![\".NET](\"http:\/\/naveedu.sg-host.com\/wp-content\/uploads\/2020\/01\/aspnet-core-web-app-template.png\")
<\/figure>\n\n\n\nSelect the project location<\/p>\n\n\n\n Select the project template as “Web Application”. Select Authentication to “Individual user – Store in Application”<\/p>\n\n\n\n Now Visual Studio will create a new project with ASP.NET core identity authentication model. User accounts along with claims are stored in the database. If you run this project you will have the website with login and register functionality. <\/p>\n\n\n\n Now the next step is to create a Web API that uses the same users and generates a unique JWT token for authorization. <\/p>\n\n\n\n Create Login model to use for input parameters for API methods<\/p>\n\n\n\n I have created a new controller in the Controllers folder with the name “AuthController” and created a Login method in this controller. The purpose of this method is; when an API client provides a user name and password to the method this method will generate a token. see the following code snippet …<\/p>\n\n\n\n Now if you can access this API method through Postman. it will give you Jwt token like below<\/p>\n\n\n\n Now you can use this token to access any secure API controller. An example of a secure controller is below.<\/p>\n\n\n\n The above example controller is only accessed by the user of the role “ApiUser”. <\/p>\n","protected":false},"excerpt":{"rendered":" Recently I come across a requirement to create .NET Core Web API using JWT (JSON Web Token) authentication. I have used ASP.NET identity to provide…<\/p>\n","protected":false},"author":1,"featured_media":72,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[11,16,15],"class_list":["post-75","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dot-net-core","tag-dot-net-core","tag-jwt","tag-webapi"],"yoast_head":"\n![\".NET](\"http:\/\/naveedu.sg-host.com\/wp-content\/uploads\/2020\/01\/select-project.png\")
<\/figure>\n\n\n\n![\".NET](\"http:\/\/naveedu.sg-host.com\/wp-content\/uploads\/2020\/01\/web-api-template.png\")
<\/figure>\n\n\n\n![\".NET](\"http:\/\/naveedu.sg-host.com\/wp-content\/uploads\/2020\/01\/home-page-1024x347.png\")
<\/figure>\n\n\n\npublic class LoginModel\n {\n\n [Required(ErrorMessage = \"Email is required\")]\n public string Email { get; set; }\n\n [Required(ErrorMessage = \"Password is required\")]\n public string Password { get; set; }\n }<\/code><\/pre>\n\n\n\n[ApiController]\n [Route(\"Api\/[controller]\")]\n public class AuthController : Controller\n {\n public class AuthenticationController : Controller\n {\n private UserManager<IdentityUser> _userManager;\n\n \/\/private readonly IEmailSender _emailSender; UnComment if you want to add Email Verification also.\n\n public AuthenticationController(\n UserManager<IdentityUser> userManager)\n {\n _userManager = userManager;\n\n }\n\n [HttpPost]\n [Route(\"Login\")]\n public async Task<IActionResult> Login([FromBody] LoginModel model)\n {\n var user = await _userManager.FindByEmailAsync(model.Email);\n if (user != null && await _userManager.CheckPasswordAsync(user, model.Password))\n {\n var tokenHandler = new JwtSecurityTokenHandler();\n\n var tokenDescriptor = new SecurityTokenDescriptor\n {\n Subject = new ClaimsIdentity(new Claim[]{\n new Claim(ClaimTypes.NameIdentifier, user.Id.ToString()),\n new Claim(ClaimTypes.Name, user.Email)\n\n }),\n Issuer = \"https:\/\/yourhostname.com\",\n Audience = \"https:\/\/yourhostname.com\",\n Expires = DateTime.Now.AddDays(1),\n SigningCredentials = new SigningCredentials(new SymmetricSecurityKey(Encoding.UTF8.GetBytes(\"Key-From-Appsettings\")), SecurityAlgorithms.HmacSha512Signature),\n };\n\n var token = tokenHandler.CreateToken(tokenDescriptor);\n return Ok(new\n {\n token = tokenHandler.WriteToken(token),\n expiration = token.ValidTo\n });\n }\n return Unauthorized();\n }\n\n \n\n }\n }<\/code><\/pre>\n\n\n\n![\".NET](\"http:\/\/naveedu.sg-host.com\/wp-content\/uploads\/2020\/01\/postman-call-1024x415.png\")
<\/figure>\n\n\n\n[Authorize(AuthenticationSchemes =\n JwtBearerDefaults.AuthenticationScheme, Roles = \"ApiUser\")]\n [Route(\"Api\/[controller]\")]\n [ApiController]\n public class SecureController : ControllerBase\n {\n private readonly UserManager<IdentityUser> _userManager;\n\n public SecureController(UserManager<IdentityUser> userManager)\n {\n _userManager = userManager;\n }\n\n [HttpGet]\n [Route(\"GetUser\")]\n public async Task<IActionResult> GetMessageAsync()\n {\n var user = await GetCurrentUserAsync();\n if (user != null)\n {\n return Ok(user);\n\n }\n return BadRequest(\"Error\");\n }\n\n #region Helpers\n private async Task<IdentityUser> GetCurrentUserAsync()\n {\n string userName = HttpContext.User.Identity.Name;\n return await _userManager.FindByNameAsync(userName);\n }\n #endregion\n }<\/code><\/pre>\n\n\n\n