.netcore3.1添加swagger及JWT Authorize 验证

上一篇我们已经弄好了swaager ,接下赖集成一下jwt进行认证。

首先引入Microsoft.AspNetCore.Authentication.JwtBearer nuget包

在startup中加入jwt配置。这里ValidIssuer和ValidAudience和secret 最好配置一下，我这里写死了。

services.AddAuthentication(x =>
            {
                x.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
                x.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
            }).AddJwtBearer(x =>
            {
                x.RequireHttpsMetadata = false;
                x.SaveToken = true;
                x.TokenValidationParameters = new TokenValidationParameters
                {
                    ValidateIssuerSigningKey = true,
                    IssuerSigningKey = new SymmetricSecurityKey(Encoding.ASCII.GetBytes("123456111111111111111111")),//token.Secret)),
                    ValidIssuer = "webapi.cn",//token.Issuer,
                    ValidAudience = "WebApi",//token.Audience,
                    ValidateIssuer = true,
                    ValidateAudience = true
                };
            });
        }

在上一篇swagger的配置中加入jwt验证配置

services.AddSwaggerGen(s =>
            {
                s.SwaggerDoc("v1", new OpenApiInfo { Title = "My API", Version = "v1" });
                s.AddSecurityDefinition("Bearer", new OpenApiSecurityScheme()
                {
                    Description = "在下框中输入请求头中需要添加Jwt授权Token：Bearer Token",
                    Name = "Authorization",
                    In = ParameterLocation.Header,
                    Type = SecuritySchemeType.ApiKey,
                    BearerFormat = "JWT",
                    Scheme = "Bearer"
                });

                s.AddSecurityRequirement(new OpenApiSecurityRequirement
                    {
                        {
                            new OpenApiSecurityScheme{
                                Reference = new OpenApiReference {
                                            Type = ReferenceType.SecurityScheme,
                                            Id = "Bearer"}
                           },new string[] { }
                        }
                    });


            });

这样swaager的jwt授权认证就弄好了，接下来写个接口获取一下token

 [HttpGet]
        [Route("/GetToken")]
        public ActionResult<string> GetToken()
        {
            var claims = new[]
           {
                new Claim(ClaimTypes.Name,"Ers")
            };
            var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes("123456111111111111111111"));
            var credentials = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
            var jwtToken = new JwtSecurityToken("webapi.cn", "WebApi", claims, expires: DateTime.Now.AddMinutes(30), signingCredentials: credentials);

            var token = new JwtSecurityTokenHandler().WriteToken(jwtToken);

            return token;
        }