coreshoppro/CoreCms.Net.Utility/Helper/JwtTokenHelper.cs

using System;
using System.Collections.Generic;
using System.IdentityModel.Tokens.Jwt;
using System.Linq;
using System.Security.Claims;
using System.Text;
using System.Threading.Tasks;
using CoreCms.Net.Model.Entities;
using CoreCms.Net.Utility.Extensions;
using Microsoft.IdentityModel.Tokens;

namespace CoreCms.Net.Utility.Helper
{
    /// <summary>
    /// Jwt帮助工具
    /// </summary>
    public static class JwtTokenHelper
    {
        /// <summary>
        /// 创建Token（暂不使用）
        /// </summary>
        /// <returns></returns>
        public static string CreateJwt(CoreCmsUser userInfo)
        {
            //创建声明Token数组
            var claim = new List<Claim> {
                new Claim(ClaimTypes.GivenName, userInfo.userName),
                new Claim(ClaimTypes.Name, userInfo.nickName),
                new Claim(JwtRegisteredClaimNames.Jti, userInfo.id.ToString()),
                new Claim(ClaimTypes.Expiration, DateTime.Now.AddHours(1).ToString("yyyy-MM-dd HH:mm:ss")) };

            var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes("yanglingcong@qq.com"));//密钥大小要超过128bt，最少要16位

            //实例化一个token对象
            //第一种方式
            //var token = new JwtSecurityToken(claims: claim);

            //第二种方式
            var token = new JwtSecurityToken(
                issuer: "kevin",//发起人：当前项目
                audience: "kevin project",//订阅：我们需要谁去使用这个Token
                claims: claim,//声明的数组
                expires: DateTime.Now.AddHours(1),//当前时间加一小时，一小时后过期
                signingCredentials: new SigningCredentials(key, SecurityAlgorithms.HmacSha256)//数字签名 第一部分是密钥，第二部分是加密方式
            );

            //生成token
            var jwtToken = new JwtSecurityTokenHandler().WriteToken(token);
            return jwtToken;
        }


        /// <summary>
        /// 解析token
        /// </summary>
        /// <param name="token"></param>
        /// <returns></returns>
        public static GetTokenModel AnalysisToken(string token)
        {
            //第一种直接用JwtSecurityTokenHandler提供的read方法
            var jwtHander = new JwtSecurityTokenHandler();
            JwtSecurityToken jwtSecurityToken = jwtHander.ReadJwtToken(token);

            GetTokenModel tokenModel = new GetTokenModel();
            var currentInfo = jwtSecurityToken.Claims;
            if (currentInfo.Any())
            {
                tokenModel.UserName = currentInfo.FirstOrDefault(f => f.Type == ClaimTypes.MobilePhone)!.Value;
                tokenModel.NickName = currentInfo.FirstOrDefault(f => f.Type == ClaimTypes.Name)!.Value;
                tokenModel.UserId = currentInfo.FirstOrDefault(f => f.Type == ClaimTypes.NameIdentifier)!.Value.ObjectToInt(0);

                tokenModel.Expired = currentInfo.FirstOrDefault(f => f.Type == ClaimTypes.Expired)!.Value.ObjectToInt(0);
                var dt = DateTime.Now;
                tokenModel.Expiration = currentInfo.FirstOrDefault(f => f.Type == ClaimTypes.Expiration)!.Value.ObjectToDate(dt);

                if (dt > tokenModel.Expiration)
                {
                    return null;
                }
            }
            return tokenModel;
        }
    }

    /// <summary>
    /// 获取token信息
    /// </summary>
    public class GetTokenModel
    {
        /// <summary>
        /// 用户
        /// </summary>
        public string UserName { get; set; }

        /// <summary>
        /// 用户昵称
        /// </summary>
        public string NickName { get; set; }

        /// <summary>
        /// 用户序列
        /// </summary>
        public int UserId { get; set; }

        /// <summary>
        /// 有效时间分钟
        /// </summary>
        public int Expired { get; set; }

        /// <summary>
        /// 有效时间
        /// </summary>
        public DateTime Expiration { get; set; }


    }


}