将JWT集成到Asp.net Web服务中

Question

有人可以告诉我如何将JWT集成到默认的Web API项目中。

Here is the library

他们只是解释了如何使用的NuGet安装库以及如何生成令牌。但现在如何将它与基于身份验证的系统集成？

我实施至今：

public class WebApiApplication : System.Web.HttpApplication 
{ 
    protected void Application_Start() 
    { 
     AreaRegistration.RegisterAllAreas(); 
     GlobalConfiguration.Configure(WebApiConfig.Register); 
     FilterConfig.RegisterGlobalFilters(GlobalFilters.Filters); 
     RouteConfig.RegisterRoutes(RouteTable.Routes); 
     BundleConfig.RegisterBundles(BundleTable.Bundles); 
     GlobalConfiguration.Configuration.Filters.Add(new **AuthFilterAttribute()**); 
    } 
} 


    public class TokenAuthenticationAttribute : System.Web.Http.Filters.ActionFilterAttribute 
{ 
    public override void OnActionExecuting(System.Web.Http.Controllers.HttpActionContext actionContext) 
    { 
     // In auth web method you should implement functionality of authentication 
     // so that client app could be able to get token 
     if (actionContext.Request.RequestUri.AbsolutePath.Contains("api/auth")) 
     { 
      return; 
     } 

     // Receive token from the client. Here is the example when token is in header: 
     var token = **actionContext.Request.Headers["Token"];** 

     // Put your secret key into the configuration 
     var secretKey = "GQDstcKsx0NHjPOuXOYg5MbeJ1XT0uFiwDVvVBrk"; 

     try 
     { 
      string jsonPayload = JWT.JsonWebToken.Decode(token, secretKey); 
     } 
     catch (JWT.SignatureVerificationException) 
     { 
      throw new HttpResponseException(HttpStatusCode.Unauthorized); 
     } 
    } 
} 

Answer 1

实施TokenAuthenticationAttribute和全球范围内进行注册：

Global.asax中注册：

GlobalConfiguration.Configuration.Filters.Add(new TokenAuthenticationAttribute()); 

TokenAuthenticationAttribute：

public class TokenAuthenticationAttribute : System.Web.Http.Filters.ActionFilterAttribute 
{ 
    public override void OnActionExecuting(System.Web.Http.Controllers.HttpActionContext actionContext) 
    { 
     // In auth web method you should implement functionality of authentication 
     // so that client app could be able to get token 
     if (actionContext.Request.RequestUri.AbsolutePath.Contains("api/auth")) 
     { 
      return; 
     } 

     // Receive token from the client. Here is the example when token is in header: 
     var token = actionContext.Request.Headers["Token"]; 

     // Put your secret key into the configuration 
     var secretKey = "GQDstcKsx0NHjPOuXOYg5MbeJ1XT0uFiwDVvVBrk"; 

     try 
     { 
      string jsonPayload = JWT.JsonWebToken.Decode(token, secretKey); 
     } 
     catch (JWT.SignatureVerificationException) 
     { 
      throw new HttpResponseException(HttpStatusCode.Unauthorized); 
     }  
    } 
}