Problem making JWT token be interpreted in Onion architecture

Question

MyAPI.Core.Microservice.API/Program.cs:

// ...
builder.Services.AddControllers()
        .ConfigureApiBehaviorOptions(options =>
        {
            options.SuppressModelStateInvalidFilter = true;
        });

builder.Services.AddEndpointsApiExplorer();
builder.Services.AddInfrastructureSwagger();

builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
    .AddJwtBearer(options =>
    {
        options.TokenValidationParameters = new TokenValidationParameters
        {
            ValidateIssuer = true,
            ValidateAudience = true,
            ValidateLifetime = true,
            ValidateIssuerSigningKey = true,
            ValidIssuer = configuration["Jwt:Issuer"], // Correspondente ao issuer
            ValidAudience = configuration["Jwt:Audience"], // Correspondente à audience
            IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(configuration["Jwt:Key"]!))
        };

        // Adicionando logs de erro para melhor depuração
        options.Events = new JwtBearerEvents
        {
            OnAuthenticationFailed = context =>
            {
                Console.WriteLine($"Authentication failed: {context.Exception.Message}");
                Console.WriteLine($"Token recebido: {context.Request.Headers["Authorization"]}");
                return Task.CompletedTask;
            }
        };
    });
// ...

MyAPI.Core.Microservice.API/Contollers/TokenController.cs:

namespace MyAPI.Core.Microservice.API.Controllers;
using MyAPI.Core.Microservice.Domain.Models.Entities;
using Microsoft.Extensions.Configuration;
using System.IdentityModel.Tokens.Jwt;
using Microsoft.IdentityModel.Tokens;
using Microsoft.AspNetCore.Mvc;
using System.Text;
using Microsoft.Extensions.Logging;

/// 
/// Controlador responsável pela gestão do token de autenticação.
/// 
[ApiController]
[Route("api/auth-token")]
public class TokenController : ControllerBase
{
    private readonly string chaveSecreta;
    private readonly string issuer;
    private readonly string audience;
    private readonly string AdmUsername;
    private readonly string AdmPassword;
    private readonly ILogger _logger;

    /// 
    /// Construtor do TokenController.
    /// 
    /// Configurações da aplicação, contendo as informações de JWT e credenciais de administrador.
    /// Logger para registrar eventos e erros.
    /// Lançado quando as configurações de JWT ou administrador estão ausentes.
    public TokenController(IConfiguration configuration, ILogger logger)
    {
        issuer = configuration["Jwt:Issuer"]!;
        audience = configuration["Jwt:Audience"]!;
        chaveSecreta = configuration["Jwt:Key"]!;
        AdmUsername = configuration["Adm:Username"]!;
        AdmPassword = configuration["Adm:Password"]!;
        _logger = logger;
    }

    /// 
    /// Criar um novo token
    /// 
    /// Objeto contendo as credenciais do administrador
    /// Token JWT gerado
    [HttpPost]
    [ProducesResponseType(typeof(string), 201)]  // Sucesso na criação do token: 200 Good Request
    [ProducesResponseType(typeof(object), 400)]  // Erro de validação: 400 Bad Request
    [ProducesResponseType(typeof(object), 500)]  // Erro do servidor: 500 Internal Server Error
    public ActionResult GetToken(AdmUser admUser)
    {
        if(
            admUser.Username == AdmUsername && 
            admUser.Password == AdmPassword) 
        {
            var tokenJwt = GerarTokenJwt(admUser.Username); 
            return Ok(tokenJwt);
        }
        _logger.LogWarning("Administrative credentials incorrect for user: {Username}", admUser.Username);
        return BadRequest("Administrative credentials incorrect."); 
    }
    
    private string GerarTokenJwt(string username)
    {
        var securityKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(chaveSecreta));
        var credentials = new SigningCredentials(securityKey, SecurityAlgorithms.HmacSha256);
        var claims = new System.Security.Claims.Claim[]
        {
            new System.Security.Claims.Claim("username", username),
        };

        var token = new JwtSecurityToken(
            issuer: issuer,
            audience: audience,
            claims: claims,
            expires: DateTime.UtcNow.AddHours(1), 
            signingCredentials: credentials
        );
        return new JwtSecurityTokenHandler().WriteToken(token);
    }
}

MyAPI.Core.Microservice.API.Client/DependencyInjection/DependencyInjectionSwagger.cs:

namespace MyAPI.Core.Microservice.API.Controllers;
using MyAPI.Core.Microservice.Domain.Models.Entities;
using Microsoft.Extensions.Configuration;
using System.IdentityModel.Tokens.Jwt;
using Microsoft.IdentityModel.Tokens;
using Microsoft.AspNetCore.Mvc;
using System.Text;
using Microsoft.Extensions.Logging;

/// 
/// Controlador responsável pela gestão do token de autenticação.
/// 
[ApiController]
[Route("api/auth-token")]
public class TokenController : ControllerBase
{
    private readonly string chaveSecreta;
    private readonly string issuer;
    private readonly string audience;
    private readonly string AdmUsername;
    private readonly string AdmPassword;
    private readonly ILogger _logger;

    /// 
    /// Construtor do TokenController.
    /// 
    /// Configurações da aplicação, contendo as informações de JWT e credenciais de administrador.
    /// Logger para registrar eventos e erros.
    /// Lançado quando as configurações de JWT ou administrador estão ausentes.
    public TokenController(IConfiguration configuration, ILogger logger)
    {
        issuer = configuration["Jwt:Issuer"]!;
        audience = configuration["Jwt:Audience"]!;
        chaveSecreta = configuration["Jwt:Key"]!;
        AdmUsername = configuration["Adm:Username"]!;
        AdmPassword = configuration["Adm:Password"]!;
        _logger = logger;
    }

    /// 
    /// Criar um novo token
    /// 
    /// Objeto contendo as credenciais do administrador
    /// Token JWT gerado
    [HttpPost]
    [ProducesResponseType(typeof(string), 201)]  // Sucesso na criação do token: 200 Good Request
    [ProducesResponseType(typeof(object), 400)]  // Erro de validação: 400 Bad Request
    [ProducesResponseType(typeof(object), 500)]  // Erro do servidor: 500 Internal Server Error
    public ActionResult GetToken(AdmUser admUser)
    {
        if(
            admUser.Username == AdmUsername && 
            admUser.Password == AdmPassword) 
        {
            var tokenJwt = GerarTokenJwt(admUser.Username); 
            return Ok(tokenJwt);
        }
        _logger.LogWarning("Administrative credentials incorrect for user: {Username}", admUser.Username);
        return BadRequest("Administrative credentials incorrect."); 
    }
    
    private string GerarTokenJwt(string username)
    {
        var securityKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(chaveSecreta));
        var credentials = new SigningCredentials(securityKey, SecurityAlgorithms.HmacSha256);
        var claims = new System.Security.Claims.Claim[]
        {
            new System.Security.Claims.Claim("username", username),
        };

        var token = new JwtSecurityToken(
            issuer: issuer,
            audience: audience,
            claims: claims,
            expires: DateTime.UtcNow.AddHours(1), 
            signingCredentials: credentials
        );
        return new JwtSecurityTokenHandler().WriteToken(token);
    }
}

Errors:

Authentication failed: IDX14100: JWT is not well formed, there are no dots (.).
The token needs to be in JWS or JWE Compact Serialization Format. (JWS): 'EncodedHeader.EndcodedPayload.EncodedSignature'. (JWE): 'EncodedProtectedHeader.EncodedEncryptedKey.EncodedInitializationVector.EncodedCiphertext.EncodedAuthenticationTag'.
Token recebido: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6ImFkbWluQHdhcnJlbi5kb21haW4uY29tIiwiZXhwIjoxNzQwNjA1MjkzLCJpc3MiOiJodHRwOi8vbG9jYWxob3N0OjUwMDAiLCJhdWQiOiJodHRwOi8vbG9jYWxob3N0OjUwMDAifQ.gZXRCeAbphb-WTqu3g3KQFjVyqJPULH31hRreQxnYpk

I've been trying this for days and haven't gotten any results. The funny thing is that following single shot architectures where the dependency file is in the same directory as program.cs, it works perfectly. It really is a very complex challenge or something that I simply can't see.

Problem making JWT token be interpreted in Onion architecture

Answers (1)

Related Questions