/// <summary>
/// 颁发 token
/// </summary>
/// <param name="tokenModel"></param>
/// <returns></returns>
public string IssueJWT(TokenModelJWT tokenModel)
{
//var dataTime = DateTime.UtcNow;
var claims = new Claim[]
{
//下边为claim的默认配置
new Claim(JwtRegisteredClaimNames.Jti, tokenModel.Id.ToString()),
new Claim(JwtRegisteredClaimNames.Iat, $"{new DateTimeOffset(DateTime.Now).ToUnixTimeSeconds()}"),
new Claim(JwtRegisteredClaimNames.Nbf, $"{new DateTimeOffset(DateTime.Now).ToUnixTimeSeconds()}"),
//这个就是过期时间，目前是过期100秒，可自定义，注意JWT有自己的缓冲过期时间
//new Claim(JwtRegisteredClaimNames.Exp,$"{new DateTimeOffset(DateTime.Now.AddSeconds(100)).ToUnixTimeSeconds()}"),
new Claim(JwtRegisteredClaimNames.Exp,
$"{new DateTimeOffset(DateTime.Now.AddDays(1)).ToUnixTimeSeconds()}"),
new Claim(JwtRegisteredClaimNames.Iss, "OnePiece"),
new Claim(JwtRegisteredClaimNames.Aud, "wr"),
new Claim(ClaimTypes.Role, tokenModel.Role),
};
//密钥
var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(JwtHelper.secretKey));
var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
var jwt = new JwtSecurityToken(
issuer: "OnePiece",
claims: claims,
signingCredentials: creds);
var jwtHandler = new JwtSecurityTokenHandler();
var encodedJwt = jwtHandler.WriteToken(jwt);
return(encodedJwt);
}
/// <summary>
/// 解析字符串
/// </summary>
/// <param name="jwtStr"></param>
/// <returns></returns>
public TokenModelJWT SerizlizeJWT(string jwtStr)
{
var jwtHandler = new JwtSecurityTokenHandler();
JwtSecurityToken jwtToken = jwtHandler.ReadJwtToken(jwtStr);
object role = new object();
try
{
jwtToken.Payload.TryGetValue(ClaimTypes.Role, out role);
}
catch (Exception e)
{
Console.WriteLine(e);
throw;
}
var tm = new TokenModelJWT
{
Id = (jwtToken.Id).ObjToInt(),
Role = role != null?role.ObjToString() : ""
};
return(tm);
}
