public static void AddFluffySpoonJwt <TIdentityResolver>(
this IServiceCollection services,
IJwtSettings jwtSettings) where TIdentityResolver : class, IIdentityResolver
{
services.AddScoped <IIdentityResolver, TIdentityResolver>();
services.AddScoped <IJwtTokenGenerator, JwtTokenGenerator>();
services.AddSingleton(jwtSettings);
var tokenValidationParameters = new TokenValidationParameters
{
ValidateIssuerSigningKey = true,
IssuerSigningKey = SigningKeyHelper.GenerateKeyFromSecret(jwtSettings.SecretKey),
ValidateIssuer = true,
ValidIssuer = jwtSettings.Issuer,
ValidateAudience = true,
ValidAudience = jwtSettings.Audience,
ValidateLifetime = true,
ClockSkew = TimeSpan.Zero
};
services
.AddAuthentication(options => {
options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
options.DefaultSignInScheme = JwtBearerDefaults.AuthenticationScheme;
})
.AddJwtBearer(options => {
options.SaveToken = false;
options.TokenValidationParameters = tokenValidationParameters;
options.Events = new JwtBearerEvents()
{
OnMessageReceived = (context) =>
{
if (context.HttpContext.Items.ContainsKey(Constants.MiddlewareTokenPassingKey))
{
context.Token = (string)context.HttpContext.Items[Constants.MiddlewareTokenPassingKey];
}
if (context.Request.Query.ContainsKey("access_token"))
{
var path = context.HttpContext.Request.Path;
if (!string.IsNullOrEmpty(context.Request.Query["access_token"]))
{
context.Token = context.Request.Query["access_token"];
}
}
return(Task.CompletedTask);
}
};
});
}
private JwtSecurityToken GenerateJwtToken(DateTime now, IEnumerable <Claim> claims)
{
var issuerSigningKey = SigningKeyHelper.GenerateKeyFromSecret(_settings.SecretKey);
var signingCredentials = new SigningCredentials(
issuerSigningKey,
SecurityAlgorithms.HmacSha256);
var jwt = new JwtSecurityToken(
issuer: _settings.Issuer,
audience: _settings.Audience,
claims: claims,
notBefore: now,
expires: now.Add(_settings.Expiration),
signingCredentials: signingCredentials);
return(jwt);
}