1

Yes.Infrastructure/Authorizations/AuthenticationHandler.cs

@@ -0,0 +1,81 @@
+namespace Yes.Infrastructure.Authorizations
+{
+    public class AuthenticationHandler : IAuthenticationHandler
+    {
+
+        private Microsoft.AspNetCore.Authentication.AuthenticationScheme _scheme;
+        private HttpContext _context;
+        private readonly IJwtProvider _jwtProvider;
+
+        public AuthenticationHandler(IJwtProvider jwtProvider)
+        {
+            _jwtProvider = jwtProvider;
+        }
+
+        public Task InitializeAsync(Microsoft.AspNetCore.Authentication.AuthenticationScheme scheme, HttpContext context)
+        {
+            _scheme = scheme;
+            _context = context;
+            return Task.CompletedTask;
+        }
+
+
+        /// <summary>
+        /// 鉴权验证
+        /// </summary>
+        /// <returns></returns>
+        public async Task<AuthenticateResult> AuthenticateAsync()
+        {
+            string token = _context.Request.Headers.Authorization.ToString();
+            if (token.StartsWith("Bearer ", StringComparison.OrdinalIgnoreCase))
+            {
+                token = token.Substring("Bearer ".Length).Trim();
+            }
+
+            if (string.IsNullOrEmpty(token))
+            {
+                return await Task.FromResult(AuthenticateResult.Fail("token错误，请重新登录！"));
+            }
+
+            var claimsIdentity = await _jwtProvider.ReadToken(token);
+
+            if (claimsIdentity == null)//验证token是否正确
+            {
+                return await Task.FromResult(AuthenticateResult.Fail("token错误，请重新登录！"));
+            }
+
+            var schemeName = _scheme.Name;
+
+            //鉴权成功，写入用户信息
+            return await Task.FromResult(AuthenticateResult.Success(new AuthenticationTicket(claimsIdentity, _scheme.Name)));
+        }
+
+        /// <summary>
+        /// 未登录
+        /// </summary>
+        /// <param name="properties"></param>
+        /// <returns></returns>
+        /// <exception cref="NotImplementedException"></exception>
+        public Task ChallengeAsync(AuthenticationProperties? properties)
+        {
+            _context.Response.StatusCode = 401;
+            return Task.CompletedTask;
+        }
+
+
+
+
+        /// <summary>
+        /// 没有权限访问
+        /// </summary>
+        /// <param name="properties"></param>
+        /// <returns></returns>
+        public Task ForbidAsync(AuthenticationProperties? properties)
+        {
+            _context.Response.StatusCode = 403;
+            return Task.CompletedTask;
+
+        }
+
+    }
+}