问资源服务器中的ASP.NET 5 JWT令牌验证

EN

var key = new RsaSecurityKey(new RSACryptoServiceProvider(2048).ExportParameters(true));
TokenAuthOptions tokenOptions = new TokenAuthOptions()
{
    Audience = "webappname",
    Issuer = "http://webappname.com",
    Key = key,
    SigningCredentials = new SigningCredentials(key, SecurityAlgorithms.RsaSha512Signature)
};

app.UseJwtBearerAuthentication(options =>
{
    options.TokenValidationParameters.IssuerSigningKey = tokenOptions.Key;
    options.TokenValidationParameters.ValidAudience = tokenOptions.Audience;
    options.TokenValidationParameters.ValidIssuer = tokenOptions.Issuer;
    options.TokenValidationParameters.ValidateSignature = true;
    options.TokenValidationParameters.ValidateLifetime = true;

    options.TokenValidationParameters.ClockSkew = TimeSpan.FromMinutes(0);
});

[HttpGet, Route("Signin")]
public dynamic Signin(string un, string pw)
{
    if (valid user)
    {
        DateTime? expires = DateTime.UtcNow.AddMinutes(5);
        var token = GetToken(un, expires);
        return new { authenticated = true, entityId = 1, token = token, tokenExpires = expires };
    }
    return new { authenticated = false };
}

private string GetToken(string user, DateTime? expires)
{
    var handler = new JwtSecurityTokenHandler();

    ClaimsIdentity identity = new ClaimsIdentity(new GenericIdentity(user, "TokenAuth"), new[] { new Claim("EntityID", "1", ClaimValueTypes.Integer) });

    identity.AddClaim(new Claim(ClaimTypes.Role, "Admin2"));

    var securityToken = handler.CreateToken(
            issuer: _tokenOptions.Issuer,
            audience: _tokenOptions.Audience,
            signingCredentials: _tokenOptions.SigningCredentials,
            subject: identity,
            expires: expires
        );
    return handler.WriteToken(securityToken);
}