How Can I Implement Multiple JWT Bearer Authentication Schemes in ASP.NET Core 2?

Implementing Multiple JWT Bearer Authentication in ASP.NET Core 2

The Challenge: How can we enable API access from multiple external services using different JWT token issuers within ASP.NET Core 2? Specifically, we need to support authentication from both Firebase and a custom JWT provider.

The Solution: ASP.NET Core's flexibility allows for configuring multiple authentication schemes, thus enabling authentication from various JWT sources. Here's how:

Correctly Using AddAuthentication

The common mistake is calling AddAuthentication without parameters. For multiple authentication schemes, you must use the overload accepting a string parameter representing the scheme name.

Configuring Multiple JWT Bearer Schemes

Utilize AddJwtBearer multiple times, once for each authentication scheme (e.g., "Firebase" and "Custom"). Within each call, specify the Authority and TokenValidationParameters specific to each JWT issuer.

Modifying the Default Authorization Policy

The default authentication policy needs updating to accommodate the multiple schemes. Use AddAuthorization to configure policies, including the DefaultPolicy. Ensure both "Firebase" and "Custom" schemes are included in the DefaultPolicy.

Code Example

This example demonstrates the proper configuration:

services
    .AddAuthentication()
    .AddJwtBearer("Firebase", options =>
    {
        // Configure Firebase JWT authentication settings here
    })
    .AddJwtBearer("Custom", options =>
    {
        // Configure Custom JWT authentication settings here
    });

services
    .AddAuthorization(options =>
    {
        options.DefaultPolicy = new AuthorizationPolicyBuilder()
            .RequireAuthenticatedUser()
            .AddAuthenticationSchemes("Firebase", "Custom")
            .Build();
    });

Advanced Authorization Scenarios

For intricate authorization needs, leverage policy-based authorization. This lets you create policies specifying authentication schemes and claim requirements.

.NET Core 6 and Beyond

Newer .NET Core versions require a default authentication scheme to be specified in AddAuthentication.

The above is the detailed content of How Can I Implement Multiple JWT Bearer Authentication Schemes in ASP.NET Core 2?. For more information, please follow other related articles on the PHP Chinese website!