/// <summary>
        /// JWT Token构建所需要的参数
        /// </summary>
        public class JWTTokenParamter
        {
            public JWTTokenParamter()
            {
                ExpirationInterval = TimeSpan.FromMinutes(30);
            }

            /// <summary>
            /// Token加密用的私钥，该私钥不能泄露出去
            /// </summary>
            public string SecretKey { get; set; }

            /// <summary>
            /// Token密钥颁发者
            /// </summary>
            public string Issuer { get; set; }

            /// <summary>
            /// Token接收者
            /// </summary>
            public string Audience { get; set; }

            /// <summary>
            /// Token距离生效时间的过期时间间隔，默认30分钟
            /// </summary>
            public TimeSpan ExpirationInterval { get; set; }
        }

        //以下代码在 Startup.cs 类中

        //引入命名空间
        using Microsoft.AspNetCore.Authentication.JwtBearer;
        using Microsoft.IdentityModel.Tokens;

        //注入和配置中间件服务   
        public void ConfigureServices(IServiceCollection services)
        {
            //从配置文件 appsettings.json 中读取JWT相关的配置项
            var token = Configuration.GetSection("JWTTokenParamter").Get<JWTTokenParamter>();
            
            services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme).AddJwtBearer(options =>
            {
                options.SaveToken = true;
                options.TokenValidationParameters = new TokenValidationParameters()
                {
                    ValidateIssuer = false,//是否验证Issuer
                    ValidateAudience = false,//是否验证Audience
                    ValidateLifetime = false,//是否验证失效时间
                    ClockSkew = TimeSpan.FromMinutes(30),
                    ValidateIssuerSigningKey = false,//是否验证SecurityKey
                    ValidAudience = token.Audience,//Audience
                    ValidIssuer = token.Issuer,//Issuer，这两项和前面签发jwt的设置一致
                    IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(token.SecretKey))//拿到SecurityKey
                };
            });

            //省略其它代码
        }

        //配置中间件管道。注意，中间件管道是有顺序的，所以这边贴完整代码
        public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
        {
            if (env.IsDevelopment())
            {
                app.UseDeveloperExceptionPage();
            }
            //app.UseHttpsRedirection();
            //开启令牌验证，注意和UseAuthorization区分
            app.UseAuthentication();
            app.UseRouting();
            app.UseCors();
            //开启身份授权，开启后Authorize特性才会生效，否则会报错。.net5已经把身份授权集成到框架了，net core 2.2不需要此项
            app.UseAuthorization();
            app.UseEndpoints(endpoints =>
            {
                endpoints.MapControllers();
            });
        }

        /// <summary>
        /// 创建JWT令牌
        /// </summary>
        /// <param name="tokenParamter"></param>
        /// <param name="claims">自定义的TOKEN负载的信息</param>
        /// <returns></returns>
        public static string CreateJWTToken(JWTTokenParamter tokenParamter, Claim[] claims)
        {
            //声明一个对称密钥
            var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(tokenParamter.SecretKey));
            //以HmacSha256进行加密，生成签名凭证
            var credentials = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
            
            var notBeforeTime = DateTime.Now;  //生效时间
            //生成JWT令牌Token
            var jwtToken = new JwtSecurityToken(tokenParamter.Issuer, tokenParamter.Audience, claims, notBeforeTime, notBeforeTime + tokenParamter.ExpirationInterval, credentials);
            //将Token转成Json
            return new JwtSecurityTokenHandler().WriteToken(jwtToken);
        }        

    [ApiController]
    //在此处增加需要授权访问的特性标签
    [Authorize]
    [EnableCors]
    [Route("[controller]")]
    public class TestController : ControllerBase
    {
        [HttpGet]
        public string Get()
        {
            
            return "your code";
        }
    }

    [ApiController]    
    [EnableCors]
    [Route("[controller]")]
    public class TestController : ControllerBase
    {
        //在此处增加需要授权访问的特性标签
        [Authorize]
        [HttpGet]
        public string Get()
        {
            
            return "your code";
        }
    }