qckdev.AspNetCore.Authentication.JwtBearer 0.3.0-net10.1581

qckdev.AspNetCore.Authentication.JwtBearer

Provides tools to configure JWT bearer authentication.

    {
      "OAuth2": {
        "Code": {
          "Key": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
          "AccessExpireSeconds": 60
        },
        "Token": {
          "Key": "yyyyyyyyyyyyyyyyyyyyyyyyyyyyyy",
          "AccessExpireSeconds": 86400
        }
      }
    }

    using Microsoft.AspNetCore.Authentication;
    using Microsoft.Extensions.DependencyInjection;
    using Microsoft.IdentityModel.Tokens;
    using System.Text;

    sealed class JwtTokenConfiguration
    {
        public string Key { get; set; } = string.Empty;
        public double? AccessExpireSeconds { get; set; }
    }

    public static AuthenticationBuilder AddJwtBearer(this AuthenticationBuilder builder, string authenticationScheme, JwtTokenConfiguration configuration)
    {
        var key = new SymmetricSecurityKey(Encoding.ASCII.GetBytes(configuration.Key));

        builder.Services.AddScoped<IJwtGeneratorService, JwtGeneratorService>();
        return builder.AddJwtBearer(authenticationScheme,
            options =>
            {
                options.RequireHttpsMetadata = false;
                options.SaveToken = true;
                options.TokenValidationParameters = new TokenValidationParameters()
                {
                    ValidateIssuerSigningKey = true,
                    IssuerSigningKey = key,
                    ValidateAudience = false,
                    ValidateIssuer = false,
                    ValidateLifetime = true,
                    ClockSkew = TimeSpan.Zero
                };
            },
            moreOptions =>
            {
                moreOptions.TokenLifeTimespan = (configuration.AccessExpireSeconds.HasValue ? TimeSpan.FromSeconds(configuration.AccessExpireSeconds.Value) : (TimeSpan?)null);
            }
        );
    }
    

    using Microsoft.AspNetCore.Authentication.JwtBearer;
    using Microsoft.Extensions.Options;
    using qckdev.AspNetCore.Authentication.JwtBearer;
    using qckdev.Authentication.JwtBearer;
    using System.Security.Claims;

    sealed class JwtGeneratorService : IJwtGeneratorService
    {

        IOptionsMonitor<JwtBearerOptions> JwtOptionsMonitor { get; }
        IOptionsMonitor<JwtBearerMoreOptions> JwtMoreOptionsMonitor { get; }


        public JwtGeneratorService(IOptionsMonitor<JwtBearerOptions> jwtOptionsMonitor, IOptionsMonitor<JwtBearerMoreOptions> jwtMoreOptionsMonitor)
        {
            this.JwtOptionsMonitor = jwtOptionsMonitor;
            this.JwtMoreOptionsMonitor = jwtMoreOptionsMonitor;
        }

        public Task<JwtToken> CreateTokenAsync(string scheme, string userName, IEnumerable<string> roles, IEnumerable<Claim> claims)
        {
            var jwtOptions = JwtOptionsMonitor.Get(scheme);
            var jwtMoreOptions = JwtMoreOptionsMonitor.Get(scheme);

            return Task.FromResult(
                JwtGenerator.CreateToken(jwtOptions.TokenValidationParameters.IssuerSigningKey, userName, roles, claims, jwtMoreOptions.TokenLifeTimespan)
            );
        }

    }

    using Microsoft.AspNetCore.Authentication.JwtBearer;
    using Microsoft.AspNetCore.Authorization;
    using Microsoft.Extensions.Configuration;

    const string AUTHENTICATIONSCHEME_CODE = "Code";
    const string AUTHENTICATIONSCHEME_TOKEN = "Bearer";

    var jwtCodeConfiguration = Configuration.GetSection("OAuth2:Code").Get<JwtTokenConfiguration>();
    var jwtTokenConfiguration = Configuration.GetSection("OAuth2:Token").Get<JwtTokenConfiguration>();

    services.AddAuthentication(AUTHENTICATIONSCHEME_CODE)
        .AddJwtBearer(AUTHENTICATIONSCHEME_CODE, jwtCodeConfiguration);
    services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
        .AddJwtBearer(AUTHENTICATIONSCHEME_TOKEN, jwtTokenConfiguration);

Testing

This library includes comprehensive integration tests covering token validation, signature verification, and expiration handling.

8 integration tests validate the complete JWT Bearer authentication pipeline:

• Public endpoint access
• Challenge response (401 Unauthorized)
• Valid and expired tokens
• Token format validation
• Bearer scheme and claims handling

For detailed testing documentation, see Integration Testing Guide.

## 🤝 Contributing
Issues and pull requests are welcome! See the contribution guidelines (coming soon).

## 📜 License
This project is licensed under the terms of the [MIT License](LICENSE).