using Microsoft.Extensions.Configuration; using Microsoft.IdentityModel.Tokens; using System; using System.Collections.Generic; using System.IdentityModel.Tokens.Jwt; using System.Security.Claims; using System.Text; using YD_WeChatApplet.Commons; using YD_WeChatApplet.Commons.Utils; namespace YD_WeChatApplet.Api.Utilities { public class JwtHelper { /// /// 生成JWT /// /// /// public static string IssueJwt(UserInfoDto userInfo) { string exp = $"{new DateTimeOffset(DateTime.Now.AddMinutes(Convert.ToInt32(AppSettings.ExpMinutes))).ToUnixTimeSeconds()}"; var claims = new List { //new Claim(ClaimTypes.Role,userInfo.Role_Id ), new Claim(JwtRegisteredClaimNames.Sid,userInfo.SchoolCode.ToString()??""), new Claim(JwtRegisteredClaimNames.Typ,userInfo.Role_Id.ToString() ??""), new Claim(JwtRegisteredClaimNames.Jti,userInfo.User_Id.ToString()??""), new Claim(JwtRegisteredClaimNames.Nickname,userInfo.UserTrueName??""), new Claim(JwtRegisteredClaimNames.Name,userInfo.UserName??""), new Claim(JwtRegisteredClaimNames.PhoneNumber,userInfo.PhoneNo??""), new Claim(JwtRegisteredClaimNames.Azp,userInfo.UserNo??""), new Claim(JwtRegisteredClaimNames.Iat, $"{new DateTimeOffset(DateTime.Now).ToUnixTimeSeconds()}"), new Claim(JwtRegisteredClaimNames.Nbf,$"{new DateTimeOffset(DateTime.Now).ToUnixTimeSeconds()}") , //JWT过期时间 //验证是否过期 从User读取过期 时间,再将时间戳转换成日期,如果时间在半个小时内即将过期,通知前台刷新JWT //int val= HttpContext.User.Claims.Where(x => x.Type == JwtRegisteredClaimNames.Exp).FirstOrDefault().Value; //new DateTime(621355968000000000 + (long)val* (long)10000000, DateTimeKind.Utc).ToLocalTime() //默认设置jwt过期时间120分钟 new Claim (JwtRegisteredClaimNames.Exp,exp), new Claim(JwtRegisteredClaimNames.Iss,AppSettings.Secret.Issuer), new Claim(JwtRegisteredClaimNames.Aud,AppSettings.Secret.Audience), }; //秘钥16位 var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(AppSettings.Secret.JWT)); var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256); JwtSecurityToken securityToken = new JwtSecurityToken(issuer: AppSettings.Secret.Issuer, claims: claims, signingCredentials: creds); string jwt = new JwtSecurityTokenHandler().WriteToken(securityToken); return jwt; } /// /// 解析 /// /// /// public static UserInfoDto SerializeJwt(string jwtStr) { var jwtHandler = new JwtSecurityTokenHandler(); JwtSecurityToken jwtToken = jwtHandler.ReadJwtToken(jwtStr); UserInfoDto userInfo = new UserInfoDto { User_Id = Convert.ToInt32(jwtToken.Payload["jti"]), Role_Id = Convert.ToInt32(jwtToken.Payload["typ"]), UserName = jwtToken.Payload["name"]?.ToString(), PhoneNo = jwtToken.Payload["phone_number"]?.ToString(), SchoolCode = jwtToken.Payload["sid"]?.ToString(), UserTrueName = jwtToken.Payload["nickname"]?.ToString(), UserNo = jwtToken.Payload["azp"]?.ToString(), }; return userInfo; } /// /// 获取过期时间 /// /// /// public static DateTime GetExp(string jwtStr) { var jwtHandler = new JwtSecurityTokenHandler(); JwtSecurityToken jwtToken = jwtHandler.ReadJwtToken(jwtStr); DateTime expDate = (jwtToken.Payload[JwtRegisteredClaimNames.Exp] ?? 0).GetInt().GetTimeSpmpToDate(); return expDate; } public static bool IsExp(string jwtStr) { return GetExp(jwtStr) < DateTime.Now; } public static int GetUserId(string jwtStr) { try { if (jwtStr.IsNullOrEmpty()) return 0; jwtStr = jwtStr.Replace("Bearer ", ""); return new JwtSecurityTokenHandler().ReadJwtToken(jwtStr).Id.GetInt(); } catch { return 0; } } } }