dotnet add package Okta.AspNetCore

public void ConfigureServices(IServiceCollection services)
{
    var oktaAuthOptions = new OktaWebApiOptions()
    {
        OktaDomain = "https://{yourOktaDomain}.okta.com",
        AuthorizationServerId = "default",
        Audience = "api://default"
    };
    
    services.AddAuthentication(options =>
    {
        options.DefaultAuthenticateScheme = OktaDefaults.ApiAuthenticationScheme;
        options.DefaultChallengeScheme = OktaDefaults.ApiAuthenticationScheme;
    }).AddOktaWebApi(oktaAuthOptions);
    
    services.AddControllers();
}

public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
{
    app.UseRouting();
    app.UseAuthentication();
    app.UseAuthorization();
    app.UseEndpoints(endpoints => endpoints.MapControllers());
}

[ApiController]
[Route("api/[controller]")]
[Authorize] // 需要认证
public class SecureController : ControllerBase
{
    [HttpGet]
    public IActionResult Get()
    {
        return Ok("只有认证用户能看到这条消息");
    }
}

services.AddCors(options =>
{
    options.AddPolicy("AllowAll", builder =>
    {
        builder.AllowAnyOrigin()
               .AllowAnyMethod()
               .AllowAnyHeader();
    });
});

// 在Configure中
app.UseCors("AllowAll");

curl -X GET \
  https://your-api.com/api/secure \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'