.netcore3.1添加swagger及JWT Authorize 验证

首先引入Microsoft.AspNetCore.Authentication.JwtBearer nuget包

在startup中加入jwt配置。这里ValidIssuer和ValidAudience和secret 最好配置一下，我这里写死了。

public static void AddSwagger(this IServiceCollection services)
       {
 
           services.AddSwaggerGen(c =>
           {
               c.SwaggerDoc("v1", new OpenApiInfo
               {
                   Title = "Cabinet.Core.API 接口文档——Netcore 3.1",
                   Version = "v1",
                   Description = "Cabinet.Core.API HTTP API V1",
 
               });
               #region Jwt
               //开启权限小锁
               c.OperationFilter<AddResponseHeadersFilter>();
               c.OperationFilter<AppendAuthorizeToSummaryOperationFilter>();
 
               //在header中添加token，传递到后台
               //Swagger响应头#
               //这里需要Nuget引用Swashbuckle.AspNetCore.Filters，oauth2需要写死，SecurityRequirementsOperationFilter中默认securitySchemaName = "oauth2";
               //未添加该配置时，Bearer一直无法加入到JWT发起的Http请求的头部，无论怎么请求都会是401；
               c.OperationFilter<SecurityRequirementsOperationFilter>();
               c.AddSecurityDefinition("oauth2", new OpenApiSecurityScheme
               {
                   Description = "JWT授权(数据将在请求头中进行传递)直接在下面框中输入Bearer {token}(注意两者之间是一个空格) \"",
                   Name = "Authorization",//jwt默认的参数名称
                   In = ParameterLocation.Header,//jwt默认存放Authorization信息的位置(请求头中)
                   Type = SecuritySchemeType.ApiKey
               });
 
 
               #endregion
               //xml注释
               var basePath = PlatformServices.Default.Application.ApplicationBasePath;
               var xmlPath = Path.Combine(basePath, "Cabinet.Core.API.xml");
               c.IncludeXmlComments(xmlPath, true);
           });
 
           #region 添加验证服务
 
           // 添加验证服务
           services.AddAuthentication(x =>
           {
               x.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
               x.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
           }).AddJwtBearer(o =>
           {
               o.TokenValidationParameters = new TokenValidationParameters
               {
                   // 是否开启签名认证
                   ValidateIssuerSigningKey = true,
                   IssuerSigningKey = new SymmetricSecurityKey(Encoding.ASCII.GetBytes("111111111111111111111111111111111111111111111111111")),
                   // 发行人验证，这里要和token类中Claim类型的发行人保持一致
                   ValidateIssuer = true,
                   ValidIssuer = "API",//发行人
                   // 接收人验证
                   ValidateAudience = true,
                   ValidAudience = "User",//订阅人
                   ValidateLifetime = true,
                   ClockSkew = TimeSpan.Zero,
               };
           });
           #endregion
 
       }

再来一个获取Token的接口

[AllowAnonymous]
       [HttpGet,Route("/GetToken")]
       public ActionResult<string> GetToken()
       {
           //DateTime utc = DateTime.UtcNow;
           var claims = new List<Claim>
           {
               new Claim(JwtRegisteredClaimNames.Jti,"1"),//编号
               new Claim(JwtRegisteredClaimNames.Iat, $"{new DateTimeOffset(DateTime.Now).ToUnixTimeSeconds()}"),//签发时间
               new Claim(JwtRegisteredClaimNames.Nbf,$"{new DateTimeOffset(DateTime.Now).ToUnixTimeSeconds()}"),//生效时间
                // 过期时间 100秒
               new Claim(JwtRegisteredClaimNames.Exp,$"{new DateTimeOffset(DateTime.Now.AddSeconds(100)).ToUnixTimeSeconds()}"),
               new Claim(JwtRegisteredClaimNames.Iss,"API"), // 签发者
               new Claim(JwtRegisteredClaimNames.Aud,"User") // 接收者
           };
 
 
           // 密钥
           var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes("111111111111111111111111111111111111111111111111111"));
           var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
 
           var tokenHandler = new JwtSecurityTokenHandler();
 
           JwtSecurityToken jwt = new JwtSecurityToken(
 
               claims: claims,// 声明的集合
                              //expires: .AddSeconds(36), // token的有效时间
               signingCredentials: creds
               );
           var handler = new JwtSecurityTokenHandler();
           // 生成 jwt字符串
           var strJWT = handler.WriteToken(jwt);
           return Ok(strJWT);
       }