/SampleJwtSimpleServerPCF

Primary LanguageC#

SampleJwtSimpleServerPCF

This sample demonstrates how to use an Authentication mechanism and Swagger in an app that is going to be deployed in PCF. The repository just wanted to find out the source of an issue with JWTSimpleServer within PCF but the POC worked as expected and seems to be useful for other Dev Teams.

This Sample includes:

  1. Net Core API
  2. An Unauthorised Controller that allows every request
  3. An Authorised Controller that enforces security, only request with a proper bearer token reach the controller methods
  4. JwtSimpleServer as the security mechanism with a simple AuthenticationProvider (user: sampleapi, password: sampliapipassword) 4.a. To get the token you have to POST: - To http:YourHost:YourPort/token - With HEADER: [{"key":"Content-Type","value":"application/x-www-form-urlencoded"}] - With a RAW BODY with this text: 'grant_type=password&username=sampleapi&password=sampliapipassword'
  5. Swagger with Swashbuckle 5.a. Default route opens /swagger ( '/' redirects to '/swagger') 5.b. Swagger includes XML documentation 5.c. Allows JWT Authentication, this sample solves the issue that some people have authorising requests with JWT (security dictionary needs a 'Bearer' as key so that once you have the token the input MUST be 'Bearer {token}')