99 lines
3.4 KiB
C#
99 lines
3.4 KiB
C#
using Microsoft.AspNetCore.Authentication;
|
||
using Microsoft.AspNetCore.Authentication.JwtBearer;
|
||
using Microsoft.AspNetCore.Http;
|
||
using Microsoft.AspNetCore.Mvc.Controllers;
|
||
using Microsoft.AspNetCore.Mvc;
|
||
using Microsoft.Extensions.DependencyInjection;
|
||
using Microsoft.Extensions.Logging;
|
||
using Microsoft.Extensions.Options;
|
||
using Microsoft.IdentityModel.Tokens;
|
||
using System;
|
||
using System.Collections.Generic;
|
||
using System.IdentityModel.Tokens.Jwt;
|
||
using System.Linq;
|
||
using System.Net.Http;
|
||
using System.Security.Claims;
|
||
using System.Text;
|
||
using System.Text.Encodings.Web;
|
||
using System.Threading.Tasks;
|
||
using Volo.Abp;
|
||
using Microsoft.AspNetCore.Routing;
|
||
|
||
namespace Syc.Authorize.JwtBearer
|
||
{
|
||
/// <summary>
|
||
/// 自定义身份验证处理程序
|
||
/// </summary>
|
||
public class JwtBearerAuthenticationHandler : AuthenticationHandler<JwtBearerOptions>
|
||
{
|
||
public JwtBearerAuthenticationHandler(IOptionsMonitor<JwtBearerOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock) :
|
||
base(options, logger, encoder, clock)
|
||
{
|
||
|
||
}
|
||
|
||
/// <summary>
|
||
/// 身份验证
|
||
/// </summary>
|
||
/// <returns></returns>
|
||
/// <exception cref="NotImplementedException"></exception>
|
||
protected override async Task<AuthenticateResult> HandleAuthenticateAsync()
|
||
{
|
||
// 获取请求的Token
|
||
string token = Request.Headers["Authorization"];
|
||
token = token?.Replace(JwtBearerDefaults.AuthenticationScheme, "");
|
||
|
||
// 验证Token
|
||
if (string.IsNullOrWhiteSpace(token))
|
||
{
|
||
var (isSuccess, claims) = ValidateToken(token);
|
||
if (true)
|
||
{
|
||
var ticket = new AuthenticationTicket(new System.Security.Claims.ClaimsPrincipal(new ClaimsIdentity(claims)), JwtBearerDefaults.AuthenticationScheme);
|
||
return await Task.FromResult(AuthenticateResult.Success(ticket));
|
||
}
|
||
}
|
||
|
||
// 如果Token无效，则返回null
|
||
return AuthenticateResult.Fail("身份验证失败，无效的token");
|
||
}
|
||
|
||
private (bool,IEnumerable<Claim>) ValidateToken(string token)
|
||
{
|
||
var tokenHandler = new JwtSecurityTokenHandler();
|
||
try
|
||
{
|
||
tokenHandler.ValidateToken(token, Options.TokenValidationParameters, out var validatedToken);
|
||
if (validatedToken != null)
|
||
{
|
||
var jwtToken =(JwtSecurityToken)validatedToken;
|
||
return (true, jwtToken.Claims);
|
||
}
|
||
return (validatedToken != null,null);
|
||
}
|
||
catch (Exception ex)
|
||
{
|
||
Logger.LogError(ex,"身份验证错误");
|
||
return (false,null);
|
||
}
|
||
}
|
||
|
||
/// <summary>
|
||
/// 401
|
||
/// </summary>
|
||
/// <param name="properties"></param>
|
||
/// <returns></returns>
|
||
protected override async Task HandleChallengeAsync(AuthenticationProperties properties) => await Response.UnauthorizedAsync();
|
||
|
||
/// <summary>
|
||
/// 403
|
||
/// </summary>
|
||
/// <param name="properties"></param>
|
||
/// <returns></returns>
|
||
protected override Task HandleForbiddenAsync(AuthenticationProperties properties)
|
||
{
|
||
return base.HandleForbiddenAsync(properties);
|
||
}
|
||
}
|
||
}
|