How to add userid to payload when generate access token usin

problem

How to add UserId to payload when generate access Token Using JWT asp.net core 2.2 ?

i make function generate access token but i need to modify it to have or load userid on payload and get result as json ?

how to do that if possible ?

I need if string userid paramters have values add it to payload of generate access token .

What I have tried:

public string GenerateTokens(string userId)
{
var Claims = new Claim[]
{
new Claim(JwtRegisteredClaimNames.Sub,userId)
};
var signingkey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes("this is secret phrase"));
var SigningCredntials = new SigningCredentials();
var Jwt = new JwtSecurityToken();
return new JwtSecurityTokenHandler().WriteToken(Jwt);
}
configure service on startup
public void ConfigureServices(IServiceCollection services)
{
//=================This Setting Related To generate Access Token Data===============
var signingkey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes("this is secret phrase"));
services.AddAuthentication(options => {
options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
}).AddJwtBearer(cfg =>
{
cfg.RequireHttpsMetadata = false;
cfg.SaveToken = false;
cfg.TokenValidationParameters = new Microsoft.IdentityModel.Tokens.TokenValidationParameters()
{
IssuerSigningKey = signingkey,
ValidateAudience = false,
ValidateIssuer = false,
ValidateLifetime = false,
ValidateIssuerSigningKey = true
};
});
services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_2);
}

Dear ,

In that case you have to make own class model to retrun json. like

[HttpPost]
public async Task<object> Login([FromBody] LoginDto model)
{
var result = await _signInManager.PasswordSignInAsync(model.Email, model.Password, false, false);
Model.Security.Response response = new Response();
Model.Error error = new Model.Error();
if (result.Succeeded)
{
var appUser = _userManager.Users.SingleOrDefault(r => r.Email == model.Email);
string token = GenerateJwtToken(model.Email, appUser).ToString();
LoginResponse loginResponse = new LoginResponse();
loginResponse.Ref_guid = appUser.Id;
loginResponse.token = token;
response.ResponseStatus = 0;
response.Result = loginResponse;
response.Error = error;
return response;
}
else
{
error.ErrorCode = 1001;
error.ErrorMessage = "Invalid login.";
response.Error = error;
response.ResponseStatus = 1;
response.TraceId = Guid.NewGuid().ToString();
return response;
}
}

so in that method you can return to user with toekn and userid.

NOTE:- As secuirty point of view there is no need to retunr userid to user request call. when User or client make request with token if token is valid then api autometic check user validation and server side you can get user infomation with claim and other fileds.

Thanks

Dharmesh

1 Reply

Know the answer? Post it — somebody with the same question will find it here.

Dharmesh Sharma7y ago
Dear ,

In that case you have to make own class model to retrun json. like
[HttpPost]
       public async Task<object> Login([FromBody] LoginDto model)
       {
           var result = await _signInManager.PasswordSignInAsync(model.Email, model.Password, false, false);
           Model.Security.Response response = new Response();
           Model.Error error = new Model.Error();
           if (result.Succeeded)
           {
               var appUser = _userManager.Users.SingleOrDefault(r => r.Email == model.Email);

               string token = GenerateJwtToken(model.Email, appUser).ToString();

               LoginResponse loginResponse = new LoginResponse();
               loginResponse.Ref_guid = appUser.Id;
               loginResponse.token = token;

               response.ResponseStatus = 0;
               response.Result = loginResponse;
               response.Error = error;
               return response;

           }
           else
           {

               error.ErrorCode = 1001;
               error.ErrorMessage = "Invalid login.";
               response.Error = error;
               response.ResponseStatus = 1;
               response.TraceId = Guid.NewGuid().ToString();
               return response;
           }


       }
so in that method you can return to user with toekn and userid.
NOTE:- As secuirty point of view there is no need to retunr userid to user request call. when User or client make request with token if token is valid then api autometic check user validation and server side you can get user infomation with claim and other fileds.

Thanks
Dharmesh