一 Cookie认证
1 services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme).AddCookie();
2 app.UseAuthentication();
3 Microsoft.AspNetCore.Authorization.AuthorizeAttribute
4
var claims = new List<Claim>()
{
new Claim (ClaimTypes.Role,"admin"),
new Claim (ClaimTypes.Name,account),
};
var identity = new ClaimsIdentity(claims, CookieAuthenticationDefaults.AuthenticationScheme);
this.HttpContext.SignInAsync(new ClaimsPrincipal(identity));
二 Jwt认证
1
services.AddAuthentication(option =>
{
option.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
option.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
}).AddJwtBearer(o =>
{
o.TokenValidationParameters = new Microsoft.IdentityModel.Tokens.TokenValidationParameters
{
ValidIssuer = settings.Issurer,
ValidAudience = settings.Audience,
IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(settings.SecretKey)),
};
});
2 app.UseAuthentication();
3 Microsoft.AspNetCore.Authorization.AuthorizeAttribute
4
var claims = new List<Claim>
{
new Claim(ClaimTypes.Name,"yan"),
new Claim (ClaimTypes.Role,"admin"),
};
var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes("SecretKey"));
var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
var token = new JwtSecurityToken("Issurer", "Audience", claims, DateTime.Now, DateTime.Now.AddMinutes(30), creds);
return Ok(new
{
token = new JwtSecurityTokenHandler().WriteToken(token),
});
}
5 header中添加 Authorization : bearer 获得的token
