JSON Web Token 及其结构

JWT 头部

1{
2  "alg": "RS256",
3  "kid": "yGopdgOC0Lmd8pzj7MxA2w",
4  "typ": "at+jwt"
5}

JWT 负载

1{
2  "nbf": 1671040821,
3  "exp": 1671044421,
4  "iss": "https://localhost:5001",
5  "client_id": "aspNetCoreAuth",
6  "sub": "14556fa4-52aa-4e9c-9f59-27e68fa045cc",
7  "auth_time": 1671040819,
8  "idp": "local",
9  "email": "adminuser@example.com",
10  "name": "adminuser",
11  "role": [
12    "admin",
13    "user"
14  ],
15  "admin": "true",
16  "scope": [
17    "openid",
18    "profile"
19  ],
20  "amr": [
21    "pwd"
22  ]
23}

签名验证公式

1RSASHA256(
2  base64UrlEncode(header) + "." + base64UrlEncode(payload),
3  public key,
4  private key)