.NET CORE JWT

nuget添加包：Microsoft.AspNetCore.Authentication.JwtBearer
Startup.cs

ConfigureServices
	services.Configure<TokenManagement>(Configuration.GetSection("tokenManagement"));
	      var token = Configuration.GetSection("tokenManagement").Get<TokenManagement>();
	      services.AddAuthentication(x =>
	      {
	          x.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
	          x.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
	      }).AddJwtBearer(x =>
	      {
	          x.RequireHttpsMetadata = false;
	          x.SaveToken = true;
	          x.TokenValidationParameters = new TokenValidationParameters
	          {
	              ValidateIssuerSigningKey = true,
	              IssuerSigningKey = new SymmetricSecurityKey(Encoding.ASCII.GetBytes(token.Secret)),
	              ValidIssuer = token.Issuer,
	              ValidAudience = token.Audience,
	              ValidateIssuer = false,
	              ValidateAudience = false
	          };
	      });
Configure
		
        app.UseStaticFiles();

        app.UseAuthentication();    //添加的权限  上下都放在这是为了确定语句的位置

        app.UseRouting();

        app.UseAuthorization();

appsettings.json

	  "tokenManagement": {
	    "secret": "123456123456123456",
	    "issuer": "webapi.cn",
	    "audience": "WebApi",
	    "accessExpiration": 30,
	    "refreshExpiration": 60
  }

Model

	 public class TokenManagement
	    {
	        [JsonProperty("secret")]
	        public string Secret { get; set; }
	
	        [JsonProperty("issuer")]
	        public string Issuer { get; set; }
	
	        [JsonProperty("audience")]
	        public string Audience { get; set; }
	
	        [JsonProperty("accessExpiration")]
	        public int AccessExpiration { get; set; }
	
	        [JsonProperty("refreshExpiration")]
	        public int RefreshExpiration { get; set; }
    }

获取token

	  string token = string.Empty;
	            var claims = new[]
	            {
	                new Claim(ClaimTypes.Name,userName),
	                new Claim("haha","sb")   //随意添加
	            };
	            var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_tokenManagement.Secret));
	            var credentials = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
	            var jwtToken = new JwtSecurityToken(_tokenManagement.Issuer, _tokenManagement.Audience, claims, expires: DateTime.Now.AddMinutes(_tokenManagement.AccessExpiration), signingCredentials: credentials);
	
	            token = new JwtSecurityTokenHandler().WriteToken(jwtToken);

得到token中字段

	User.FindFirst("haha").Value;
	User.Identity.Name;

前端ajax

	 beforeSend: function (xhr) {
                        if (token !== null) {
                            xhr.setRequestHeader('Authorization', 'Bearer ' + token);
                        }
                    },

只能这样的header头格式 才能直接使用User对象来获取信息