使用 ASP.Net 核心验证 JWT-bearer 令牌

Question

我正在编写一个使用Microsoft OAuth 2.0进行身份验证的 Web API 项目。 生成的不记名令牌需要在 Startup.cs 中的 Web API 项目中进行验证或认证。

这是解密后的令牌的样子，除了发行者和受众之外，我找不到任何有用的信息。

{
  "typ": "JWT",
  "alg": "RS256",
  "x5t": "oOvcz5M_7p-HjIKlFXz93u_V0Zo"
}. {
  "nameid": "9f3e1329-2717-61ec-78weu-887ed4ccf1f1",
  "scp": "vso.agentpools_manage vso.build_execute vso.code_manage vso.dashboards_manage vso.extension_manage vso.identity vso.project_manage vso.release_manage vso.serviceendpoint_manage vso.taskgroups_manage vso.test_write vso.variablegroups_manage vso.wiki_write vso.work_full",
  "aui": "b021930d-1a1b-4104-890d-ebcdfccdf1ac",
  "appid": "bd8435c5-70d6-418a-e8923-f5595c06290c",
  "iss": "app.vstoken.visualstudio.com",
  "aud": "app.vstoken.visualstudio.com",
  "nbf": 1627395683,
  "exp": 1627399283
}.[Signature]

我一直在尝试使用 Startup.cs 中的以下代码对请求进行身份验证，但总是得到 401。

 services.AddAuthentication(options =>
            {
                options.DefaultScheme = JwtBearerDefaults.AuthenticationScheme;
                options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
            })
             .AddJwtBearer(options =>
             {
                 options.SaveToken = true;
                 options.TokenValidationParameters = new TokenValidationParameters()
                 {
                     ValidateIssuer = true,
                     ValidIssuer = "app.vstoken.visualstudio.com",
                     ValidateAudience = true,
                     ValidAudience = "app.vstoken.visualstudio.com",
                     ValidateIssuerSigningKey = false,
                     IssuerSigningKey = symmetricSecurityKey
                 };
             });

对令牌进行身份验证后，同一令牌将用于 Azure DevOps API 身份验证。

我有些疑惑，

• 是否可以验证使用Microsoft OAuth 2.0生成的令牌
• 如果是，请让我知道我失踪的地方。
• 有没有其他办法可以解决这个问题

添加了更多细节

 .AddJwtBearer(options =>
             {
                 options.SaveToken = true;
                 options.Authority = "https://app.vssps.visualstudio.com/oauth2/authorize";
                 options.Audience = "C00979C5-41E9-40BA-BE30-7B12D4F1D669";
                 options.TokenValidationParameters = new TokenValidationParameters()
                 {
                     ValidateIssuer = true,
                     ValidIssuer = "app.vstoken.visualstudio.com",
                     ValidateAudience = true,
                     ValidAudience = "app.vstoken.visualstudio.com",
                     ValidateIssuerSigningKey = false,
                     IssuerSigningKey = symmetricSecurityKey
                 };
             });

得到以下错误

Content root path: D:\Projects\DevOpsSmartBoardV2\DevOpsSmartBoard\DevOpsSmartBoard
fail: Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerHandler[3]
      Exception occurred while processing message.
      System.InvalidOperationException: IDX20803: Unable to obtain configuration from: 'System.String'.
       ---> System.IO.IOException: IDX20807: Unable to retrieve document from: 'System.String'. HttpResponseMessage: 'System.Net.Http.HttpResponseMessage', HttpResponseMessage.Content: 'System.String'.
         at Microsoft.IdentityModel.Protocols.HttpDocumentRetriever.GetDocumentAsync(String address, CancellationToken cancel)
         at Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectConfigurationRetriever.GetAsync(String address, IDocumentRetriever retriever, CancellationToken cancel)
         at Microsoft.IdentityModel.Protocols.ConfigurationManager`1.GetConfigurationAsync(CancellationToken cancel)
         --- End of inner exception stack trace ---
         at Microsoft.IdentityModel.Protocols.ConfigurationManager`1.GetConfigurationAsync(CancellationToken cancel)
         at Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerHandler.HandleAuthenticateAsync()
fail: Microsoft.AspNetCore.Diagnostics.DeveloperExceptionPageMiddleware[1]
      An unhandled exception has occurred while executing the request.