public void ConfigureServices(IServiceCollection services)
{services.AddSession(options => {options.IdleTimeout = TimeSpan.FromMinutes(60);});services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_1);//Provide a secret key to Encrypt and Decrypt the Tokenvar SecretKey = Encoding.ASCII.GetBytes("YourKey-2374-OFFKDI940NG7:56753253-tyuw-5769-0921-kfirox29zoxv");//Configure JWT Token Authenticationservices.AddAuthentication(auth =>{auth.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;auth.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;}).AddJwtBearer(token =>{token.RequireHttpsMetadata = false;token.SaveToken = true;token.TokenValidationParameters = new TokenValidationParameters{ValidateIssuerSigningKey = true,//Same Secret key will be used while creating the tokenIssuerSigningKey = new SymmetricSecurityKey(SecretKey),ValidateIssuer = true,//Usually, this is your application base URLValidIssuer = "http://localhost:45092/",ValidateAudience = true,//Here, we are creating and using JWT within the same application.//In this case, base URL is fine.//If the JWT is created using a web service, then this would be the consumer URL.ValidAudience = "http://localhost:45092/",RequireExpirationTime = true,ValidateLifetime = true,ClockSkew = TimeSpan.Zero};});
}

用户模型类

public class User
{public string USERID { get; set; }public string PASSWORD { get; set; }public string FIRST_NAME { get; set; }public string LAST_NAME { get; set; }public string EMAILID { get; set; }public string PHONE { get; set; }public string ACCESS_LEVEL { get; set; }public string READ_ONLY { get; set; }
}

创建令牌

//Using hard coded collection list as Data Store for demo purposes
//In reality, User data comes from Database or other Data Source.
private List UserList = new List
{new User { USERID = "jsmith@email.com", PASSWORD = "test", EMAILID = "jsmith@email.com", FIRST_NAME = "John", LAST_NAME = "Smith", PHONE = "356-735-2748", ACCESS_LEVEL = "Director", READ_ONLY = "true" },new User { USERID = "srob@email.com", PASSWORD = "test", FIRST_NAME = "Steve", LAST_NAME = "Rob", EMAILID = "srob@email.com", PHONE = "567-479-8537", ACCESS_LEVEL = "Supervisor", READ_ONLY = "false" },new User { USERID = "dwill@email.com", PASSWORD = "test", FIRST_NAME = "DJ", LAST_NAME = "Will", EMAILID = "dwill@email.com", PHONE = "599-306-6010", ACCESS_LEVEL = "Analyst", READ_ONLY = "false" },new User { USERID = "JBlack@email.com", PASSWORD = "test", FIRST_NAME = "Joe", LAST_NAME = "Black", EMAILID = "JBlack@email.com", PHONE = "764-460-8610", ACCESS_LEVEL = "Analyst", READ_ONLY = "true" }
};

第3步

//Using hard coded values in claims collection list as Data Store for demo.
//In reality, User data comes from Database or other Data Source.
private IEnumerable GetUserClaims(User user)
{IEnumerable claims = new Claim[]{new Claim(ClaimTypes.Name, user.FIRST_NAME + " " + user.LAST_NAME),new Claim("USERID", user.USERID),new Claim("EMAILID", user.EMAILID),new Claim("PHONE", user.PHONE),new Claim("ACCESS_LEVEL", user.ACCESS_LEVEL.ToUpper()),new Claim("READ_ONLY", user.READ_ONLY.ToUpper())};return claims;
}

第4步

public string LoginUser(string UserID, string Password)
{//Get user details for the user who is trying to loginvar user = UserList.SingleOrDefault(x => x.USERID == UserID);//Authenticate User, Check if it’s a registered user in Databaseif (user == null)return null;//If it's registered user, check user password stored in Database //For demo, password is not hashed. Simple string comparison //In real, password would be hashed and stored in DB. Before comparing, hash the passwordif (Password == user.PASSWORD){        //Authentication successful, Issue Token with user credentials//Provide the security key which was given in the JWToken configuration in Startup.csvar key = Encoding.ASCII.GetBytes("YourKey-2374-OFFKDI940NG7:56753253-tyuw-5769-0921-kfirox29zoxv"); //Generate Token for user var JWToken = new JwtSecurityToken(issuer: "http://localhost:45092/",audience: "http://localhost:45092/",claims: GetUserClaims(user),notBefore: new DateTimeOffset(DateTime.Now).DateTime,expires: new DateTimeOffset(DateTime.Now.AddDays(1)).DateTime,//Using HS256 Algorithm to encrypt TokensigningCredentials: new SigningCredentials(new SymmetricSecurityKey(key), SecurityAlgorithms.HmacSha256Signature));var token = new JwtSecurityTokenHandler().WriteToken(JWToken);return token;}else{return null;}
}

几点要考虑...

var key = Encoding.ASCII.GetBytes("YourKey-2374-OFFKDI940NG7:56753253-tyuw-5769-0921-kfirox29zoxv");

“issuer”和“audience”应与在ConfigureServices()方法的Startup.cs中配置的值相同。

using LoginDemo.Models;
using Microsoft.IdentityModel.Tokens;
using System;
using System.Collections.Generic;
using System.IdentityModel.Tokens.Jwt;
using System.Linq;
using System.Security.Claims;
using System.Text;
using System.Threading.Tasks;namespace LoginDemo
{public class TokenProvider{public string LoginUser(string UserID, string Password){//Get user details for the user who is trying to loginvar user = UserList.SingleOrDefault(x => x.USERID == UserID);//Authenticate User, Check if it’s a registered user in Database if (user == null)return null;//If it is registered user, check user password stored in Database//For demo, password is not hashed. It is just a string comparision //In reality, password would be hashed and stored in Database. //Before comparing, hash the password again.if (Password == user.PASSWORD){//Authentication successful, Issue Token with user credentials //Provide the security key which is given in //Startup.cs ConfigureServices() method var key = Encoding.ASCII.GetBytes("YourKey-2374-OFFKDI940NG7:56753253-tyuw-5769-0921-kfirox29zoxv"); //Generate Token for user var JWToken = new JwtSecurityToken( issuer: "http://localhost:45092/",audience: "http://localhost:45092/",claims: GetUserClaims(user),notBefore: new DateTimeOffset(DateTime.Now).DateTime,expires: new DateTimeOffset(DateTime.Now.AddDays(1)).DateTime,//Using HS256 Algorithm to encrypt Token  signingCredentials: new SigningCredentials(new SymmetricSecurityKey(key), SecurityAlgorithms.HmacSha256Signature));var token = new JwtSecurityTokenHandler().WriteToken(JWToken);return token;}else{return null;}}//Using hard coded collection list as Data Store for demo. //In reality, User details would come from Database.private List UserList = new List{new User { USERID = "jsmith@email.com", PASSWORD = "test", EMAILID = "jsmith@email.com", FIRST_NAME = "John", LAST_NAME = "Smith", PHONE = "356-735-2748", ACCESS_LEVEL = "Director", READ_ONLY = "true" },new User { USERID = "srob@email.com", PASSWORD = "test", FIRST_NAME = "Steve", LAST_NAME = "Rob", EMAILID = "srob@email.com", PHONE = "567-479-8537", ACCESS_LEVEL = "Supervisor", READ_ONLY = "false" },new User { USERID = "dwill@email.com", PASSWORD = "test", FIRST_NAME = "DJ", LAST_NAME = "Will", EMAILID = "dwill@email.com", PHONE = "599-306-6010", ACCESS_LEVEL = "Analyst", READ_ONLY = "false" },new User { USERID = "JBlack@email.com", PASSWORD = "test", FIRST_NAME = "Joe", LAST_NAME = "Black", EMAILID = "JBlack@email.com", PHONE = "764-460-8610", ACCESS_LEVEL = "Analyst", READ_ONLY = "true" }};//Using hard coded collection list as Data Store for demo. //In reality, User data comes from Database or other Data Source private IEnumerable GetUserClaims(User user){IEnumerable claims = new Claim[]{new Claim(ClaimTypes.Name, user.FIRST_NAME + " " + user.LAST_NAME),new Claim("USERID", user.USERID),new Claim("EMAILID", user.EMAILID),new Claim("PHONE", user.PHONE),new Claim("ACCESS_LEVEL", user.ACCESS_LEVEL.ToUpper()),new Claim("READ_ONLY", user.READ_ONLY.ToUpper())};return claims;}}
}

令牌存储

HttpContext.Session.SetString("JWToken", userToken);

中间件

app.UseSession();
//Add JWToken to all incoming HTTP Request Header
app.Use(async (context, next) =>
{var JWToken = context.Session.GetString("JWToken");if (!string.IsNullOrEmpty(JWToken)){context.Request.Headers.Add("Authorization", "Bearer " + JWToken);}await next();
});
//Add JWToken Authentication service
app.UseAuthentication();

让我们看一下代码：

var JWToken = context.Session.GetString("JWToken");

context.Request.Headers.Add("Authorization", "Bearer " + JWToken);

// This method gets called by the runtime.
// Use this method to configure the HTTP request pipeline.
public void Configure(IApplicationBuilder app, IHostingEnvironment env)
{if (env.IsDevelopment()){app.UseDeveloperExceptionPage();}else{app.UseExceptionHandler("/Home/Error");}app.UseStaticFiles();app.UseCookiePolicy();//Add User sessionapp.UseSession();//Add JWToken to all incoming HTTP Request Headerapp.Use(async (context, next) =>{var JWToken = context.Session.GetString("JWToken");if (!string.IsNullOrEmpty(JWToken)){context.Request.Headers.Add("Authorization", "Bearer " + JWToken);}await next();});//Add JWToken Authentication serviceapp.UseAuthentication();app.UseMvc(routes =>{routes.MapRoute(name: "default",template: "{controller=Home}/{action=Index}/{id?}");});
}

登录页面（Index.cshtml）

@model LoginDemo.Models.User
@{ViewData["Title"] = "Home Page";
}
<div style="padding-top:50px;"></div>
<div style="padding-top:50px;">@if (User.Identity.IsAuthenticated){<div class="row">You are Logged in as<span style="font-size:large;color:forestgreen;">@User.Identity.Name</span></div><div class="row" style="padding-top:50px;">@Html.ActionLink("Log Off", "Logoff","Home", null, new { @class = "btn btn-primary btn-lg rph-login-button" })</div>}else{<div class="row"><div class="col-lg-4 col-md-4 col-sm-4"><div>@using (Html.BeginForm("LoginUser", "Home",FormMethod.Post, new { role = "form" })){<div>@Html.AntiForgeryToken()<div><label>User ID</label><br /></div><div>@Html.TextBoxFor(m => m.USERID,new {@class = "form-control txtbox"})</div><div style="padding-top:20px;"></div><div><label>Password</label><br /></div><div>@Html.PasswordFor(m => m.USERID,new {@class = "form-control txtbox"})</div></div><div class="padding-left:35%;width:40%;"><div class="padding-top:20px;"><input class="btn btn-primarybtn-lg rph-login-button"type="submit" value="Login"/></div></div>}</div></div><div class="col-lg-8 col-md-8 col-sm-8"><div style="padding-top:50px;"><div><b>Please login with any of the below User ID,Password is span style="font-size:large;color:forestgreen;">test</span> for all Users</b></div><div style="padding-top:10px;"><ui style="list-style: none;"><li>jsmith@email.com  -  Director, Read Only - true</li><li>srob@email.com  -  Supervisor, Read Only - false</li><li>dwill@email.com  -  Analyst, Read Only - false</li><li>JBlack@email.com  -  Analyst, Read Only - true</li></ui></div></div></div></div>}
</div>

Home控制器

public IActionResult Index()
{return View();
}public IActionResult LoginUser(User user)
{TokenProvider _tokenProvider = new TokenProvider();//Authenticate uservar userToken = _tokenProvider.LoginUser(user.USERID.Trim(), user.PASSWORD.Trim());if (userToken != null){//Save token in session objectHttpContext.Session.SetString("JWToken", userToken);}return Redirect("~/Home/Index");
}

Action方法LoginUser(User user)从登录页面获取用户ID和密码值。下一行通过检查数据存储中的用户ID和密码来进行身份验证。

var userToken = _tokenProvider.LoginUser(user.USERID.Trim(), user.PASSWORD.Trim());

接下来的几行通过TokenProvider()检查是否存在发行的令牌。如果是，则将令牌保存在用户Session变量“JWToken”中。

if (userToken != null)
{//Save token in session objectHttpContext.Session.SetString("JWToken", userToken);
}

然后，将页面重定向到Index.cshtml：

return Redirect("~/Home/Index");

在页面重定向期间，我们已经将令牌存储在session对象中。现在，页面重定向通过Startup.cs中的HTTP管道进行。现在，自定义中间件将停止HTTP Request，并将令牌插入HTTP Request标头“Authorization”。请参阅“中间件”以获取更多详细信息（上面章节）。

public IActionResult Logoff()
{HttpContext.Session.Clear();return Redirect("~/Home/Index");
}

控制器代码

using System;
using System.Collections.Generic;
using System.Diagnostics;
using System.Linq;
using System.Threading.Tasks;
using Microsoft.AspNetCore.Mvc;
using LoginDemo.Models;
using System.Security.Claims;
using Microsoft.AspNetCore.Http;namespace LoginDemo.Controllers
{public class HomeController : Controller{public IActionResult Index(){return View();}public IActionResult LoginUser(User user){TokenProvider _tokenProvider = new TokenProvider();var userToken = _tokenProvider.LoginUser(user.USERID.Trim(),user.PASSWORD.Trim());if (userToken != null){//Save token in session objectHttpContext.Session.SetString("JWToken", userToken);}return Redirect("~/Home/Index");}public IActionResult Logoff(){HttpContext.Session.Clear();return Redirect("~/Home/Index");}}
}