如何在Dot Net Core中使用JWKS验证JWT令牌

services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
    .AddJwtBearer(options =>
    {
        options.Authority = "https://your-auth-server.com"; // JWT令牌的颁发者
        options.Audience = "your-api-resource"; // JWT令牌的受众
        options.TokenValidationParameters = new TokenValidationParameters
        {
            ValidateIssuerSigningKey = true,
            ValidateIssuer = true,
            ValidateAudience = true,
            ValidateLifetime = true,
            IssuerSigningKeyResolver = (s, securityToken, identifier, parameters) =>
            {
                // 从JWKS中获取公钥
                var json = new WebClient().DownloadString("https://your-auth-server.com/.well-known/jwks.json");
                var keys = JsonConvert.DeserializeObject<JsonWebKeySet>(json).Keys;
                return (IEnumerable<SecurityKey>)keys;
            }
        };
    });

app.UseAuthentication();