Integrating JWT in Asp.net web service

Question

Can some one please show me how to integrateJWT into a default Web API project.

They just explain how to install the library using NuGet and how to generate tokens. But now how do I integrate it with an authentication based system?

My implementation so far:

public class WebApiApplication : System.Web.HttpApplication
{
    protected void Application_Start()
    {
        AreaRegistration.RegisterAllAreas();
        GlobalConfiguration.Configure(WebApiConfig.Register);
        FilterConfig.RegisterGlobalFilters(GlobalFilters.Filters);
        RouteConfig.RegisterRoutes(RouteTable.Routes);
        BundleConfig.RegisterBundles(BundleTable.Bundles);
        GlobalConfiguration.Configuration.Filters.Add(new **AuthFilterAttribute()**);
    }
}   


   public class TokenAuthenticationAttribute : System.Web.Http.Filters.ActionFilterAttribute
{
    public override void OnActionExecuting(System.Web.Http.Controllers.HttpActionContext actionContext)
    {
        // In auth web method you should implement functionality of authentication
        // so that client app could be able to get token
        if (actionContext.Request.RequestUri.AbsolutePath.Contains("api/auth"))
        {
            return;
        }

        // Receive token from the client. Here is the example when token is in header:
        var token = **actionContext.Request.Headers["Token"];**

        // Put your secret key into the configuration
        var secretKey = "GQDstcKsx0NHjPOuXOYg5MbeJ1XT0uFiwDVvVBrk";

        try
        {
            string jsonPayload = JWT.JsonWebToken.Decode(token, secretKey);
        }
        catch (JWT.SignatureVerificationException)
        {
            throw new HttpResponseException(HttpStatusCode.Unauthorized);
        }
    }
}

Andrei · Accepted Answer · 2014-03-19 06:26:17Z

4

Implement TokenAuthenticationAttribute and register it globally:

Global.asax registration:

GlobalConfiguration.Configuration.Filters.Add(new TokenAuthenticationAttribute());

TokenAuthenticationAttribute:

public class TokenAuthenticationAttribute : System.Web.Http.Filters.ActionFilterAttribute
{
    public override void OnActionExecuting(System.Web.Http.Controllers.HttpActionContext actionContext)
    {
        // In auth web method you should implement functionality of authentication
        // so that client app could be able to get token
        if (actionContext.Request.RequestUri.AbsolutePath.Contains("api/auth"))
        {
            return;
        }

        // Receive token from the client. Here is the example when token is in header:
        var token = actionContext.Request.Headers["Token"];

        // Put your secret key into the configuration
        var secretKey = "GQDstcKsx0NHjPOuXOYg5MbeJ1XT0uFiwDVvVBrk";

        try
        {
            string jsonPayload = JWT.JsonWebToken.Decode(token, secretKey);
        }
        catch (JWT.SignatureVerificationException)
        {
            throw new HttpResponseException(HttpStatusCode.Unauthorized);
        }    
    }
}

edited Mar 19, 2014 at 6:26

answered Mar 4, 2014 at 13:24

Andrei

44.9k39 gold badges163 silver badges228 bronze badges

Sign up to request clarification or add additional context in comments.

7 Comments

Zapnologica Over a year ago

Could you possibly also add a code block with an example of how to use the token? Ie how do I use it? do i just put a [Authorize] above the controller?

Andrei Over a year ago

@Zapnologica as far as you are registering it globally, your attr will be executed for every request. No need to put attr above every controller. You only have to allow anonymous access to methods like Authenticate etc.

Zapnologica Over a year ago

Ok great. That sounds Ideal. I will give it a try and get back to you. With your example I obviously have to still install it using nuget. then configure it in the global.asax file. Where do I put the TokenAuthenticationAttribute: code?

Andrei Over a year ago

@Zapnologica anywhere you like. Create folder "Attributes" in you project ;)

Andrei Over a year ago

@Zapnologica what the errors? compilation time/runtime?

|

Collectives™ on Stack Overflow

Integrating JWT in Asp.net web service

1 Answer 1

7 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

7 Comments

Your Answer

Sign up or log in

Post as a guest

Related