是否可以通过此代码在令牌中保存用户角色？

Question

 public class AuthController : ControllerBase
{

    private readonly AuthOptions _authOptions;
    private readonly SignInManager<User> _signInManager;
    private readonly UserManager<User> _userManager;
    private readonly IMapper _mapper;

    public AuthController(IOptions<AuthOptions> authOption, SignInManager<User> signInManager, UserManager<User> userManager,  IMapper mapper)
    {
        _authOptions = authOption.Value;
        _signInManager = signInManager;
        _userManager = userManager;
        _mapper = mapper;
    }

    [AllowAnonymous]
    [HttpPost("login")]
    public async Task<IActionResult> Login([FromBody]UserForLoginDto userLoginDto)
    {
        var checkPassword = await _signInManager.PasswordSignInAsync(userLoginDto.Username, userLoginDto.Password,false,false);

        if (checkPassword.Succeeded)
        {
            var signinCredentials = new SigningCredentials(_authOptions.GetSymmetricSecurityKey(), SecurityAlgorithms.HmacSha256);
            var jwtSecurityToken = new JwtSecurityToken(
                 issuer: _authOptions.Issuer,
                 audience: _authOptions.Audience,
                 claims: new List<Claim>(),
                 expires: DateTime.Now.AddDays(30),
                 signingCredentials: signinCredentials);


            var tokenHandler = new JwtSecurityTokenHandler();

            var encodedToken = tokenHandler.WriteToken(jwtSecurityToken);
            return Ok(new { AccessToken = encodedToken });
        }

        return Unauthorized();
    }


}

我如何找到一个人的角色并将其包含在令牌中，以便可以使用它来授权角色？想法，解决方案？用[Authorize（Role =“ Administrator”）]装饰的控制器返回403，因此我无法识别或无法访问它！

Answer 1

更改您的令牌生成方法，例如

var tokenHandler = new JwtSecurityTokenHandler();
var key = Encoding.ASCII.GetBytes("your secret key");

var tokenDescriptor = new SecurityTokenDescriptor
        {
            Subject = new ClaimsIdentity(new Claim[]
            {
                new Claim(ClaimTypes.Name, "your_user_id"),
                new Claim(ClaimTypes.Role, "your_role_name") //in your case here value "Administrator"
            }),
            Expires = DateTime.UtcNow.AddDays(30),
            SigningCredentials = new SigningCredentials(new SymmetricSecurityKey(key), 
                                              SecurityAlgorithms.HmacSha256Signature)
        };
var token = tokenHandler.CreateToken(tokenDescriptor);
var encodedToken = tokenHandler.WriteToken(token);

然后您可以在角色中使用Authorize标签。

[Authorize (Role = "Administrator")]