生成访问令牌时如何将 userid 参数添加到 jwt 的有效负载？

Question

如何在生成访问令牌时将userId 参数添加到jwt 的负载中？

我在asp.net core 2.2 上工作，我需要将userId 参数添加到生成访问令牌 的负载中，然后生成JSON 格式的结果。

  public string GenerateTokens(string userId)
            {    
                var Claims = new Claim[]
                         {
                new Claim(JwtRegisteredClaimNames.Sub,userId)
                         };
                var signingkey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes("this is secret phrase"));
                var SigningCredntials = new SigningCredentials(signingkey, SecurityAlgorithms.HmacSha256);
                var Jwt = new JwtSecurityToken();

                return new JwtSecurityTokenHandler().WriteToken(Jwt);
            }

Answer 1

您应该在初始化JwtSecurityToken 实例时设置声明：

var Claims = new Claim[]
{
    new Claim(JwtRegisteredClaimNames.Sub,"userid")
     //your other claims
};
var signingkey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes("this is secret phrase"));
var SigningCredntials = new SigningCredentials(signingkey, SecurityAlgorithms.HmacSha256);
var Jwt = new JwtSecurityToken(claims:Claims,signingCredentials:SigningCredntials);

return new JwtSecurityTokenHandler().WriteToken(Jwt);

JwtSecurityToken的构造函数，也可以设置issue,audience,expires..

public JwtSecurityToken(string issuer = null, string audience = null, IEnumerable<Claim> claims = null, DateTime? notBefore = null, DateTime? expires = null, SigningCredentials signingCredentials = null);