候 请求头 {Authorzation："bearer"+空格 + token}