1. 确保您的API控制器有[Authorize]属性来确保您的API被授权访问。

[Authorize] [HttpGet] public IEnumerable Get() { return new string[] { "value1", "value2" }; }

2. 确保您的startup.cs已配置授权方法

public void ConfigureServices(IServiceCollection services) { services.AddAuthentication(options => { options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme; options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme; }) .AddJwtBearer(options => { options.Authority = "https://your_authority_domain"; options.Audience = "your_audience"; });

services.AddMvc();

}

3. 在API控制器密封子目录上使用[Authorize]属性，在本例中，可能请求的地址为“api / v1 / samples”。

[Authorize] [Route("api/v1/samples")] public class SamplesController : Controller { [HttpGet] public IEnumerable Get() { return new string[] { "value1", "value2" }; } }