JWT .net 核心中的發行者和受眾

Question

Hi everyone I'm trying to do JWT in .net core api and I have a question while configuring JWT in file startup.cs Specifically I want to ask "ValidIssuer" and "ValidAudience" to do, what does it mean for JWT? 有人可以幫助我，謝謝大家。

這是我的代碼：

services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme).AddJwtBearer(option =>
            {
                option.TokenValidationParameters = new TokenValidationParameters
                {
                    // what to validate
                    ValidateIssuer = true,
                    ValidateAudience = true,    
                    ValidateIssuerSigningKey = true,
                    // set up validate data 
                    ValidIssuer = "smesk.in", 
                    ValidAudience = "reader", 
                    IssuerSigningKey = symmetricSecurityKey

                };



            });

Answer 1

它基本上用於您希望允許您的請求的人。 你可以參考這個文檔。

https://docs.microsoft.com/en-us/dotnet/api/microsoft.identitymodel.tokens.tokenvalidationparameters.validaudience?view=azure-dotnet

你可以這樣設置。

services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
    .AddJwtBearer(options =>
    {
        options.TokenValidationParameters = new TokenValidationParameters
        {

            ValidateIssuer = true,
            ValidateAudience = true,
            ValidIssuer = Configuration["Jwt:Issuer"],
            ValidAudience = Configuration["Jwt:Audience"]

        };
    });

應用設置.json

  "Jwt": {
    "Issuer": "test.com",
    "Audience": "abc.com"
  }