JWT Token Expiration and Authorization

Question

JWT Token Expiration and Authorization

Ronald Rex 1,651

I am working with a JWT in .Net Core 6.0 Web Api. I am struggling with JWT expiration time...not sure if it is being set correctly with the UTC being different from my loacl time. But I also am having an issue with not being able to run an API Method after I Annotate the Method with [Authorize], even though I generate a token and send it with the request in postman. Really odd behavior with the JWT and expiration. Thanks for any help !!!

AgaveJoe 31,181 Reputation points

2022-05-11T19:31:40.05+00:00

It's hard to provide assistance without the source code.

Ronald Rex 1,651

//Jwt Authentication

                var key = Encoding.UTF8.GetBytes(Configuration["ApplicationSettings:JWT_Secret"].ToString());
                services.AddAuthentication(x =>
                {
                    x.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
                    x.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
                    x.DefaultScheme = JwtBearerDefaults.AuthenticationScheme;

                }).AddJwtBearer(x =>
                {
                    x.RequireHttpsMetadata = false;
                    x.SaveToken = false;
                    x.TokenValidationParameters = new Microsoft.IdentityModel.Tokens.TokenValidationParameters
                    {
                        ValidateIssuerSigningKey = true,
                        IssuerSigningKey = new SymmetricSecurityKey(key),
                        ValidateIssuer = true,
                        ValidateAudience = true,
                        ValidateLifetime = true,
                        ClockSkew = TimeSpan.Zero
                    };
                });

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Ronald Rex 1,651

[HttpGet("GetAllUser")]
        [Authorize]
        public async Task<object> GetAllUser() 
        {
            try
            {

                var AllUsersandRoles = new List<AllUsersandRoles>();
                var users = _userManager.Users.ToList();
                foreach (var user in users)
                {


                }

                return await Task.FromResult(new ResponseModel(ResponseCode.OK,"Succesful Call To GetAllUser( )",AllUsersandRoles));
            }
            catch (Exception ex)
            {
                //return await Task.FromResult(ex.Message);
                return await Task.FromResult(new ResponseModel(ResponseCode.Error,ex.Message,null));

            }

        }

3 answers

Your answer

AgaveJoe 31,181 Reputation points

2022-05-11T19:31:40.05+00:00

It's hard to provide assistance without the source code.
Ronald Rex 1,651 Reputation points

2022-05-12T02:33:25.497+00:00

//Jwt Authentication var key = Encoding.UTF8.GetBytes(Configuration["ApplicationSettings:JWT_Secret"].ToString()); services.AddAuthentication(x => { x.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme; x.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme; x.DefaultScheme = JwtBearerDefaults.AuthenticationScheme; }).AddJwtBearer(x => { x.RequireHttpsMetadata = false; x.SaveToken = false; x.TokenValidationParameters = new Microsoft.IdentityModel.Tokens.TokenValidationParameters { ValidateIssuerSigningKey = true, IssuerSigningKey = new SymmetricSecurityKey(key), ValidateIssuer = true, ValidateAudience = true, ValidateLifetime = true, ClockSkew = TimeSpan.Zero }; });
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Ronald Rex 1,651 Reputation points

2022-05-12T02:58:43.06+00:00

[HttpGet("GetAllUser")] [Authorize] public async Task<object> GetAllUser() { try { var AllUsersandRoles = new List<AllUsersandRoles>(); var users = _userManager.Users.ToList(); foreach (var user in users) { } return await Task.FromResult(new ResponseModel(ResponseCode.OK,"Succesful Call To GetAllUser( )",AllUsersandRoles)); } catch (Exception ex) { //return await Task.FromResult(ex.Message); return await Task.FromResult(new ResponseModel(ResponseCode.Error,ex.Message,null)); } }

Answer 1

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Answer 2

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Answer 3

Bruce (SqlWork.com) 85,416

typically an access token is good for 60 minutes. does the token have the scope to call the method? it a valid access token or an id token?

0 comments