[C#/WEB API/.NET5] JWT 토큰에서 클레임 주체 구하기

■ JWT 토큰에서 클레임 주체를 구하는 방법을 보여준다.

▶ 예제 코드 (C#)


using System;
using System.IdentityModel.Tokens.Jwt;
using System.Security.Claims;
using System.Text;

using Microsoft.IdentityModel.Tokens;

#region 클레임 주체 구하기 - GetClaimsPrincipal(token, secretKey)

/// <summary>
/// 클레임 주체 구하기
/// </summary>
/// <param name="token">토큰</param>
/// <param name="secretKey">비밀 키</param>
/// <returns>클레임 주체</returns>
public ClaimsPrincipal GetClaimsPrincipal(string token, string secretKey)
{
    TokenValidationParameters parameters = new()
    {
        ValidateIssuer           = false,
        ValidateAudience         = false,
        ValidateLifetime         = false,
        ValidateIssuerSigningKey = true,
        IssuerSigningKey         = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(secretKey)),
    };

    JwtSecurityTokenHandler tokenHandler = new();

    ClaimsPrincipal principal = tokenHandler.ValidateToken(token, parameters, out SecurityToken securityToken);

    if
    (
        securityToken is not JwtSecurityToken jwtSecurityToken ||
        !jwtSecurityToken.Header.Alg.Equals(SecurityAlgorithms.HmacSha256, StringComparison.InvariantCultureIgnoreCase)
    )
    {
        throw new SecurityTokenException("Invalid token");
    }

    return principal;
}

#endregion

using System;

using System.IdentityModel.Tokens.Jwt;

using System.Security.Claims;

using System.Text;

using Microsoft.IdentityModel.Tokens;

#region 클레임 주체 구하기 - GetClaimsPrincipal(token, secretKey)

/// <summary>

/// 클레임 주체 구하기

/// </summary>

/// <param name="token">토큰</param>

/// <param name="secretKey">비밀 키</param>

/// <returns>클레임 주체</returns>

public ClaimsPrincipal GetClaimsPrincipal(string token, string secretKey)

{

TokenValidationParameters parameters = new()

{

ValidateIssuer = false,

ValidateAudience = false,

ValidateLifetime = false,

ValidateIssuerSigningKey = true,

IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(secretKey)),

};

JwtSecurityTokenHandler tokenHandler = new();

ClaimsPrincipal principal = tokenHandler.ValidateToken(token, parameters, out SecurityToken securityToken);

(

securityToken is not JwtSecurityToken jwtSecurityToken ||

!jwtSecurityToken.Header.Alg.Equals(SecurityAlgorithms.HmacSha256, StringComparison.InvariantCultureIgnoreCase)

)

{

throw new SecurityTokenException("Invalid token");

}

return principal;

}

#endregion