C#中使用JWT实现WabApi的权限控制

首先需要在你的项目中引入JWT，你只需要在nuget中安装JWT，JWT依赖于.NET  Framwork 4.6以上版本，所以你的webapi项目也需要.NET Framwork4.6以上版本，我这里做法如下：

    /// <summary>
    /// 验证是否含有token
    /// </summary>
    public class ApiAuthorizeAttribute : AuthorizeAttribute
    {
        private UserIBLL userBll = new UserBLL();
        /// <summary>
        /// 验证是否授权
        /// </summary>
        /// <param name="actionContext"></param>
        /// <returns></returns>
        protected override bool IsAuthorized(HttpActionContext actionContext)
        {
            //获取header头信息
            IEnumerable<string> tokenInfo;
            actionContext.Request.Headers.TryGetValues("Token", out tokenInfo);
            IEnumerable<string> id;
            actionContext.Request.Headers.TryGetValues("id", out id);
            if (tokenInfo != null)
            {
                string token = tokenInfo.ToList<string>()[0];
                var userid = id.ToList<string>()[0];
                if (!string.IsNullOrEmpty(token))
                {
                    try
                    {
                        UserEntity userEntity = userBll.GetEntityByUserId(id.ToList<string>()[0]);
                        if (userEntity == null)
                        {
                            return false;
                        }
                        IJsonSerializer serializer = new JsonNetSerializer();
                        IDateTimeProvider provider = new UtcDateTimeProvider();
                        IJwtValidator validator = new JwtValidator(serializer, provider);
                        IBase64UrlEncoder urlEncoder = new JwtBase64UrlEncoder();
                        IJwtDecoder decoder = new JwtDecoder(serializer, validator, urlEncoder);
                        var json = decoder.Decode(token, userEntity.Secret, verify: true);
                        if (string.IsNullOrEmpty(json))
                        {
                            return false;
                        }
                        var newModel = json.ToObject<UserEntity>();
                        if (newModel.F_UserId != userEntity.F_UserId || newModel.Secret != userEntity.Secret)
                        {
                            return false;
                        }
                        return true;
                    }
                    catch (Exception)
                    {
                        return false;
                    }
                }
            }
            return false;
        }
    }