时间戳

首页 > 解决方案 > 有什么方法可以从此代码中将用户的角色保存在令牌中？

asp.net - 有什么方法可以从此代码中将用户的角色保存在令牌中？

问题描述

如何找到一个人的角色并将其包含在令牌中，以便我可以使用它来授权角色？想法，解决方案？控制器装饰有[Authorize (Role = "Administrator")]返回 403，所以我无法识别或无法访问它！

public class AuthController : ControllerBase
{
    private readonly AuthOptions _authOptions;
    private readonly SignInManager<User> _signInManager;
    private readonly UserManager<User> _userManager;
    private readonly IMapper _mapper;

    public AuthController(IOptions<AuthOptions> authOption, SignInManager<User> signInManager, UserManager<User> userManager,  IMapper mapper)
    {
        _authOptions = authOption.Value;
        _signInManager = signInManager;
        _userManager = userManager;
        _mapper = mapper;
    }

    [AllowAnonymous]
    [HttpPost("login")]
    public async Task<IActionResult> Login([FromBody]UserForLoginDto userLoginDto)
    {
        var checkPassword = await _signInManager.PasswordSignInAsync(userLoginDto.Username, userLoginDto.Password,false,false);
       
        if (checkPassword.Succeeded)
        {
            var signinCredentials = new SigningCredentials(_authOptions.GetSymmetricSecurityKey(), SecurityAlgorithms.HmacSha256);
            var jwtSecurityToken = new JwtSecurityToken(
                 issuer: _authOptions.Issuer,
                 audience: _authOptions.Audience,
                 claims: new List<Claim>(),
                 expires: DateTime.Now.AddDays(30),
                 signingCredentials: signinCredentials);
            

            var tokenHandler = new JwtSecurityTokenHandler();
            
            var encodedToken = tokenHandler.WriteToken(jwtSecurityToken);
            return Ok(new { AccessToken = encodedToken });
        }

        return Unauthorized();
    }
}

标签： asp.netasp.net-corejwtidentity

解决方案

更改您的令牌生成方法，例如，

var tokenHandler = new JwtSecurityTokenHandler();
var key = Encoding.ASCII.GetBytes("your secret key");

var tokenDescriptor = new SecurityTokenDescriptor
        {
            Subject = new ClaimsIdentity(new Claim[]
            {
                new Claim(ClaimTypes.Name, "your_user_id"),
                new Claim(ClaimTypes.Role, "your_role_name") //in your case here value "Administrator"
            }),
            Expires = DateTime.UtcNow.AddDays(30),
            SigningCredentials = new SigningCredentials(new SymmetricSecurityKey(key), 
                                              SecurityAlgorithms.HmacSha256Signature)
        };
var token = tokenHandler.CreateToken(tokenDescriptor);
var encodedToken = tokenHandler.WriteToken(token);

然后，您可以将Authorize标签与角色一起使用。

[Authorize (Role = "Administrator")]

推荐阅读