Asp.Net WebApi核心2.0身份与JWTBearer没有cookie

Question

I'm building Web service using ASP.Net Core WebApi. I would like to use Identity and also JWTBearer authentication. My code in ConfigureService method of Startup class id:

services.AddIdentity<User, Role>()
      .AddDefaultTokenProviders();

  //JwtSecurityTokenHandler.DefaultInboundClaimTypeMap.Clear();

  services.AddAuthentication(options =>
  {
    options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
  })
  .AddJwtBearer(options =>
  {
    options.RequireHttpsMetadata = false;
    options.SaveToken = true;
    options.Audience = Configuration.GetSection("JwtIssuer").Value;
    options.ClaimsIssuer = Configuration.GetSection("JwtIssuer").Value;
    options.TokenValidationParameters = new TokenValidationParameters
    {
      ValidateIssuer = true,
      ValidateAudience = true,
      ValidateLifetime = true,
      ValidateIssuerSigningKey = true,
      ValidIssuer = Configuration["JwtIssuer"],
      ValidAudience = Configuration["JwtIssuer"],
      IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(Configuration["JwtKey"]))
    };
  });

Configure method of Startup class contains:

if (env.IsDevelopment())
{
    app.UseDeveloperExceptionPage();
}
app.UseAuthentication();
app.UseMvc();

My problem is that when I call signInManager.PasswordSignInAsync it include cookie with authentication token to response. But i Would like only to use JwtBearer in header. Is there any option how to disable cookies for SignInManager ?

Answer 1

使用SignInManager.CheckPasswordSignInAsync() ：它执行完全相同的检查，但与SignInManager.PasswordSignInAsync不同，不返回任何cookie。