您的应用程序可以提供此功能，例如使用正确的凭据登录。 （前端 -> 登录正确 -> 后端发回 JWT 令牌。）
然后，您可以将后端提供给您的令牌存储在 cookie/localstorage 中。
每次您将请求发送回 API 时，只需从 cookie/localstorage 中检索您的令牌并将其添加到请求标头中。
我将向您展示如何添加将处理令牌生成和验证的中间件的示例。
appsettings.conf
{
"Secret": {
"Key": "abcdefghijklmnop123456789"
}
}
密钥用于生成唯一的 JWT 令牌，应单独存储在机器上，这仅用于示例目的
TokenProviderOptions.cs
public class TokenProviderOptions
{
public string Path { get; set; } = "/token";
public string Issuer { get; set; }
public string Audience { get; set; }
public TimeSpan Expiration { get; set; } = TimeSpan.FromHours(1);
public SigningCredentials SigningCredentials { get; set; }
}
一个类，它将为我们提供令牌生成的基本信息。
“路径”可以更改为您要检索令牌的任何路径。
TokenProviderMiddleware.cs
public class TokenProviderMiddleware
{
private readonly RequestDelegate _next;
private readonly TokenProviderOptions _options;
private readonly IAccountService _accountService;
public TokenProviderMiddleware(RequestDelegate next, IOptions<TokenProviderOptions> options, IAccountService accounteService)
{
_next = next;
_options = options.Value;
_accountService = accounteService;
}
public Task Invoke(HttpContext context)
{
//Check path request
if (!context.Request.Path.Equals(_options.Path, StringComparison.Ordinal)) return _next(context);
//METHOD: POST && Content-Type : x-www-form-urlencode
if (context.Request.Method.Equals("POST") && context.Request.HasFormContentType)
return GenerateToken(context);
context.Response.StatusCode = 400;
return context.Response.WriteAsync("Bad Request");
}
private async Task GenerateToken(HttpContext context)
{
var username = context.Request.Form["username"];
var password = context.Request.Form["password"];
var identity = await GetIdentity(username, password);
if (identity == null)
{
context.Response.StatusCode = 400;
await context.Response.WriteAsync("Invalid username or password");
return;
}
var now = DateTime.UtcNow;
var claims = new Claim[]
{
new Claim(JwtRegisteredClaimNames.Sub, username),
new Claim(JwtRegisteredClaimNames.Jti, Guid.NewGuid().ToString()),
new Claim(JwtRegisteredClaimNames.Iat, now.Second.ToString(), ClaimValueTypes.Integer64)
};
var jwt = new JwtSecurityToken(
issuer: _options.Issuer,
audience: _options.Audience,
claims: claims,
notBefore: now,
expires: now.Add(_options.Expiration),
signingCredentials: _options.SigningCredentials);
var encodedJwt = new JwtSecurityTokenHandler().WriteToken(jwt);
var response = new
{
access_token = encodedJwt,
expires_in = (int)_options.Expiration.TotalSeconds,
username = username
};
context.Response.ContentType = "application/json";
await context.Response.WriteAsync(JsonConvert.SerializeObject(response,
new JsonSerializerSettings { Formatting = Formatting.Indented }));
}
private Task<ClaimsIdentity> GetIdentity(string username, string password)
{
//THIS STEP COULD BE DIFFERENT, I HAVE AN ACCOUNTSERVICE THAT QUERIES MY DB TO CHECK THE USER CREDENTIALS
var auth = _accountService.Login(username, password).Result;
return auth
? Task.FromResult(new ClaimsIdentity(new GenericIdentity(username, "Token"), new Claim[] { }))
: Task.FromResult<ClaimsIdentity>(null);
}
}
这是中间件部分。您必须向您在TokenProviderOptions 中定义的Path 发送一个标头类型为application/x-www-form-urlencoded 和2 个字段username 和password 的POST 请求。
如果检查通过，您将获得一个 jwt 令牌。
最后是 Startup.cs
public class Startup
{
public Startup(IConfiguration configuration)
{
Configuration = configuration;
}
public IConfiguration Configuration { get; set; }
public void ConfigureServices(IServiceCollection services)
{
//Mvc
services.AddMvc();
//...
//Authentication
services.AddAuthentication()
.AddJwtBearer(jwt =>
{
var signingKey =
new SymmetricSecurityKey(Encoding.ASCII.GetBytes(Configuration.GetSection("Secret:Key").Value));
jwt.TokenValidationParameters = new TokenValidationParameters
{
ValidateIssuerSigningKey = true,
IssuerSigningKey = signingKey,
ValidateIssuer = true,
ValidIssuer = "2CIssuer",
ValidateAudience = true,
ValidAudience = "2CAudience",
ValidateLifetime = true,
ClockSkew = TimeSpan.Zero
};
});
//Authorization
services.AddAuthorization(auth =>
{
auth.AddPolicy("Bearer", new AuthorizationPolicyBuilder(JwtBearerDefaults.AuthenticationScheme).RequireAuthenticatedUser().Build());
});
}
public void Configure(IApplicationBuilder app)
{
//...
//Authentication
var signingKey =
new SymmetricSecurityKey(Encoding.ASCII.GetBytes(Configuration.GetSection("Secret:Key").Value));
var options = new TokenProviderOptions
{
Audience = "2CAudience",
Issuer = "2CIssuer",
SigningCredentials = new SigningCredentials(signingKey, SecurityAlgorithms.HmacSha256)
};
app.UseAuthentication();
//JWT
app.UseMiddleware<TokenProviderMiddleware>(Options.Create(options));
//Mvc
app.UseMvc();
}
}
我省略了冗余代码。这会添加您的自定义中间件并配置应用以使用 JWT 令牌。
您所要做的就是更改提到的自定义参数，使用 'token': tokenValue 签署您的请求，然后就可以了！
我在这里有一个可用的后端模板：https://github.com/BusschaertTanguy/dotnet_core_backend_template
仔细检查一切。
希望对您有所帮助！