blocks|key|601579|text|在最初的问题过去了几个月之后，现在值得指出的是，微软已经设计了自己的解决方案。详情请参见http://blogs.msdn.com/b/vbertocci/archive/2012/11/20/introducing-the-developer-preview-of-the-json-web-token-handler-for-the-microsoft-net-framework-4-5.aspx。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|601580|entityMap|0|LINK|mutability|MUTABLE|url|http://blogs.msdn.com/b/vbertocci/archive/2012/11/20/introducing-the-developer-preview-of-the-json-web-token-handler-for-the-microsoft-net-framework-4-5.aspx^0|18|4D|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

After all these months have passed after the original question, it's now worth pointing out that Microsoft has devised a solution of their own. See <a href="http://blogs.msdn.com/b/vbertocci/archive/2012/11/20/introducing-the-developer-preview-of-the-json-web-token-handler-for-the-microsoft-net-framework-4-5.aspx">http://blogs.msdn.com/b/vbertocci/archive/2012/11/20/introducing-the-developer-preview-of-the-json-web-token-handler-for-the-microsoft-net-framework-4-5.aspx</a> for details.

blocks|key|385631|text|我从来没有用过它，但是在NuGet上有一个JWT实现。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|385632|包：https://nuget.org/packages/JWT|offset|length|385633|来源：https://github.com/johnsheehan/jwt|385634|兼容.NET+4.0：https://www.nuget.org/packages/jose-jwt/|385635|你也可以去这里：https://jwt.io/，然后点击“库”。|385636|entityMap|0|LINK|mutability|MUTABLE|url|https://nuget.org/packages/JWT|1|https://github.com/johnsheehan/jwt|2|https://www.nuget.org/packages/jose-jwt/|3|https://jwt.io/^0|0|2|U|0|0|3|Y|1|0|B|14|2|0|8|F|3|0^^$0|@$1|2|3|4|5|6|7|Z|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|10|8|@]|9|@$D|11|E|12|1|13]]|A|$]]|$1|F|3|G|5|6|7|14|8|@]|9|@$D|15|E|16|1|17]]|A|$]]|$1|H|3|I|5|6|7|18|8|@]|9|@$D|19|E|1A|1|1B]]|A|$]]|$1|J|3|K|5|6|7|1C|8|@]|9|@$D|1D|E|1E|1|1F]]|A|$]]|$1|L|3|-4|5|6|7|1G|8|@]|9|@]|A|$]]]|M|$N|$5|O|P|Q|A|$R|S]]|T|$5|O|P|Q|A|$R|U]]|V|$5|O|P|Q|A|$R|W]]|X|$5|O|P|Q|A|$R|Y]]]]

I've never used it but there is a JWT implementation on NuGet.

Package: <a href="https://nuget.org/packages/JWT" rel="noreferrer">https://nuget.org/packages/JWT</a>

Source: <a href="https://github.com/johnsheehan/jwt" rel="noreferrer">https://github.com/johnsheehan/jwt</a>

.NET 4.0 compatible: <a href="https://www.nuget.org/packages/jose-jwt/" rel="noreferrer">https://www.nuget.org/packages/jose-jwt/</a>

You can also go here: <a href="https://jwt.io/" rel="noreferrer">https://jwt.io/</a> and click "libraries".

blocks|key|601626|text|下面是一个有效的示例：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|601627|http://zavitax.wordpress.com/2012/12/17/logging-in-with-google-service-account-in-c-jwt/|offset|length|601628|收集分散在网络上的碎片需要相当长的时间，文档相当不完整……|601629|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|2G|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|P|8|@]|9|@$D|Q|E|R|1|S]]|A|$]]|$1|F|3|G|5|6|7|T|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|U|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|C]]]]

Here is a working example:

<a href="http://zavitax.wordpress.com/2012/12/17/logging-in-with-google-service-account-in-c-jwt/" rel="noreferrer">http://zavitax.wordpress.com/2012/12/17/logging-in-with-google-service-account-in-c-jwt/</a>

It took quite some time to collect the pieces scattered over the web, the docs are rather incomplete...

blocks|key|385834|text|这是我在.NET中实现的(Google)+JWT验证，它基于Stack+Overflow和GitHub+and上的其他实现。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|385835|using+Microsoft.IdentityModel.Tokens;
using+System;
using+System.Collections.Generic;
using+System.IdentityModel.Tokens.Jwt;
using+System.Linq;
using+System.Net.Http;
using+System.Security.Claims;
using+System.Security.Cryptography.X509Certificates;
using+System.Text;
using+System.Threading.Tasks;

namespace+QuapiNet.Service
{
++++public+class+JwtTokenValidation
++++{
++++++++public+async+Task<Dictionary<string,+X509Certificate2>>+FetchGoogleCertificates()
++++++++{
++++++++++++using+(var+http+=+new+HttpClient())
++++++++++++{
++++++++++++++++var+response+=+await+http.GetAsync("https://www.googleapis.com/oauth2/v1/certs");

++++++++++++++++var+dictionary+=+await+response.Content.ReadAsAsync<Dictionary<string,+string>>();
++++++++++++++++return+dictionary.ToDictionary(x+=>+x.Key,+x+=>+new+X509Certificate2(Encoding.UTF8.GetBytes(x.Value)));
++++++++++++}
++++++++}

++++++++private+string+CLIENT_ID+=+"xxx.apps.googleusercontent.com";

++++++++public+async+Task<ClaimsPrincipal>+ValidateToken(string+idToken)
++++++++{
++++++++++++var+certificates+=+await+this.FetchGoogleCertificates();

++++++++++++TokenValidationParameters+tvp+=+new+TokenValidationParameters()
++++++++++++{
++++++++++++++++ValidateActor+=+false,+//+check+the+profile+ID

++++++++++++++++ValidateAudience+=+true,+//+check+the+client+ID
++++++++++++++++ValidAudience+=+CLIENT_ID,

++++++++++++++++ValidateIssuer+=+true,+//+check+token+came+from+Google
++++++++++++++++ValidIssuers+=+new+List<string>+{+"accounts.google.com",+"https://accounts.google.com"+},

++++++++++++++++ValidateIssuerSigningKey+=+true,
++++++++++++++++RequireSignedTokens+=+true,
++++++++++++++++IssuerSigningKeys+=+certificates.Values.Select(x+=>+new+X509SecurityKey(x)),
++++++++++++++++IssuerSigningKeyResolver+=+(token,+securityToken,+kid,+validationParameters)+=>
++++++++++++++++{
++++++++++++++++++++return+certificates
++++++++++++++++++++.Where(x+=>+x.Key.ToUpper()+==+kid.ToUpper())
++++++++++++++++++++.Select(x+=>+new+X509SecurityKey(x.Value));
++++++++++++++++},
++++++++++++++++ValidateLifetime+=+true,
++++++++++++++++RequireExpirationTime+=+true,
++++++++++++++++ClockSkew+=+TimeSpan.FromHours(13)
++++++++++++};

++++++++++++JwtSecurityTokenHandler+jsth+=+new+JwtSecurityTokenHandler();
++++++++++++SecurityToken+validatedToken;
++++++++++++ClaimsPrincipal+cp+=+jsth.ValidateToken(idToken,+tvp,+out+validatedToken);

++++++++++++return+cp;
++++++++}
++++}
}|code-block|syntax|javascript|385836|请注意，为了使用它，您需要添加对NuGet包System.Net.Http.Formatting.Extension的引用。否则，编译器将无法识别ReadAsAsync<>方法。|offset|length|style|CODE|385837|entityMap^0|0|0|M|10|21|D|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Q|8|@$I|R|J|S|K|L]|$I|T|J|U|K|L]]|9|@]|A|$]]|$1|M|3|-4|5|6|7|V|8|@]|9|@]|A|$]]]|N|$]]

This is my implementation of (Google) JWT Validation in .NET.
It is based on other implementations on Stack Overflow and GitHub gists.

<pre><code>using Microsoft.IdentityModel.Tokens;
using System;
using System.Collections.Generic;
using System.IdentityModel.Tokens.Jwt;
using System.Linq;
using System.Net.Http;
using System.Security.Claims;
using System.Security.Cryptography.X509Certificates;
using System.Text;
using System.Threading.Tasks;

namespace QuapiNet.Service
{
 public class JwtTokenValidation
 {
 public async Task&lt;Dictionary&lt;string, X509Certificate2&gt;&gt; FetchGoogleCertificates()
 {
 using (var http = new HttpClient())
 {
 var response = await http.GetAsync("https://www.googleapis.com/oauth2/v1/certs");

 var dictionary = await response.Content.ReadAsAsync&lt;Dictionary&lt;string, string&gt;&gt;();
 return dictionary.ToDictionary(x =&gt; x.Key, x =&gt; new X509Certificate2(Encoding.UTF8.GetBytes(x.Value)));
 }
 }

 private string CLIENT_ID = "xxx.apps.googleusercontent.com";

 public async Task&lt;ClaimsPrincipal&gt; ValidateToken(string idToken)
 {
 var certificates = await this.FetchGoogleCertificates();

 TokenValidationParameters tvp = new TokenValidationParameters()
 {
 ValidateActor = false, // check the profile ID

 ValidateAudience = true, // check the client ID
 ValidAudience = CLIENT_ID,

 ValidateIssuer = true, // check token came from Google
 ValidIssuers = new List&lt;string&gt; { "accounts.google.com", "https://accounts.google.com" },

 ValidateIssuerSigningKey = true,
 RequireSignedTokens = true,
 IssuerSigningKeys = certificates.Values.Select(x =&gt; new X509SecurityKey(x)),
 IssuerSigningKeyResolver = (token, securityToken, kid, validationParameters) =&gt;
 {
 return certificates
 .Where(x =&gt; x.Key.ToUpper() == kid.ToUpper())
 .Select(x =&gt; new X509SecurityKey(x.Value));
 },
 ValidateLifetime = true,
 RequireExpirationTime = true,
 ClockSkew = TimeSpan.FromHours(13)
 };

 JwtSecurityTokenHandler jsth = new JwtSecurityTokenHandler();
 SecurityToken validatedToken;
 ClaimsPrincipal cp = jsth.ValidateToken(idToken, tvp, out validatedToken);

 return cp;
 }
 }
}
</code></pre>

Note that, in order to use it, you need to add a reference to the NuGet package <code>System.Net.Http.Formatting.Extension</code>. Without this, the compiler will not recognize the <code>ReadAsAsync&lt;&gt;</code> method.

blocks|key|601461|text|看看Google+Client+Library+for+.NET吧。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|601462|entityMap|0|LINK|mutability|MUTABLE|url|http://code.google.com/p/google-api-dotnet-client/^0|2|U|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

Take a look at <a href="http://code.google.com/p/google-api-dotnet-client/" rel="nofollow">Google Client Library for .NET</a>.

blocks|key|601741|text|下面是类和函数的列表：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|601742|open+System
open+System.Collections.Generic
open+System.Linq
open+System.Threading.Tasks
open+Microsoft.AspNetCore.Mvc
open+Microsoft.Extensions.Logging
open+Microsoft.AspNetCore.Authorization
open+Microsoft.AspNetCore.Authentication
open+Microsoft.AspNetCore.Authentication.JwtBearer
open+Microsoft.IdentityModel.Tokens
open+System.IdentityModel.Tokens
open+System.IdentityModel.Tokens.Jwt
open+Microsoft.IdentityModel.JsonWebTokens
open+System.Text
open+Newtonsoft.Json
open+System.Security.Claims
++++let+theKey+=+"VerySecretKeyVerySecretKeyVerySecretKey"
++++let+securityKey+=+SymmetricSecurityKey(Encoding.UTF8.GetBytes(theKey))
++++let+credentials+=+SigningCredentials(securityKey,+SecurityAlgorithms.RsaSsaPssSha256)
++++let+expires+=+DateTime.UtcNow.AddMinutes(123.0)+%7C>+Nullable
++++let+token+=+JwtSecurityToken(
++++++++++++++++++++"lahoda-pro-issuer",+
++++++++++++++++++++"lahoda-pro-audience",
++++++++++++++++++++claims+=+null,
++++++++++++++++++++expires+=++expires,
++++++++++++++++++++signingCredentials+=+credentials
++++++++)

++++let+tokenString+=+JwtSecurityTokenHandler().WriteToken(token)|code-block|syntax|javascript|601743|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Here is the list of classes and functions:

<pre><code>open System
open System.Collections.Generic
open System.Linq
open System.Threading.Tasks
open Microsoft.AspNetCore.Mvc
open Microsoft.Extensions.Logging
open Microsoft.AspNetCore.Authorization
open Microsoft.AspNetCore.Authentication
open Microsoft.AspNetCore.Authentication.JwtBearer
open Microsoft.IdentityModel.Tokens
open System.IdentityModel.Tokens
open System.IdentityModel.Tokens.Jwt
open Microsoft.IdentityModel.JsonWebTokens
open System.Text
open Newtonsoft.Json
open System.Security.Claims
 let theKey = "VerySecretKeyVerySecretKeyVerySecretKey"
 let securityKey = SymmetricSecurityKey(Encoding.UTF8.GetBytes(theKey))
 let credentials = SigningCredentials(securityKey, SecurityAlgorithms.RsaSsaPssSha256)
 let expires = DateTime.UtcNow.AddMinutes(123.0) |&gt; Nullable
 let token = JwtSecurityToken(
 "lahoda-pro-issuer", 
 "lahoda-pro-audience",
 claims = null,
 expires = expires,
 signingCredentials = credentials
 )

 let tokenString = JwtSecurityTokenHandler().WriteToken(token)
</code></pre>

I feel like I'm taking crazy pills here. Usually there's always a million library and samples floating around the web for any given task. I'm trying to implement authentication with a Google "Service Account" by use of JSON Web Tokens (JWT) as described <a href="https://developers.google.com/accounts/docs/OAuth2ServiceAccount#libraries" rel="noreferrer">here</a>.

However there is only client libraries in PHP, Python, and Java. Even searching for JWT examples outside of Google's authentication, there is only crickets and drafts on the JWT concept. Is this really so new and possibly a Google proprietary system? 

The java sample which is the closest I could manage to interpret looks pretty intensive and intimidating. There's got to be something out there in C# that I could at least start with. Any help with this would be great!

Is there any JSON Web Token (JWT) example in C#?

JSON Web Token

身份验证

编译器

Python

GitHub

JSON

Java

我觉得我是在吃疯狂的药。通常，对于任何给定的任务，web上总会有一百万个库和示例。我正在尝试使用中描述的JSON Web Tokens (JWT)来使用Google“服务帐户”实现身份验证。但是，只有PHP、Python和Java中的客户端库。即使搜索Google身份验证之外的JWT示例，也只有关于JWT概念的板球和草案。这是不是真的很新，而且可能是谷歌专有的系统？java示例是我能解释的最接近的

问C#中有JSON Web Token (JWT)示例吗？
EN

回答 6

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问C#中有JSON Web Token (JWT)示例吗？EN

回答 6

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问C#中有JSON Web Token (JWT)示例吗？
EN