Cola.ColaJwt 1.0.3

ColaJwt

author: odinsam

{
  "ColaJwt": {
    "Secret": "123456123456123456123456",
    "IsUser": "odinsam.com",
    "Audience": "odinsam",
    "AccessExpiration": 30,
    "RefreshExpiration": 30
  }
}

// 默认使用自定义的 ApiResponseForAuthenticationHandler scheme 重写了 Authenticate、Challenge、Forbid
builder.Services.AddColaJwt(config);
// or
builder.Services.AddColaJwt<ApiResponseForAuthenticationHandler>(config);


app.UseRouting();
// 注意位置和顺序
app.UseAuthentication();
app.UseAuthorization();

// create token
[HttpGet("GetToken")]
public ApiResult  GetToken()
{
    var jwtConfig = _configuration.GetSection("ColaJwt");
    var tokenResult = TokenHelper.CreateToken(
        "odinsam",
        jwtConfig.GetValue<string>("Secret"),
        new ClaimsIdentity(new[]
        {
            new Claim(JwtRegisteredClaimNames.Jti, Guid.NewGuid().ToString("N")),
            new Claim(JwtRegisteredClaimNames.Sub, "odinsam")
        }),
        jwtConfig.GetValue<int>("AccessExpiration"),
        jwtConfig.GetValue<int>("RefreshExpiration"));
    dicToken.TryAdd(tokenResult.Refresh.Token, tokenResult.Refresh);
    return new ApiResult
    {
        Code = 0,
        Data = tokenResult
    };
}

//validation token
[Authorize]
    [HttpGet("GetWeatherForecast")]
    public IEnumerable<WeatherForecast> Get()
    {
        return Enumerable.Range(1, 5).Select(index => new WeatherForecast
            {
                Date = DateTime.Now.AddDays(index),
                TemperatureC = Random.Shared.Next(-20, 55),
                Summary = Summaries[Random.Shared.Next(Summaries.Length)]
            })
            .ToArray();
    }

//验证token
[HttpGet("ValidateToken")]
public ApiResult ValidateToken(string token,string refreshToken)
{
    try
    {
        var jwtConfig = _configuration.GetSection("ColaJwt");
        var secretKey = jwtConfig.GetValue<string>("Secret");
        dicToken.TryGetValue(refreshToken,out var storedRefreshToken);
        var validateResult = TokenHelper.ValidateToken(secretKey, token, storedRefreshToken);
        storedRefreshToken.Used = validateResult;
        return new ApiResult()
        {
            Message = "validate success, refreshToken is used"
        };
    }
    catch
    {
        return null;
    }
}