ASP.NET Core Web API 依赖注入及JWT认证配置

serven-star

已于 2022-04-22 22:11:04 修改

阅读量1.1k

点赞数

CC 4.0 BY-SA版权

分类专栏： asp.net core 文章标签： asp.net core

于 2022-04-22 14:20:28 首次发布

本文链接：https://blog.youkuaiyun.com/zythy/article/details/124343231

如何新建项目我们在此直接跳过。Target framework我选的是.NET6.0，但是starpup我还是沿用了老的书写方式，当然采用新的书写方式代码会更精简，都是可以的。

前端采用React开发，请参阅：React中利用axios进行Jwt登录认证

program.cs代码简单明了：

public class Program
    {
        public static void Main(string[] args)
        {
            CreateHostBuilder(args).Build().Run();
        }

        public static IHostBuilder CreateHostBuilder(string[] args) =>
            Host.CreateDefaultBuilder(args)
                .ConfigureWebHostDefaults(webBuilder =>
                {
                    webBuilder.UseStartup<Startup>()
                    .UseDefaultServiceProvider(options =>
                    {
                    }); 
                });

    }

startup.cs代码有点多：

 public class Startup
    {
        public Startup(IConfiguration configuration)
        {
            Configuration = configuration;

            var builder = new ConfigurationBuilder().AddJsonFile("appsettings.json", false, true)
                .AddEnvironmentVariables();

            Configuration = builder.Build();
        }

        public IConfiguration Configuration { get; set; }
        
        public void ConfigureServices(IServiceCollection services)
        {
            services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
                // 采用的是Jwt认证方式，必要的配置项在appsettings.json中设置
                // Jwt认证的配置项比较多，此处只做了最基本的。有需要的话可以查询相关文档
                .AddJwtBearer(options =>
                {
                    options.TokenValidationParameters = new TokenValidationParameters
                    {
                        ValidateIssuer = true,
                        ValidateAudience = true,
                        ValidateLifetime = true,
                        ClockSkew = TimeSpan.Zero,
                        ValidateIssuerSigningKey = false,
                        ValidAudience = Configuration.GetSection("JwtSettings")["Audience"],
                        ValidIssuer = Configuration.GetSection("JwtSettings")["Issuer"],
                        IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.
                                    GetBytes(Configuration.GetSection("JwtSettings")["SecretKey"])),
                    };

                    options.Events = new JwtBearerEvents()
                    {
                        OnAuthenticationFailed = (context) =>
                        {
                            var x = context.Exception;