添加项目文件。

QYZH.InteractiveMagazine.Infrastructure/Auth/JwtHelper.cs

@@ -0,0 +1,71 @@
+using Microsoft.IdentityModel.Tokens;
+using QYZH.InteractiveMagazine.Models.Settings;
+using System.IdentityModel.Tokens.Jwt;
+using System.Security.Claims;
+using System.Text;
+
+namespace QYZH.InteractiveMagazine.Infrastructure.Auth;
+
+/// <summary>
+/// JWT工具类
+/// </summary>
+public static class JwtHelper
+{
+    /// <summary>
+    /// 生成JWT令牌
+    /// </summary>
+    /// <param name="userId">用户ID</param>
+    /// <param name="userName">用户名</param>
+    /// <param name="settings">JWT配置</param>
+    /// <returns>JWT令牌字符串</returns>
+    public static string GenerateToken(long userId, string userName, JwtSettings settings)
+    {
+        var claims = new[]
+        {
+            new Claim(JwtRegisteredClaimNames.Sub, userId.ToString()),
+            new Claim(JwtRegisteredClaimNames.Name, userName),
+            new Claim(JwtRegisteredClaimNames.Jti, Guid.NewGuid().ToString()),
+            new Claim(ClaimTypes.NameIdentifier, userId.ToString()),
+            new Claim(ClaimTypes.Name, userName)
+        };
+
+        var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(settings.SecretKey!));
+        var credentials = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
+
+        var token = new JwtSecurityToken(
+            issuer: settings.Issuer,
+            audience: settings.Audience,
+            claims: claims,
+            expires: DateTime.Now.AddMinutes(settings.ExpiryMinutes),
+            signingCredentials: credentials
+        );
+
+        return new JwtSecurityTokenHandler().WriteToken(token);
+    }
+
+    /// <summary>
+    /// 验证JWT令牌
+    /// </summary>
+    /// <param name="token">JWT令牌</param>
+    /// <param name="settings">JWT配置</param>
+    /// <returns>ClaimsPrincipal对象</returns>
+    public static ClaimsPrincipal ValidateToken(string token, JwtSettings settings)
+    {
+        var tokenHandler = new JwtSecurityTokenHandler();
+        var key = Encoding.UTF8.GetBytes(settings.SecretKey!);
+
+        var validationParameters = new TokenValidationParameters
+        {
+            ValidateIssuer = true,
+            ValidIssuer = settings.Issuer,
+            ValidateAudience = true,
+            ValidAudience = settings.Audience,
+            ValidateIssuerSigningKey = true,
+            IssuerSigningKey = new SymmetricSecurityKey(key),
+            ValidateLifetime = true,
+            ClockSkew = TimeSpan.Zero
+        };
+
+        return tokenHandler.ValidateToken(token, validationParameters, out _);
+    }
+}