mirror of
https://gitee.com/ccnetcore/Yi
synced 2026-06-08 19:08:19 +08:00
橙子
81 lines
2.9 KiB
Markdown
81 lines
2.9 KiB
Markdown
## 简介
|
|
> 鉴权是用于解析用户的令牌，知道用户是否携带令牌，并且知道用户信息是谁
|
|
|
|
改鉴权使用的是微软Asp.NetCore扩鉴权扩展方式
|
|
程序模块已内置
|
|
``` cs
|
|
context.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
|
|
.AddJwtBearer(options =>
|
|
{
|
|
options.TokenValidationParameters = new TokenValidationParameters
|
|
{
|
|
ClockSkew = TimeSpan.Zero,
|
|
ValidateIssuer = true,
|
|
ValidateAudience = true,
|
|
ValidateLifetime = true,
|
|
ValidateIssuerSigningKey = true,
|
|
ValidIssuer = jwtOptions.Issuer,
|
|
ValidAudience = jwtOptions.Audience,
|
|
RequireExpirationTime = true,
|
|
IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(jwtOptions.SecurityKey))
|
|
};
|
|
options.Events = new JwtBearerEvents
|
|
{
|
|
OnMessageReceived = context =>
|
|
{
|
|
var accessToken = context.Request.Query["access_token"];
|
|
if (!string.IsNullOrEmpty(accessToken))
|
|
{
|
|
context.Token = accessToken;
|
|
}
|
|
return Task.CompletedTask;
|
|
}
|
|
};
|
|
});
|
|
```
|
|
## 如何使用
|
|
默认已经集成，所以在使用方面，可要求客户端添加标准的jwtbear头即可
|
|
|
|
swagger 接口文档中，已集成，直接输入jwttoken即可
|
|
|
|
|
|
我们采用的是HSA对称加密方式，只需要具备密钥
|
|
对应的配置文件
|
|
``` json
|
|
//鉴权
|
|
"JwtOptions": {
|
|
"Issuer": "https://ccnetcore.com",
|
|
"Audience": "https://ccnetcore.com",
|
|
"SecurityKey": "zqxwcevrbtnymu312412ihe9rfwhe78rh23djoi32hrui3ryf9e8wfh34iuj54y0934uti4h97fgw7hf97wyh8yy69520",
|
|
"ExpiresMinuteTime": 86400
|
|
}
|
|
```
|
|
## Token如何来
|
|
那肯定是登录啊，登录接口会返回Token
|
|
|
|
那如何制作Token？直接上代码，下面这个也是登录的创建token的方式
|
|
|
|
``` cs
|
|
/// <summary>
|
|
/// 创建令牌
|
|
/// </summary>
|
|
/// <param name="dic"></param>
|
|
/// <returns></returns>
|
|
private string CreateToken(Dictionary<string, object> dic)
|
|
{
|
|
var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_jwtOptions.SecurityKey));
|
|
var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
|
|
var claims = dic.Select(x => new Claim(x.Key, x.Value.ToString())).ToList();
|
|
var token = new JwtSecurityToken(
|
|
issuer: _jwtOptions.Issuer,
|
|
audience: _jwtOptions.Audience,
|
|
claims: claims,
|
|
expires: DateTime.Now.AddSeconds(_jwtOptions.ExpiresMinuteTime),
|
|
notBefore: DateTime.Now,
|
|
signingCredentials: creds);
|
|
string returnToken = new JwtSecurityTokenHandler().WriteToken(token);
|
|
|
|
return returnToken;
|
|
}
|
|
```
|
