用Token令牌维护微服务之间的通信安全的实现

public class TokenClaims
{
/// <summary>
/// token的发行者
/// </summary>
public string Iss { get; set; }
/// <summary>
/// 用户权限
/// </summary>
public string Role { get; set; }
/// <summary>
/// 用户名
/// </summary>
public string Usr { get; set; }
/// <summary>
/// 签发时间 秒
/// </summary>
public long Iat { get; set; }
/// <summary>
/// 到期时间 秒
/// </summary>
public long Exp { get; set; }
/// <summary>
/// 唯一标识
/// </summary>
public string SingleStr { get; set; }
}

public static TokenResult MakeToken(string RequestParam, string PrimaryKey = null)
{
try
{
dynamic p = JsonConvert.DeserializeObject(RequestParam);
string RequestAuth = p.RequestAuth;//请求人信息
string DesAuth;//解密后的author
if (PrimaryKey == null)
DesAuth = RSAHelper.Decrypt(RequestAuth, Config_PrimaryKey);
else
DesAuth = RSAHelper.Decrypt(RequestAuth, PrimaryKey);

#region 请求历史是否有重复
if (MakeTokenParamHistory.Contains(DesAuth))
{
ToolFactory.LogHelper.Info("生成token身份验证失败:该请求的字符串与之前重复：" + DesAuth);
return new TokenResult() { Success = false, Error_Message = "请求数据非法" };
}
MakeTokenParamHistory.Insert(0, DesAuth);
if (MakeTokenParamHistory.Count 1000)
MakeTokenParamHistory.RemoveRange(1000, MakeTokenParamHistory.Count - 1000);
#endregion

string ReqAuthId = DesAuth.Substring(DesAuth.Length - 46, 10);//请求人身份标识
long reqTimespan = long.Parse(DesAuth.Substring(0, DesAuth.Length - 46));  //客户端请求时间秒数

if (!ValidTokenAuth(ReqAuthId))
{
ToolFactory.LogHelper.Info("生成token身份验证失败:DesAuth" + DesAuth);
return new TokenResult() { Success = false, Error_Message = "身份验证失败" };
}

if ((TimeHelper.GetTimeSecond() - reqTimespan) ReqToken_OverTime)
{
ToolFactory.LogHelper.Info("生成token请求时间超时:DesAuth" + DesAuth);
return new TokenResult() { Success = false, Error_Message = "请求时间超时" };
}
string uname = TokenBuilder.CreateUserName(ReqAuthId);
long TokenOverTime = Token_OverTime;
if (AuthMapOverTime != null && AuthMapOverTime.ContainsKey(ReqAuthId))
TokenOverTime = AuthMapOverTime[ReqAuthId];
string tokenStr = TokenBuilder.CreateTokenStr("jwt", ReqAuthId, uname, TokenOverTime);
ToolFactory.LogHelper.Notice("生成token:" + tokenStr);
ToolFactory.CacheHelper.SetCache("ServiceTokenCacheKey_" + uname, tokenStr, TimeSpan.FromSeconds(TokenOverTime + 600)); //多存600秒
return new TokenResult() { Success = true, Token = AesHelper.Encrypt(tokenStr) }; ;
}
catch (Exception ex)
{
ToolFactory.LogHelper.Error("生成token出现异常", ex);
return new TokenResult() { Success = false, Error_Message = "错误的请求：" + ex.Message };
}
}

/// <summary>
/// 验证客户端发来的token是否有效
/// </summary>
/// <param name="header"></param>
/// <returns></returns>
public static ValidTokenResult ValidClientToken(HttpRequestHeaders header)
{
if (header.Authorization == null || header.Authorization.Parameter == null)
{
return new ValidTokenResult() { Success = false, Message = "not exit token" };
}
string tokenStr = AesHelper.Decrypt(header.Authorization.Parameter);
//ToolFactory.LogHelper.Notice("接收到带token的请求:" + tokenStr);
TokenClaims tcParam = TokenBuilder.ParseTokenClaims(tokenStr);
TokenClaims tcCache = TokenBuilder.ParseTokenClaims(ToolFactory.CacheHelper.GetCache<string>("ServiceTokenCacheKey_" + tcParam.Usr));
if (tcCache != null)
{
if (TokenIsTimeLoss(tcCache.Exp))
{
ToolFactory.LogHelper.Info("token过时,token:" + tokenStr);
return new ValidTokenResult() { Success = false, Message = "token过时" };
}
else if (tcCache.SingleStr != tcParam.SingleStr)
{
ToolFactory.LogHelper.Info("token不正确,token:" + tokenStr);
return new ValidTokenResult() { Success = false, Message = "token不正确" };
}
else
{
return new ValidTokenResult() { Success = true };
}
}
else
{
ToolFactory.LogHelper.Info("ValidClientToken未授权的用户,token:" + tokenStr);
return new ValidTokenResult() { Success = false, Message = "未授权的用户" };
}
}