Quantcast
Channel: ASP.NET Core
Viewing all articles
Browse latest Browse all 9386

JwtBearerOptions - token validation offline or online?

$
0
0

Hi all,

I'm working on ASP.Net Core 3.1 for API development, and I was adding logic to validate Bearer tokens, I'm quite new on this and found out logic like this:

public static void AddAuthentication(this IServiceCollection services, IConfiguration config)
        {
            services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)

            .AddJwtBearer(options =>
            {
                options.Authority = "https://loremipsum.com";
                options.RequireHttpsMetadata = true;
                options.Audience = "LoremIpSum";
                options.SaveToken = true;
                options.TokenValidationParameters = new TokenValidationParameters
                {
                    ValidateActor = true,
                    ValidateIssuer = true,
                    ValidateAudience = true,
                    ValidateLifetime = true,
                    RequireExpirationTime = true,
                    ValidIssuer = "https://loremipsum.com",
                    NameClaimType = "name"
                };
            })
            .AddCookie(options => options.SlidingExpiration = true);
        }

I was wondering, this allows me to specify some options, but how can I tell to validate tokens offline or online?

Or by default this provides logic only for online validation?

This might be a rookie question and it may be quite simple but I'm not following :(


Viewing all articles
Browse latest Browse all 9386

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>