Programmiererforum

1, System.Span

using Microsoft.IdentityModel.Tokens;
using System.IdentityModel.Tokens.Jwt;
using System.Security.Claims;
using System.Text;
using Vestis.Configurations;

namespace Vestis.Services;

public class JwtService
{
private readonly JwtSettings _jwtSettings;

public JwtService(JwtSettings jwtSettings)
{
_jwtSettings = jwtSettings;
}

public string GenerateToken(string userId, string userEmail)
{
var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_jwtSettings.SecretKey));
var credentials = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);

var claims = new List
{
new Claim(JwtRegisteredClaimNames.Sub, userId),
new Claim(JwtRegisteredClaimNames.Email, userEmail),
new Claim(JwtRegisteredClaimNames.Jti, Guid.NewGuid().ToString())
};

var token = new JwtSecurityToken(
issuer: _jwtSettings.Issuer,
audience: _jwtSettings.Audience,
claims: claims,
expires: DateTime.UtcNow.AddMinutes(_jwtSettings.ExpirationInMinutes),
signingCredentials: credentials
);

var tokenString = new JwtSecurityTokenHandler().WriteToken(token);

// For debugging purposes
Console.WriteLine($"Generated JWT Token:\n{tokenString}");

return tokenString;
}
}
< /code>
Und dies ist mein Programm-Setup für JWT: < /p>
void ConfigureJWT()
{
var jwtSettings = new JwtSettings();
builder.Configuration.GetSection("JwtSettings").Bind(jwtSettings);
builder.Services.AddSingleton(jwtSettings);

var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(jwtSettings.SecretKey));

builder.Services.AddAuthentication(options =>
{
options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
}).AddJwtBearer(options =>
{
options.TokenValidationParameters = new TokenValidationParameters
{
ValidateIssuer = true,
ValidateAudience = true,
ValidateLifetime = true,
ValidateIssuerSigningKey = true,
ValidIssuer = jwtSettings.Issuer,
ValidAudience = jwtSettings.Audience,
IssuerSigningKey = key
};
options.Events = new JwtBearerEvents
{
OnAuthenticationFailed = context =>
{
Console.WriteLine("[Authentication failed]\n" + PrintExceptionStack(context.Exception,out _));
return Task.CompletedTask;
},
OnTokenValidated = context =>
{
Console.WriteLine("[Token validated]\n" + context.SecurityToken);
return Task.CompletedTask;
}
};
});
builder.Services.AddAuthorization();
}

all
runtime; build; native; contentfiles; analyzers; buildtransitive

Ich entwickle den JWT -Autorisierungsteil meiner API und stieß in ein Problem, bei dem der Header nach dem Ausnahmestapel nicht dekodiert werden kann. Microsoft.IdentityModel.tokens.Base64urlencoder.decode (System.ReadOnlySpan[code]1, System.Span[/code] 1) '. Weitere Informationen finden Sie unter https://aka.ms/identitymodel/pii.] 'AS BASE64URL Coded String. Ich habe meine Anfrage getestet und erneut getestet. Token: < /p>
[code]using Microsoft.IdentityModel.Tokens;
using System.IdentityModel.Tokens.Jwt;
using System.Security.Claims;
using System.Text;
using Vestis.Configurations;

namespace Vestis.Services;

public class JwtService
{
private readonly JwtSettings _jwtSettings;

public JwtService(JwtSettings jwtSettings)
{
_jwtSettings = jwtSettings;
}

public string GenerateToken(string userId, string userEmail)
{
var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_jwtSettings.SecretKey));
var credentials = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);

var claims = new List
{
new Claim(JwtRegisteredClaimNames.Sub, userId),
new Claim(JwtRegisteredClaimNames.Email, userEmail),
new Claim(JwtRegisteredClaimNames.Jti, Guid.NewGuid().ToString())
};

var token = new JwtSecurityToken(
issuer: _jwtSettings.Issuer,
audience: _jwtSettings.Audience,
claims: claims,
expires: DateTime.UtcNow.AddMinutes(_jwtSettings.ExpirationInMinutes),
signingCredentials: credentials
);

var tokenString = new JwtSecurityTokenHandler().WriteToken(token);

// For debugging purposes
Console.WriteLine($"Generated JWT Token:\n{tokenString}");

return tokenString;
}
}
< /code>
Und dies ist mein Programm-Setup für JWT: < /p>
void ConfigureJWT()
{
var jwtSettings = new JwtSettings();
builder.Configuration.GetSection("JwtSettings").Bind(jwtSettings);
builder.Services.AddSingleton(jwtSettings);

var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(jwtSettings.SecretKey));

builder.Services.AddAuthentication(options =>
{
options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
}).AddJwtBearer(options =>
{
options.TokenValidationParameters = new TokenValidationParameters
{
ValidateIssuer = true,
ValidateAudience = true,
ValidateLifetime = true,
ValidateIssuerSigningKey = true,
ValidIssuer = jwtSettings.Issuer,
ValidAudience = jwtSettings.Audience,
IssuerSigningKey = key
};
options.Events = new JwtBearerEvents
{
OnAuthenticationFailed = context =>
{
Console.WriteLine("[Authentication failed]\n" + PrintExceptionStack(context.Exception,out _));
return Task.CompletedTask;
},
OnTokenValidated = context =>
{
Console.WriteLine("[Token validated]\n" + context.SecurityToken);
return Task.CompletedTask;
}
};
});
builder.Services.AddAuthorization();
}
[/code]
Als Referenz sind dies die aktuellen Paketversionen, die ich verwende (ich kann sehen, dass Microsoft.IdentityModel.Tokens 1 Major -Version dahinter ist, es ist jedoch die neueste Version). Alle Pakete befinden sich in den neuesten Versionen: < /p>
[code]






all
runtime; build; native; contentfiles; analyzers; buildtransitive




[/code]