MissingFieldException：找不到字段：'Microsoft.Net.Http.Headers.HeaderNames.Authorization'

Question

我用 .NET Core 3.0 Preview 4 CLI 创建了一个 API。我已经到了可以发送用户名和密码并获取令牌 (JWT) 的地步。

这是我的登录方式。

[HttpPost("login")]
public async Task<IActionResult> Login([FromBody] UserForLoginDto userForRegisterDto)
{
    var userFromRepo = await _repo.Login(userForRegisterDto.Username.ToLower(), userForRegisterDto.Password);
    if (userFromRepo == null) //User login failed
        return Unauthorized();

    //generate token
    var tokenHandler = new JwtSecurityTokenHandler();
    var key = Encoding.ASCII.GetBytes(_config.GetSection("AppSettings:Token").Value);
    var tokenDescriptor = new SecurityTokenDescriptor
    {
        Subject = new ClaimsIdentity(new Claim[]{
            new Claim(ClaimTypes.NameIdentifier,userFromRepo.Id.ToString()),
            new Claim(ClaimTypes.Name, userFromRepo.Username)
        }),
        Expires = DateTime.Now.AddDays(1),
        SigningCredentials = new SigningCredentials(new SymmetricSecurityKey(key), SecurityAlgorithms.HmacSha512Signature)
    };

    var token = tokenHandler.CreateToken(tokenDescriptor);
    var tokenString = tokenHandler.WriteToken(token);

    return Ok(new { tokenString });
}

这个方法工作正常并为我提供了令牌，但我想使用 [Authorize] 属性限制对方法或控制器的访问，我得到以下异常。

MissingFieldException: Field not found: 'Microsoft.Net.Http.Headers.HeaderNames.Authorization'.
Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerHandler.HandleAuthenticateAsync()
System.Runtime.CompilerServices.AsyncMethodBuilderCore.Start<TStateMachine>(ref TStateMachine stateMachine)
Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerHandler.HandleAuthenticateAsync()
Microsoft.AspNetCore.Authentication.AuthenticationHandler<TOptions>.AuthenticateAsync()
Microsoft.AspNetCore.Authentication.AuthenticationService.AuthenticateAsync(HttpContext context, string scheme)
Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext context)
Microsoft.AspNetCore.Routing.EndpointRoutingMiddleware.Invoke(HttpContext httpContext)
Microsoft.AspNetCore.Diagnostics.DeveloperExceptionPageMiddleware.Invoke(HttpContext context)

我发送的请求只有 Authorization header。

我在ConfigureServices方法中配置了认证中间件如下。

public void ConfigureServices(IServiceCollection services)
{
    services.AddCors();
    services.AddDbContext<DataContext>(x => x.UseSqlServer(Configuration.GetConnectionString("DefaultConnection")));
    services.AddControllers()
        .AddNewtonsoftJson();
    services.AddScoped<IAuthRepository, AuthRepository>();

    var key = Encoding.ASCII.GetBytes(Configuration.GetSection("AppSettings:Token").Value);
    
    services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
    .AddJwtBearer(options => {
        options.TokenValidationParameters = new TokenValidationParameters{
            ValidateIssuerSigningKey = true,
            IssuerSigningKey = new SymmetricSecurityKey(key),
            ValidateIssuer = false,
            ValidateAudience = false
        };
    });
}

并已将 app.UseAuthentication(); 添加到 Configure 方法。

        app.UseCors(x => x.AllowAnyHeader().AllowAnyMethod().AllowCredentials());
        app.UseHttpsRedirection();

        app.UseRouting();
        app.UseAuthentication();
        app.UseAuthorization();
        
        app.UseEndpoints(endpoints =>
        {
            endpoints.MapControllers();
        });

我拼命地尝试安装以下软件包，运气为 0。

dotnet add package Microsoft.Net.Http.Headers --version 2.2.0

dotnet add package Microsoft.AspNetCore.StaticFiles --version 2.2.0

我不知道出了什么问题。此代码用于 .NET Core 2.2

我的 csproj 文件中的相关部分如下所示..

<ItemGroup>
    <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="3.0.0-preview5-19227-01" />
    <PackageReference Include="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="3.0.0-preview4-19216-03" />
    <PackageReference Include="Microsoft.AspNetCore.StaticFiles" Version="2.2.0" />
    <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="3.0.0-preview4.19216.3">
      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
      <PrivateAssets>all</PrivateAssets>
    </PackageReference>
    <PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="3.0.0-preview4.19216.3" />
    <PackageReference Include="Microsoft.EntityFrameworkCore.Tools.DotNet" Version="2.0.3" />
    <PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="5.4.0" />
  </ItemGroup>

Answer 1

要解决此问题，请尝试将 Microsoft.AspNetCore.Authentication.JwtBearer 版本更改为 3.0.0-preview5-19216-09。

<ItemGroup>
  <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="3.0.0-preview5-19216-09" />
  <PackageReference Include="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="3.0.0-preview4-19216-03" />
  <PackageReference Include="Microsoft.AspNetCore.StaticFiles" Version="2.2.0" />
  <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="3.0.0-preview4.19216.3">
    <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
    <PrivateAssets>all</PrivateAssets>
  </PackageReference>
  <PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="3.0.0-preview4.19216.3" />
  <PackageReference Include="Microsoft.EntityFrameworkCore.Tools.DotNet" Version="2.0.3" />
  <PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="5.4.0" />  
</ItemGroup>

Answer 2

当我的 .net 核心 sdk/runtime 安装在预览版 4 而不是预览版 5 时，我遇到了这个问题，即使我的 nuget 包引用是最新的。

升级 nuget 时很容易完成，但不安装最新的运行时。

这解释了为什么我在使用夜间运行时构建的 linux/docker 上没有问题。

迈克

MissingFieldException：找不到字段：'Microsoft.Net.Http.Headers.HeaderNames.Authorization'

MissingFieldException: Field not found: 'Microsoft.Net.Http.Headers.HeaderNames.Authorization'

c#

asp.net-core

.net-core

jwt

.net-core-3.0