Got JWT token working! All is ready!

Author: JohnySeven

Program.cs

@@ -1,15 +1,22 @@
+using Microsoft.AspNetCore.Authentication.JwtBearer;
 using Microsoft.AspNetCore.Http.HttpResults;
 using Microsoft.IdentityModel.Tokens;
 using skipper_paste;
 using System.Text;
 using System.Text.Json;
 
 var builder = WebApplication.CreateBuilder(args);
-
+builder.Logging.AddConfiguration(builder.Configuration.GetSection("Logging"));
+#if DEBUG
+builder.Logging.ClearProviders();
+builder.Logging.AddSimpleConsole();
+builder.Logging.SetMinimumLevel(LogLevel.Trace);
+#endif
 // Add services to the container.
 // Learn more about configuring OpenAPI at https://aka.ms/aspnet/openapi
 builder.Services.AddOpenApi();
 builder.Services.AddCors();
+builder.Services.AddAuthentication();
 builder.Services.AddAuthorizationBuilder()
     .AddPolicy("PasteScope", policy =>
     {
@@ -42,7 +49,7 @@
         issuer: $"https://{domain}",
         audience: "paste",
         claims: claims,
-        expires: DateTime.UtcNow.AddHours(1),
+        expires: DateTime.UtcNow.AddYears(2),
         signingCredentials: creds
     );
 
@@ -54,31 +61,36 @@
 }
 
 //add jwt token validation with secret configured from startup
-builder.Services.AddAuthentication("Bearer")
-    .AddJwtBearer("Bearer", options =>
+builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
+    .AddJwtBearer(options =>
     {
         options.Authority = $"https://{domain}";
         options.Audience = "paste";
         options.RequireHttpsMetadata = false; // For development purposes only,
         options.TokenValidationParameters = new TokenValidationParameters
         {
             ValidateIssuer = true,
-            ValidateAudience = false,
+            ValidateAudience = true,
             ValidateLifetime = true,
             ValidateIssuerSigningKey = true,
+            NameClaimType = System.Security.Claims.ClaimTypes.Name,
             ValidIssuer = $"https://{domain}",
-            IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(secret)),
-            LogValidationExceptions = true
+            IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(secret))
         };
     });
 
 var app = builder.Build();
 
 app.UseCors();
+app.UseAuthentication();
+app.UseAuthorization();
 
+app.Logger.LogInformation("Checking paste directory at {directory}", pasteDirectory);
 
 if (!Directory.Exists(pasteDirectory))
 {
+    app.Logger.LogInformation("Paste directory at {directory} doesn't exist!", pasteDirectory);
+
     Directory.CreateDirectory(pasteDirectory);
 }
 
@@ -92,13 +104,13 @@
 app.UseAuthentication();
 app.UseAuthentication();
 
-app.MapPost("/paste", (PasteData data) =>
+app.MapPost("/paste", (PasteData data, HttpRequest request) =>
 {
     var pasteId = RandomNameGenerator.GenerateRandomName(5);
 
     File.WriteAllText(Path.Combine(pasteDirectory, pasteId + ".json"), JsonSerializer.Serialize(data));
 
-    return Results.Ok(new PasteLink(pasteId, $"{domain}/get/{pasteId}"));
+    return Results.Ok(new PasteLink(pasteId, $"{(request.IsHttps ? "https" : "http")}://{domain}/get/{pasteId}"));
 })
 .WithName("PasteJson")
 .RequireAuthorization();
@@ -118,6 +130,10 @@
         return Results.NotFound("Paste not found");
     }
 });
+    //.RequireRateLimiting();
+
+app.Logger.LogInformation("Starting main http work...");
+
 
 app.Run();
 

appsettings.json

@@ -3,6 +3,15 @@
     "LogLevel": {
       "Default": "Trace",
       "Microsoft.AspNetCore": "Trace"
+    },
+    "Console": {
+      "IncludeScopes": true,
+      "LogLevel": {
+        "Microsoft.AspNetCore.Mvc.Razor.Internal": "Warning",
+        "Microsoft.AspNetCore.Mvc.Razor.Razor": "Debug",
+        "Microsoft.AspNetCore.Mvc.Razor": "Error",
+        "Default": "Trace"
+      }
     }
   },
   "AllowedHosts": "*",

skipper-paste.http

@@ -1,6 +1,6 @@
 @skipper_paste_HostAddress = http://localhost:5051
 
-GET {{skipper_paste_HostAddress}}/get/test
+GET {{skipper_paste_HostAddress}}/get/WT6cD
 Accept: application/json
 
 ###
@@ -9,8 +9,10 @@ Accept: application/json
 
 POST {{skipper_paste_HostAddress}}/paste
 Content-Type: application/json
-Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzY29wZSI6InBhc3RlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvbmFtZSI6InBhc3RlLXVzZXIiLCJleHAiOjE3NTM2MDA4NDYsImlzcyI6Imh0dHBzOi8vbG9jYWxob3N0OjcwODEiLCJhdWQiOiJwYXN0ZSJ9.2F50Z1gO6ERvznvGPFho7ieTj3lFkWKU0ZuIpMbwASM
+x-test: aaaa
+Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzY29wZSI6InBhc3RlIiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvbmFtZSI6InBhc3RlLXVzZXIiLCJleHAiOjE4MTY2NzY4NDIsImlzcyI6Imh0dHBzOi8vbG9jYWxob3N0OjcwODEiLCJhdWQiOiJwYXN0ZSJ9.0YqiOmDpnZuE3j8AWYswd8KslPq9H-8Rrg3YK2G040E
+
 {
-  "key": "aaaa",
-  "value": "bbbb"
+  "Content": "aaaa",
+  "Note": "bbbb"
 }