XiHan.Framework.Security.Jwt
5.0.0-preview.2
Prefix Reserved
This is a prerelease version of XiHan.Framework.Security.Jwt.
dotnet add package XiHan.Framework.Security.Jwt --version 5.0.0-preview.2
NuGet\Install-Package XiHan.Framework.Security.Jwt -Version 5.0.0-preview.2
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package.
<PackageReference Include="XiHan.Framework.Security.Jwt" Version="5.0.0-preview.2" />
For projects that support PackageReference, copy this XML node into the project file to reference the package.
<PackageVersion Include="XiHan.Framework.Security.Jwt" Version="5.0.0-preview.2" />
<PackageReference Include="XiHan.Framework.Security.Jwt" />
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package.
paket add XiHan.Framework.Security.Jwt --version 5.0.0-preview.2
The NuGet Team does not provide support for this client. Please contact its maintainers for support.
#r "nuget: XiHan.Framework.Security.Jwt, 5.0.0-preview.2"
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package.
#:package XiHan.Framework.Security.Jwt@5.0.0-preview.2
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package.
#addin nuget:?package=XiHan.Framework.Security.Jwt&version=5.0.0-preview.2&prerelease
#tool nuget:?package=XiHan.Framework.Security.Jwt&version=5.0.0-preview.2&prerelease
The NuGet Team does not provide support for this client. Please contact its maintainers for support.
XiHan.Framework.Security.Jwt
关于
XiHan.Framework.Security.Jwt 是认证的 JWT 提供程序:校验 HS256 对称密钥签名的 Bearer 令牌,把令牌映射为主体。它替换 Security.InMemory 的认证部分,授权仍由原授权提供程序承担。只校验令牌,不签发。
主要特性
- 校验签名、有效期,配置了才校验签发者与受众
- 声明按 JWT 原始类型名进入主体
- 校验失败统一返回 401,不对外暴露具体原因
- 需要非对称密钥或签发者发现时,改用
Security.OpenIdConnect(两者同一时刻只装配其一)
如何使用
安装
dotnet add package XiHan.Framework.Security.Jwt --prerelease
使用
builder.AddXiHan(x => x.UseFeature<InMemorySecurityFeature>().UseFeature<JwtSecurityFeature>());
密钥至少 32 字节,生产环境从环境变量或密钥库注入,不要提交到仓库:
{ "XiHan": { "Security": { "Jwt": { "Secret": "<至少 32 字节的密钥>", "Issuer": "https://issuer", "Audience": "api" } } } }
主要类型
此库提供的主要类型:
JwtSecurityFeature:启用 JWT 认证的特性JwtOptions:配置项,对应XiHan:Security:JwtJwtAuthenticationHandler:Bearer方案的认证处理器
更多文档
相关包
- 安全抽象:XiHan.Framework.Security.Abstractions
- OpenID Connect 认证:XiHan.Framework.Security.OpenIdConnect
- 内存实现:XiHan.Framework.Security.InMemory
反馈与贡献
XiHan.Framework.Security.Jwt 以 MIT 许可证 开源。欢迎到 GitHub 仓库 提交问题和贡献。
| Product | Versions Compatible and additional computed target framework versions. |
|---|---|
| .NET | net10.0 is compatible. net10.0-android was computed. net10.0-browser was computed. net10.0-ios was computed. net10.0-maccatalyst was computed. net10.0-macos was computed. net10.0-tvos was computed. net10.0-windows was computed. |
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.
-
net10.0
- Microsoft.Extensions.Configuration.Abstractions (>= 10.0.14)
- Microsoft.Extensions.DependencyInjection.Abstractions (>= 10.0.14)
- Microsoft.Extensions.Diagnostics.Abstractions (>= 10.0.14)
- Microsoft.Extensions.Hosting.Abstractions (>= 10.0.14)
- Microsoft.Extensions.Logging.Abstractions (>= 10.0.14)
- Microsoft.Extensions.Options (>= 10.0.14)
- Microsoft.IdentityModel.JsonWebTokens (>= 8.23.0)
- System.Threading.RateLimiting (>= 10.0.14)
- XiHan.Framework.Security.Abstractions (>= 5.0.0-preview.2)
NuGet packages
This package is not used by any NuGet packages.
GitHub repositories
This package is not used by any popular GitHub repositories.
| Version | Downloads | Last Updated |
|---|---|---|
| 5.0.0-preview.2 | 0 | 11/6/2026 |
| 5.0.0-preview.1 | 38 | 11/4/2026 |