C# ASP.net中用到的JWT身份驗證

1.先通過NuGet添加JWT

2.新建一個JwtHelp類

public class JwtHelp
    {

        //私鑰  web.config中配置
        //"GQDstcKsx0NHjPOuXOYg5MbeJ1XT0uFiwDVvVBrk";
        private static string secret = "footmark";

        /// <summary>
        /// 生成JwtToken
        /// </summary>
        /// <param name="payload">不敏感的用戶數據</param>
        /// <returns></returns>
        public static string SetJwtEncode()
        {

            //格式如下
            IDateTimeProvider provider = new UtcDateTimeProvider();
            var now = provider.GetNow();
            var unixEpoch = new DateTime(1970, 1, 1, 0, 0, 0, DateTimeKind.Utc);
            //過期時間
            var secondsSinceEpoch = Math.Round((now - unixEpoch).TotalSeconds);  

            var payload = new Dictionary<string, object>
            {
                { "exp", secondsSinceEpoch+3600 },  //3600秒后過期
                { "username","admin" },
                { "password","123456" }
            };

            IJwtAlgorithm algorithm = new HMACSHA256Algorithm();
            IJsonSerializer serializer = new JsonNetSerializer();
            IBase64UrlEncoder urlEncoder = new JwtBase64UrlEncoder();
            IJwtEncoder encoder = new JwtEncoder(algorithm, serializer, urlEncoder);

            var token = encoder.Encode(payload, secret);
            return token;
        }

        /// <summary>
        /// 根據jwtToken  獲取實體
        /// </summary>
        /// <param name="token">jwtToken</param>
        /// <returns></returns>
        public static string GetJwtDecode(string token)
        {
            try
            {
                IJsonSerializer serializer = new JsonNetSerializer();
                IDateTimeProvider provider = new UtcDateTimeProvider();
                IJwtValidator validator = new JwtValidator(serializer, provider);
                IBase64UrlEncoder urlEncoder = new JwtBase64UrlEncoder();
                IJwtDecoder decoder = new JwtDecoder(serializer, validator, urlEncoder);
                //token為之前生成的字符串
                var userInfo = decoder.DecodeToObject(token, secret, verify: true);
                //此處json為IDictionary<string, object> 類型
                string username = userInfo["username"].ToString();  //可獲取當前用戶名
                return "OK";
               
            }
            catch (TokenExpiredException)
            {
                Console.WriteLine("Token has expired");
            }
            catch (SignatureVerificationException)
            {
                Console.WriteLine("Token has invalid signature");
            }          
            catch (Exception)
            {

            }
            return "Error";
        }
    }