WebApi中添加Jwt鑒權

前言

JSON Web Token（JWT）是一個非常輕巧的規範。這個規範允許我們使用 JWT 在用戶和伺服器之間傳遞安全可靠的信息。一個 JWT 實際上就是一個字元串，它由三部分組成，頭部、載荷與簽名。前兩部分需要經過 Base64 編碼，後一部分通過前兩部分 Base64 編碼後再加密而成。針對前後端分離的項目，大多是通過 token 進行身份認證來進行交互，今天將介紹一種簡單的創建 和驗證token 的方式 。

項目介紹

項目框架：.NET Core 3.1

項目依賴：

• Swashbuckle.AspNetCore

• JWT

項目架構：

項目核心代碼

JWT幫助類

  /// <summary>
    /// JWT獲取和驗證幫助類
    /// </summary>
    public class JwtHelper
    {
        /// <summary>
        /// 日誌
        /// </summary>
       private static Logger  _logger = new Logger();

        /// <summary>
        /// 私鑰appsettings.json中配置
        /// </summary>
        private static string secret =  ConfigHelper.GetSectionValue("TokenSecret");

        /// <summary>
        /// 生成JwtToken
        /// </summary>
        /// <param name="payload">不敏感的用戶數據</param>
        /// <returns></returns>
        public static string SetJwtEncode(Dictionary<string, object> payload)
        {
            try
            {
                IJwtAlgorithm algorithm = new HMACSHA256Algorithm();
                IJsonSerializer serializer = new JsonNetSerializer();
                IBase64UrlEncoder urlEncoder = new JwtBase64UrlEncoder();
                IJwtEncoder encoder = new JwtEncoder(algorithm, serializer, urlEncoder);

                var token = encoder.Encode(payload, secret);
                return token;
            }
            catch (System.Exception ex)
            {
                _logger.Error(ex.Message);
                return null;
            }

        }

        /// <summary>
        /// 根據jwtToken獲取實體
        /// </summary>
        /// <param name="token">jwtToken</param>
        /// <returns></returns>
        public static LoginUserInfo GetJwtDecode(string token)
        {
            try
            {
                IJsonSerializer serializer = new JsonNetSerializer();
                IDateTimeProvider provider = new UtcDateTimeProvider();
                IJwtValidator validator = new JwtValidator(serializer, provider);
                IBase64UrlEncoder urlEncoder = new JwtBase64UrlEncoder();
                IJwtDecoder decoder = new JwtDecoder(serializer, urlEncoder);
                //IJwtDecoder decoder = new JwtDecoder(serializer, validator, urlEncoder);
                var userInfo = decoder.DecodeToObject<LoginUserInfo>(token, secret, verify: true);//token為之前生成的字元串
                return userInfo;
            }
            catch (System.Exception ex)
            {
                _logger.Error(ex.Message);
                return null;
            }

        }

    }

過濾器Filter

 /// <summary>
    /// 授權認證
    /// </summary>
    public class AuthorizeFilter : Attribute, IActionFilter
    {

        public void OnActionExecuted(ActionExecutedContext context)
        {

        }

        public void OnActionExecuting(ActionExecutingContext context)
        {
            var controller = context.RouteData.Values["controller"].ToString();
            //var action = context.RouteData.Values["action"].ToString();
            if (controller == "User" || controller == "Jwt")
            {
                //登錄介面不驗證
            }
            else
            {
                var authHeader = context.HttpContext.Request.Headers["Authorization"];
                if (string.IsNullOrWhiteSpace(authHeader))
                {
                    //此介面必須攜帶token訪問！
                    context.Result = new JsonResult(new OperationResult(OperationResultType.Error, "此介面必須攜帶token訪問，請登錄攜帶Token訪問"));
                }
                else //欄位值不為空
                {
                    authHeader = authHeader.ToString().Replace("Bearer", "").Trim();//去掉Bearer字串
                    if (authHeader == "")
                    {
                        context.Result = new JsonResult(new OperationResult(OperationResultType.Error, "token驗證失敗：您沒有許可權調用此介面，請登錄重新獲取Token"));
                    }
                    else
                    {
                        LoginUserInfo LoginInfo = JwtHelper.GetJwtDecode(authHeader);
                        if (LoginInfo != null)
                        {
                            context.Result = new JsonResult(new OperationResult(OperationResultType.Error, "Token驗證失敗"));
                        }
                        string UserName = LoginInfo.username;
                        string PassWord = LoginInfo.pwd;
                        string ExpireTimeStamp = LoginInfo.exp;
                        //var cacheToken = Cache.Get(UserName);
                        if (isTokenExpire(ExpireTimeStamp)) //這裡應該驗證有效期
                        {
                            context.Result = new JsonResult(new OperationResult(OperationResultType.Error, "token驗證失敗：您沒有許可權調用此介面，請登錄重新獲取Token"));
                        }
                    }

                }
            }
        }

        /// <summary>
        /// 時間戳字元串
        /// </summary>
        /// <param name="timestampstr"></param>
        /// <returns></returns>
        private bool isTokenExpire(string timestampstr)
        {
            try
            {
                double timestamp = double.Parse(timestampstr);
                System.DateTime startTime = TimeZone.CurrentTimeZone.ToLocalTime(new System.DateTime(1970, 1, 1));//當地時區
                var expireTime = startTime.AddSeconds(timestamp);
                if (expireTime > DateTime.Now)
                {
                    return false;//未過期
                }
                else
                {
                    return true;//已過期
                }
            }
            catch (Exception ex)
            {
                return true;
            }
        }

    }

測試驗證

Swagger頁面

登錄獲取Token

未攜帶token訪問介面

源碼獲取

關註公眾號，後臺回覆關鍵字：JwtApiDemo

本文來自博客園，作者：碼農阿亮，轉載請註明原文鏈接：https://www.cnblogs.com/wml-it/p/17728594.html