Ocelot API 网关认证总是返回401未授权

Question

我使用 .net 6 并且构建了微服务应用程序。 我有 2 个服务 AuthAPI，MovieAPI。 我使用 Ocelot API 网关。 当我通过 Ocelot API 网关向带有 jwt 令牌的 MovieAPI 服务发送请求时。 Postman 返回 401 未经授权。 我添加到 program.cs app.UseAuthentication()。

豹猫.json

{
  "Routes": [
    // Movie API
    {
      "DownstreamPathTemplate": "/{url}",
      "DownstreamScheme": "https",
      "DownstreamHostAndPorts": [
        {
          "Host": "localhost",
          "Port": 44372
        }
      ],
      "UpstreamPathTemplate": "/{url}",
      "UpstreamHttpMethod": [ "GET" ]
    },
    {
      "DownstreamPathTemplate": "/api/genres",
      "DownstreamScheme": "https",
      "DownstreamHostAndPorts": [
        {
          "Host": "localhost",
          "Port": 44372
        }
      ],
      "UpstreamPathTemplate": "/genre",
      "UpstreamHttpMethod": [ "POST", "PUT", "GET" ]
    },
    {
      "DownstreamPathTemplate": "/api/Movies",
      "DownstreamScheme": "https",
      "DownstreamHostAndPorts": [
        {
          "Host": "localhost",
          "Port": 44372
        }
      ],
      "UpstreamPathTemplate": "/movie",
      "UpstreamHttpMethod": [ "POST", "PUT", "GET" ],
      "AuthenticationOptions": {
        "AuthenticationProviderKey": "Bearer",
        "AllowedScopes": []
      }
    },
    // Auth API
    {
      "DownstreamPathTemplate": "/api/Auth/login",
      "DownstreamScheme": "https",
      "DownstreamHostAndPorts": [
        {
          "Host": "localhost",
          "Port": 44332
        }
      ],
      "UpstreamPathTemplate": "/login",
      "UpstreamHttpMethod": [ "POST", "GET" ]
    },
    {
      "DownstreamPathTemplate": "/api/Auth/register",
      "DownstreamScheme": "https",
      "DownstreamHostAndPorts": [
        {
          "Host": "localhost",
          "Port": 44332
        }
      ],
      "UpstreamPathTemplate": "/register",
      "UpstreamHttpMethod": [ "POST", "GET" ]
    }
  ],
  "GlobalConfiguration": {}
}

MovieAPI GetAll中的授权

[HttpGet]
        [Authorize]
        public IActionResult GetAll()
        {
            var result = _movieService.GetAll().Result;
            if (result.Success)
            {
                return Ok(result);
            }
            return BadRequest(result);
        }

Program.cs 令牌选项（用于 OcelotAPI 和 MovieAPI）

public static void AddCustomJwtAuthentication(this IServiceCollection services, TokenOptions tokenOptions)
        {
            services.AddAuthentication(options =>
            {
                options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
                options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
            }).AddJwtBearer(options =>
            {
                options.TokenValidationParameters = new TokenValidationParameters
                {
                    ValidateIssuer = true,
                    ValidateAudience = true,
                    ValidateLifetime = true,
                    ValidIssuer = tokenOptions.Issuer,
                    ValidAudience = tokenOptions.Audience,
                    ValidateIssuerSigningKey = true,
                    IssuerSigningKey = SecurityKeyHelper.CreateSecurityKey(tokenOptions.SecurityKey!)
                };
            });
        }

令牌选项

"TokenOptions": {
    "Audience": "murat@murat.com",
    "Issuer": "murat@murat.com",
    "AccessTokenExpiration": 10,
    "SecurityKey": "mytopsecretkeymytopsecretkey"
  }

当我发送带有令牌的请求时。 不返回数据，返回 401 状态。 登录获取令牌使用令牌并发送授权方法请求

代币

eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9uYW1laWRlbnRpZmllciI6ImMyOTA3ZTFlLTI4ZGYtNGI1MC04Y2IxLWFmMDVjN2Q5YjU2OCIsImVtYWlsIjoidGVzdEB0ZXN0LmNvbSIsImh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDUvaWRlbnRpdHkvY2xhaW1zL25hbWUiOiJ0ZXN0IHRlc3QiLCJuYmYiOjE2NzQzNzU3MzgsImV4cCI6MTY3NTIzOTczOCwiaXNzIjoibXVyYXRAbXVyYXQuY29tIiwiYXVkIjoibXVyYXRAbXVyYXQuY29tIn0.z2GWpd1QHzt_DJyNh-595CINAivK7KADBHvXQjJbIy1THKokyf_Ew1_xFTRY8595yKtcHaCSQPY4zH9r4GQ4jQ,

Answer 1

我将此代码添加到 OcelotAPI 的 Program.cs 文件并解决了问题。

OcelotAPI --> Program.cs

app.UseOcelot(new OcelotPipelineConfiguration {
    AuthenticationMiddleware = async (cpt, est) =>
    {
        await est.Invoke();
    }
});