/// <summary> /// 颁发JWT字符串 /// </summary> /// <param name="tokenModel"></param> /// <returns></returns> public static string IssueJwt(JwtTokenModel tokenModel) { var claims = new List <Claim> { /* * 1、这里将用户的部分信息,比如 uid 存到了Claim 中,如果你想知道如何在其他地方将这个 uid从 Token 中取出来,请看下边的SerializeJwt()方法的调用。 * 2、你也可以研究下 HttpContext.User.Claims */ new Claim(ClaimTypes.Sid, tokenModel.Uid.ToString()), new Claim(ClaimTypes.Name, tokenModel.Name), new Claim(JwtRegisteredClaimNames.Iat, $"{new DateTimeOffset(DateTime.Now).ToUnixTimeSeconds()}"), new Claim(JwtRegisteredClaimNames.Nbf, $"{new DateTimeOffset(DateTime.Now).ToUnixTimeSeconds()}"), // 过期时间可自定义,注意JWT有自己的缓冲过期时间 new Claim(ClaimTypes.Expiration, DateTime.Now.AddSeconds(Def.JwtAuthMiddleware_Exp).ToString()), //new Claim(JwtRegisteredClaimNames.Exp,$"{new DateTimeOffset(DateTime.Now.AddSeconds(Def.JwtAuthMiddleware_Exp)).ToUnixTimeSeconds()}"), new Claim(JwtRegisteredClaimNames.Iss, Def.Issuer), new Claim(JwtRegisteredClaimNames.Aud, Def.Audience), // 为了解决一个用户多个角色(比如:Admin,System),用下边的方法 //new Claim(ClaimTypes.Role,tokenModel.Role) }; // 可以将一个用户的多个角色全部赋予 claims.AddRange(tokenModel.Role.Split('|').Select(s => new Claim(ClaimTypes.Role, s))); //秘钥 (SymmetricSecurityKey 对安全性的要求,密钥的长度太短会报出异常) var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(Def.Secret)); var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256); var jwt = new JwtSecurityToken( issuer: Def.Issuer, claims: claims, signingCredentials: creds); var jwtHandler = new JwtSecurityTokenHandler(); var encodedJwt = jwtHandler.WriteToken(jwt); return(encodedJwt); }
/// <summary> /// 解析 /// </summary> /// <param name="jwtStr"></param> /// <returns></returns> public static JwtTokenModel SerializeJwt(string jwtStr) { var jwtHandler = new JwtSecurityTokenHandler(); JwtSecurityToken jwtToken = jwtHandler.ReadJwtToken(jwtStr); object name; object role; object expiration; jwtToken.Payload.TryGetValue(ClaimTypes.Name, out name); jwtToken.Payload.TryGetValue(ClaimTypes.Role, out role); jwtToken.Payload.TryGetValue(ClaimTypes.Expiration, out expiration); var tm = new JwtTokenModel { Uid = (jwtToken.Id).ToInt(), Name = name != null?name.ToString() : string.Empty, Expiration = expiration != null?expiration.ToDate() : DateTime.MinValue, Role = role != null?role.ToString() : string.Empty }; return(tm); }