/// <summary>
/// 颁发JWT字符串
/// </summary>
/// <param name="tokenModelJWT">令牌类</param>
/// <returns></returns>
public static string IssueJWT(TokenModelJWT tokenModelJWT)
{
//签发人
string iss = ConfigsHelper.GetJwtAudienceIssuer();
//接收jwt的一方
string aud = ConfigsHelper.GetJwtAudienceAud();
//密钥
string secret = ConfigsHelper.GetJwtAudienceSecret();
//jwtToken有效期
int accessTokenExpiration = ConfigsHelper.GetJwtAudienceAccessTokenExpiration();
var claims = new List <Claim>
{
new Claim(JwtRegisteredClaimNames.Jti, tokenModelJWT.Id.ToString()), //jti:为JWT提供了唯一的标识符
new Claim(JwtRegisteredClaimNames.Iat, $"{new DateTimeOffset(DateTime.Now).ToUnixTimeSeconds()}"), //jwt的签发时间
new Claim(JwtRegisteredClaimNames.Nbf, $"{new DateTimeOffset(DateTime.Now).ToUnixTimeSeconds()}"), //生效时间，定义在什么时间之前，该jwt都是不可用的
new Claim(JwtRegisteredClaimNames.Exp, $"{new DateTimeOffset(DateTime.Now.AddSeconds(accessTokenExpiration)).ToUnixTimeSeconds()}"), //jwt的过期时间，这个过期时间必须要大于签发时间
new Claim(JwtRegisteredClaimNames.Iss, iss),
new Claim(JwtRegisteredClaimNames.Aud, aud)
};
//可以将一个用户的多个角色全部赋予
claims.AddRange(tokenModelJWT.Role.Split(',').Select(x => new Claim(ClaimTypes.Role, x)));
//秘钥 (SymmetricSecurityKey 对安全性的要求，密钥的长度太短会报出异常)
var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(secret));
var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
var jwt = new JwtSecurityToken(issuer: iss, claims: claims, signingCredentials: creds);
var jwtHandler = new JwtSecurityTokenHandler();
var encodedJwt = jwtHandler.WriteToken(jwt);
return(encodedJwt);
}
/// <summary>
/// 解析
/// </summary>
/// <param name="jwtStr"></param>
/// <returns></returns>
public static TokenModelJWT SerializeJWT(string jwtStr)
{
var jwtHandler = new JwtSecurityTokenHandler();
JwtSecurityToken jwtSecurityToken = jwtHandler.ReadJwtToken(jwtStr);
object role;
try
{
jwtSecurityToken.Payload.TryGetValue(ClaimTypes.Role, out role);
}
catch (Exception)
{
throw;
}
var modelJWT = new TokenModelJWT
{
Id = jwtSecurityToken.Id.ObjToInt(),
Role = role != null?role.ObjToString() : ""
};
return(modelJWT);
}
