public AccessToken CreateToken(User user, List <OperationClaim> operationClaims)
{
var securityKey = SecurityKeyHelper.CreateSecurtyKey(_tokenOptions.SecurityKey);
var signingCredentials = SigningCredentialsHelper.CrateSigningCredential(securityKey);
var jwt = CreateJwtSecurityToken(_tokenOptions, user, signingCredentials, operationClaims);
var jwtSecurityTokenHandler = new JwtSecurityTokenHandler();
var token = jwtSecurityTokenHandler.WriteToken(jwt);
return(new AccessToken
{
Token = token,
Expiration = _accessTokenExpiration
});
}
// This method gets called by the runtime. Use this method to add services to the container.
public void ConfigureServices(IServiceCollection services)
{
services.AddControllers();
services.AddCors(options =>
{
options.AddPolicy("AllowOrigin", builder => builder.WithOrigins("http://localhost:3000"));
});
var tokenOptions = Configuration.GetSection("TokenOptions").Get <TokenOptions>();
services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme).AddJwtBearer(options =>
{
options.TokenValidationParameters = new Microsoft.IdentityModel.Tokens.TokenValidationParameters()
{
ValidateIssuer = true,
ValidateAudience = true,
ValidateLifetime = true,
ValidIssuer = tokenOptions.Issuer,
ValidAudience = tokenOptions.Audience,
ValidateIssuerSigningKey = true,
IssuerSigningKey = SecurityKeyHelper.CreateSecurtyKey(tokenOptions.SecurityKey)
};
});
}
