在应用程序的Startup.cs文件中,添加以下代码:
services.AddAuthentication(options =>
{
options.DefaultAuthenticateScheme = "Bearer";
options.DefaultChallengeScheme = "Bearer";
})
.AddJwtBearer(options =>
{
options.Authority = "https://{your-auth0-domain}.auth0.com/";
options.Audience = "{your-auth0-audience}";
options.RequireHttpsMetadata = false;
options.TokenValidationParameters = new TokenValidationParameters
{
ValidateIssuerSigningKey = true,
IssuerSigningKey = new SymmetricSecurityKey(Encoding.ASCII.GetBytes(Configuration["Auth0:ClientSecret"])),
ValidateIssuer = true,
ValidAudience = "{your-auth0-audience}",
ValidateAudience = true
};
});
注意替换{your-auth0-domain}和{your-auth0-audience}以及在appsettings.json文件或其他位置设置“Auth0:ClientSecret”指定的客户端密钥。