.NET Core 2.0身份和jwt？

2 回答

• 3

  您可以验证用户名和密码并生成Jwt .

  首先，确保您的API在startup.cs中设置了以下默认标识：

  services.AddDbContext<ApplicationDbContext>(options =>
      options.UseSqlServer(
          Configuration.GetConnectionString("DefaultConnection")));
  services.AddDefaultIdentity<IdentityUser>()
      .AddEntityFrameworkStores<ApplicationDbContext>();
  

  其次，您可以使用以下内容验证登录：

  您可以设置这样的API控制器：

  [ApiController, Route("check")]
  public class TokenController : ControllerBase
  {
      private readonly SignInManager<IdentityUser> signin;
  
      public TokenController(SignInManager<IdentityUser> signin)
      {
          this.signin = signin;
      }
  
      [HttpGet]
      public async Task<string> Get(string user, string pass)
      {
          var result = await signin.PasswordSignInAsync(user, pass, true, false);
          if (result.Succeeded)
          {
              string token = "";
              return token;
          }
          return null;
      }
  }
  

  在你的get函数中，你现在可以生成你的Jwt .

  回复于 2024-04-29T16:30:49+08:00
• 1

  是的你可以 . 逻辑过程在这个方法中：

  Step 1: GetUserClaims

  var identity = await GetClaimsIdentity(credentials.UserName, credentials.Password);

  • 您将进入GetClaimsIdentity

  private async Task<ClaimsIdentity> GetClaimsIdentity(string userName, string password)
  {
      if (string.IsNullOrEmpty(userName) || string.IsNullOrEmpty(password))
          return await Task.FromResult<ClaimsIdentity>(null);
  
      var userToVerify = await _userManager.FindByNameAsync(userName);                
  
      if (userToVerify == null) {
          userToVerify = await _userManager.FindByEmailAsync(userName);
          if (userToVerify == null)  {
              return await Task.FromResult<ClaimsIdentity>(null);
          }
      }
      // check the credentials
      if (await _userManager.CheckPasswordAsync(userToVerify, password))
      {
          _claims = await _userManager.GetClaimsAsync(userToVerify);
  
          return await Task.FromResult(_jwtFactory.GenerateClaimsIdentity(userToVerify.UserName, userToVerify.Id, _claims));
      }
      // Credentials are invalid, or account doesn't exist
      return await Task.FromResult<ClaimsIdentity>(null);
  }
  

  Step 2: Group all user claims you need add to the token - Use System.Security.Claims

  public ClaimsIdentity GenerateClaimsIdentity(string userName, string id, IList<Claim> claims)
      {
          claims.Add(new Claim(Helpers.Constants.Strings.JwtClaimIdentifiers.Id, id));
  
          // If your security is role based you can get then with the RoleManager and add then here as claims
  
          // Ask here for all claims your app need to validate later 
  
          return new ClaimsIdentity(new GenericIdentity(userName, "Token"), claims);
      }
  

  Step 3: Then back on your method you have to generate and return the JWT Token

  jwt = await jwtFactory.GenerateEncodedToken(userName, identity);
  return new OkObjectResult(jwt);
  

  • 要生成令牌，请执行以下操作：

  public async Task<string> GenerateEncodedToken(string userName, ClaimsIdentity identity)
  {
      List<Claim> claims = new List<Claim>();
      //Config claims
      claims.Add(new Claim(JwtRegisteredClaimNames.Sub, userName));
      claims.Add(new Claim(JwtRegisteredClaimNames.Jti, await _jwtOptions.JtiGenerator()));
      claims.Add(new Claim(JwtRegisteredClaimNames.Iat, ToUnixEpochDate(_jwtOptions.IssuedAt).ToString(), ClaimValueTypes.Integer64));
      //End Config claims
      claims.AddRange(identity.FindAll(Helpers.Constants.Strings.JwtClaimIdentifiers.Roles));
      claims.AddRange(identity.FindAll("EspecificClaimName"));
  
  
      // Create the JWT security token and encode it.
      var jwt = new JwtSecurityToken(
          issuer: _jwtOptions.Issuer,
          audience: _jwtOptions.Audience,
          claims: claims,
          notBefore: _jwtOptions.NotBefore,
          expires: _jwtOptions.Expiration,
          signingCredentials: _jwtOptions.SigningCredentials);
  
      var encodedJwt = new JwtSecurityTokenHandler().WriteToken(jwt);
  
      return encodedJwt;
  }
  

  有很多方法可以做到这一点 . 最常见的：验证身份用户 - >获取用户标识符 - >基于标识符生成和返回令牌 - >使用 endpoints 授权

  希望这有帮助

  回复于 2024-04-29T16:30:49+08:00