如何从 ASPNET Core 控制器获取 JWTToken？

Question

I'm trying to make a request to a protected API, so I need to add a authorization request header to HttpClient like this:

client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", "Your Oauth token");

But how to get the Authentication Token ("Your Oauth token") from a controller?

PS: I am already authenticated to Identity Server 4. Application developed in AspNetCore.

Full code:

    [Authorize] //Already authenticated
    public IActionResult SomeControllerAction()
    {
        var claimsIdentity = User.Identity as ClaimsIdentity; //where is JWTToken??
        var JWTTokne = "how to get?";

        using (var client = new HttpClient())
        {
            client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", JWTTokne);
            var result = client.PostAsync("someurl", new StringContent(json, Encoding.UTF8, "application/json")).Result;
            //more code to handle result....
        }

        return View();
    }

Answer 1

you can get the access token by using:

// Get the access token.
var accessToken = await HttpContext.Authentication.GetTokenAsync("access_token");

var client = new HttpClient();

// Set the access token as the bearer token (Authorization header of the request).

client.SetBearerToken(accessToken);

Answer 2

Core:

var accessToken = await HttpContext.Authentication.GetTokenAsync("access_token");

Or this:

var token = Request.Headers["Authorization"];

For access_token in MVC 5 controller I used:

var token = (User as ClaimsPrincipal).FindFirst("access_token").Value

In the protected web api 2 (not core) method I used:

var access_token = ControllerContext.Request.Headers.Authorization.Parameter;

Answer 3

You can look at the HTTP Context since you're in a controller you can just get the token from the Header at HttpContext.Request.Headers["Authorization"] . This obviously only works if the client has put that header in the request.

Answer 4

With AspNet Core 2.0 and the new authentication system, you simply use the extension methods ontop of HttpContext.

HttpContext context;
await context.GetTokenAsync("access_token")

and in a MVC controller

public class MyController : Controller
{
    public IActionResult Get(){
         var token = await HttpContext.GetTokenAsync("access_token");

    }

}