Accessing Payload of JWT with mvc dotnet core-CodePudding

The

The postman call:

The code of the controller action:

[HttpPost] [ProducesResponseType(typeof(void), 201)] [ProducesResponseType(typeof(void), 400)] [ProducesResponseType(typeof(void), 401)] [ProducesResponseType(typeof(void), 403)] [ApiExplorerSettings(GroupName = "AuditLog")] [Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)] public IActionResult Insert([Required] Dto.Log auditLog) => RunSafely(() => { var log = _mapper.Map<Dto.Log, Log>(auditLog); log.CorrelationId = _headerReader.GetCorrelationId(Request?.Headers); _logRepository.AddLog(log); return this.StatusCode((int)HttpStatusCode.Created); });

The state of the controller:

CodePudding user response：

Your question is a little unclear to me, too, and I am not sure about the creation process of your token. However, I have the exact scenario in one of my projects, which works fine. Here is the code for different puzzles:

Creating the Token:

if (user != null) { var result = await _signInManager.CheckPasswordSignInAsync(user, model.Password, false); if (result.Succeeded) { // Create the Token var claims = new[] { new Claim(JwtRegisteredClaimNames.Sub, user.Email), new Claim(JwtRegisteredClaimNames.Jti, Guid.NewGuid().ToString()), new Claim(JwtRegisteredClaimNames.UniqueName, user.UserName) }; var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_config["Tokens:Key"])); var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256); var token = new JwtSecurityToken( _config["Tokens:Issuer"], _config["Tokens:Audience"], claims, expires: DateTime.UtcNow.AddMinutes(120), signingCredentials: creds); var results = new { token = new JwtSecurityTokenHandler().WriteToken(token), expiration = token.ValidTo }; return Created("", results); } }

For IServiceCollection :

services.AddAuthentication() .AddCookie() .AddJwtBearer(cfg => { cfg.TokenValidationParameters = new TokenValidationParameters() { ValidIssuer = _config["Tokens:Issuer"], ValidAudience = _config["Tokens:Audience"], IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_config["Tokens:Key"])) }; });

And config.json file: (Note that I changed real-world info due to security reasons)

"Tokens": { "Key": "foo-foo-foo-foo-foo-foo-foo-foo", "Issuer": "localhost", "Audience": "localhost" }

These settings are exact that I'm using in one of my small projects, and It's working fine. Check if something is missing in your project or not.

CodePudding user response：

You can access payload of jwt by using User object inside of System.Security.Claims.ClaimsPrincipal namespace. For example:

var claims = User.Claims;

This claims contains payload of jwt. Also, you can access other informations like:

if (User.Identity.IsAuthenticated) { ....