BuYuHouDuan/Infrastructure/JWTHelper/JWTExtension.cs

using System;
using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.AspNetCore.Http;
using Microsoft.Extensions.Configuration;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.IdentityModel.Tokens;
using Newtonsoft.Json;
using System.IdentityModel.Tokens.Jwt;
using System.Linq;
using System.Text;
using System.Threading.Tasks;


namespace JWTHelper
{
    public static class JWTExtension
    {
        public static IServiceCollection AddCustomJwt(this IServiceCollection services,
            IConfiguration configuration)
        {

            services.AddScoped<JwtTools>();
            services.Configure<JWTConfig>(options => { configuration.Bind("JwtConfig", options); });
            JwtSecurityTokenHandler.DefaultInboundClaimTypeMap.Clear();
            services.AddAuthentication(options =>
            {
                options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
                options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
                options.DefaultScheme = JwtBearerDefaults.AuthenticationScheme;
            }).AddJwtBearer(options =>
            {
                var jwtSettings = new JWTConfig();
                configuration.Bind("JwtConfig", jwtSettings);  
                options.Events = new JwtBearerEvents()
                {
                    OnMessageReceived = context =>
                    {
                        var accessToken = context.Request.Query["access_token"];
                        var path = context.HttpContext.Request.Path;
                        if (!string.IsNullOrEmpty(accessToken) && (path.StartsWithSegments("/hubs/") || path.StartsWithSegments("/fishinghub") || path.StartsWithSegments("/fishingroomhub")))
                        {
                            context.Token = accessToken;
                        }
                        else
                        {
                            try
                            {
                                context.Token = context.HttpContext.Request.Headers[jwtSettings.TokenKey].ToString();
                            }
                            catch (Exception e)
                            {
                                context.Token = "";
                            }
                        }

                        if (!string.IsNullOrEmpty(context.Token))
                        {
                           // var key = JwtTools.GetTokenContent(context.Token, "key");
                            var userId =JwtTools.GetTokenReverseContent(context.Token, "uid");
                            if (string.IsNullOrEmpty(userId))
                            {
                                context.Token = "";
                            }
                            //if (string.IsNullOrEmpty(key) || string.IsNullOrEmpty(userId))
                            //{
                            //    context.Token = "";
                            //}
                            //else
                            //{
                            //    if (Md5Helper.Encode(userId)[..8] != key)
                            //    {
                            //        context.Token = "";
                            //    }

                            //}
                        }

                        return Task.CompletedTask;
                    },
                    OnAuthenticationFailed = context =>
                    {
                        string s = context.Exception.Message;
                        return Task.CompletedTask;
                    },      
                    OnChallenge = context =>
                    {
                        context.HandleResponse();
                        var payload = JsonConvert.SerializeObject(new { code = 401, msg = "fail",info= "很抱歉，您无权访问该接口" });
                        context.Response.ContentType = "application/json";
                        context.Response.StatusCode = StatusCodes.Status200OK;
                        context.Response.WriteAsync(payload);
                        return Task.FromResult(0);
                    }
                };
                var tokenValidationParameters = new TokenValidationParameters();

                tokenValidationParameters.ValidateAudience = jwtSettings.ValidateAudience;
                tokenValidationParameters.ValidAudience = jwtSettings.Audience;

                tokenValidationParameters.ValidateIssuer = jwtSettings.ValidateIssuer;
                tokenValidationParameters.ValidIssuer = jwtSettings.Issuer;

                tokenValidationParameters.ValidateIssuerSigningKey = jwtSettings.ValidateIssuerSigningKey;
                tokenValidationParameters.IssuerSigningKey =
                    new SymmetricSecurityKey(Encoding.UTF8.GetBytes(jwtSettings.SecretKey));

                tokenValidationParameters.ValidateLifetime = jwtSettings.ValidateLifetime;
                options.TokenValidationParameters = tokenValidationParameters;
            }); 

            return services;
        }


        public static IServiceCollection AddJwt(this IServiceCollection services,
            IConfiguration configuration)
        {

            services.AddScoped<JwtTools>();
            services.Configure<JWTConfig>(options => { configuration.Bind("JwtConfig", options); });
            JwtSecurityTokenHandler.DefaultInboundClaimTypeMap.Clear();
            services.AddAuthentication(options =>
            {
                options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
                options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
                options.DefaultScheme = JwtBearerDefaults.AuthenticationScheme;
            }).AddJwtBearer(options =>
            {
                var jwtSettings = new JWTConfig();
                configuration.Bind("JwtConfig", jwtSettings);
                options.Events = new JwtBearerEvents()
                {
                    OnMessageReceived = context =>
                    {
                        var accessToken = context.Request.Query["access_token"];
                        var path = context.HttpContext.Request.Path;
                        if (!string.IsNullOrEmpty(accessToken) && (path.StartsWithSegments("/hubs/") || path.StartsWithSegments("/fishinghub") || path.StartsWithSegments("/fishingroomhub")))
                        {
                            context.Token = accessToken;
                        }
                        else
                        {
                            context.Token = context.HttpContext.Request.Headers[jwtSettings.TokenKey].ToString();
                        }
                        return Task.CompletedTask;
                    },
                    OnAuthenticationFailed = context =>
                    {
                        string s = context.Exception.Message;
                        return Task.CompletedTask;
                    },
                    OnChallenge = context =>
                    {
                        context.HandleResponse();
                        var payload = JsonConvert.SerializeObject(new { code = 401, msg = "fail",info= "很抱歉，您无权访问该接口" });
                        context.Response.ContentType = "application/json";
                        context.Response.StatusCode = StatusCodes.Status200OK;
                        context.Response.WriteAsync(payload);
                        return Task.FromResult(0);
                    }
                };
                var tokenValidationParameters = new TokenValidationParameters();

                tokenValidationParameters.ValidateAudience = jwtSettings.ValidateAudience;
                tokenValidationParameters.ValidAudience = jwtSettings.Audience;

                tokenValidationParameters.ValidateIssuer = jwtSettings.ValidateIssuer;
                tokenValidationParameters.ValidIssuer = jwtSettings.Issuer;

                tokenValidationParameters.ValidateIssuerSigningKey = jwtSettings.ValidateIssuerSigningKey;
                tokenValidationParameters.IssuerSigningKey =
                    new SymmetricSecurityKey(Encoding.UTF8.GetBytes(jwtSettings.SecretKey));

                tokenValidationParameters.ValidateLifetime = jwtSettings.ValidateLifetime;
                options.TokenValidationParameters = tokenValidationParameters;
            });
            return services;
        }
    }
}