PROSAGA码农传奇-云鉴权-加密JWT安全令牌支持的算法

加密JWT安全令牌支持的算法

作者: 子阳
发布时间: 2025-02-06 08:44:14 (3天前)
转自：

<div class =“post-text”itemprop =“text”>
  <P>
    最后我找到了答案：
  </p>
   <pre>
    <code>
      var claims = new Claim[] { new SomeClaimes() };
var scKey = Encoding.UTF8.GetBytes("SOME KEY");
var ecKeyTemp = Encoding.UTF8.GetBytes("SOME OTHER KEY");

// Note that the ecKey should have 256 / 8 length:
byte[] ecKey = new byte[256 / 8];
Array.Copy(ecKeyTemp, ecKey, 256 / 8);

var tokenDescriptor = new SecurityTokenDescriptor {
    Subject = new ClaimsIdentity(claims),
    SigningCredentials = new SigningCredentials(
        new SymmetricSecurityKey(
            scKey),
            SecurityAlgorithms.HmacSha512),
    EncryptingCredentials = new EncryptingCredentials(
        new SymmetricSecurityKey(
            ecKey),
            SecurityAlgorithms.Aes256KW,
            SecurityAlgorithms.Aes256CbcHmacSha512), 
    Issuer = "My Jwt Issuer",
    Audience = "My Jwt Audience",
    IssuedAt = DateTime.UtcNow,
    Expires = DateTime.Now.AddDays(7),
};
var tokenHandler = new JwtSecurityTokenHandler();
var token = tokenHandler.CreateJwtSecurityToken(tokenDescriptor);
var jwt = tokenHandler.WriteToken(token);

</code>
  </pre>
  <P>
    如你所见，使用
     <code>
      SecurityAlgorithms.Aes256KW
    </code>
     作为
    <EM>
      密钥加密算法
    </EM>
     和
     <code>
      SecurityAlgorithms.Aes256CbcHmacSha512
    </code>
     作为
    <EM>
      加密演算法
    </EM>
     会做的。请注意，用于加密算法的密钥应具有
     <code>
      256 / 8
    </code>
     长度。
  </p>
</DIV>