ServiceStack JWT身份验证提供程序示例

Install-Package ServiceStack
Install-Package ServiceStack.Authentication.Jwt

using ServiceStack;
using ServiceStack.Authentication.Jwt;
using ServiceStack.Configuration;

public class AppHost : AppHostBase
{
    public AppHost() : base("My ServiceStack App", typeof(MyService).Assembly)
    {
    }

    public override void Configure(Container container)
    {
        // 配置 JWT 身份验证提供程序
        var jwtAuthProvider = new JwtAuthProvider
        {
            HashAlgorithm = "HS256",
            RequireSecureConnection = true,
            Secret = "your-secret-key", // 替换为你的密钥
            IssuerSecret = "your-issuer-secret", // 替换为你的发行者密钥
            AllowUnsignedTokens = false,
            RequireVerification = true,
            ValidateIssuerSigningKey = true,
            ValidateIssuer = true,
            ValidateAudience = true,
            Issuer = "your-issuer", // 替换为你的发行者
            Audience = "your-audience", // 替换为你的受众
        };

        container.Register<IAuthPlugin>(jwtAuthProvider);

        // 其他配置...
    }
}

using ServiceStack;
using ServiceStack.Authentication.Jwt;
using ServiceStack.FluentValidation;
using ServiceStack.ServiceInterface;
using ServiceStack.ServiceInterface.Auth;

[Route("/generate-token")]
public class GenerateTokenRequest : IReturn<GenerateTokenResponse>
{
    public string UserName { get; set; }
}

public class GenerateTokenResponse
{
    public string Token { get; set; }
}

public class GenerateTokenService : Service
{
    public GenerateTokenResponse Post(GenerateTokenRequest request)
    {
        var userAuth = new UserAuth
        {
            Id = 1, // 替换为用户的实际 ID
            UserName = request.UserName,
            Email = "user@example.com", // 替换为用户的实际邮箱
            DisplayName = "User Name", // 替换为用户的实际显示名称
        };

        var jwtAuthProvider = GetPlugin<JwtAuthProvider>();
        var token = jwtAuthProvider.CreateJwtToken(userAuth);

        return new GenerateTokenResponse { Token = token };
    }
}

public class MyService : Service
{
    public object Get(MyRequest request)
    {
        var userAuth = GetSession();
        if (userAuth == null)
        {
            throw new UnauthorizedException("Invalid token");
        }

        // 使用 userAuth 对象进行操作
        return new MyResponse { Message = $"Hello, {userAuth.DisplayName}!" };
    }
}