Csharp C#算法类来生成一个过期的安全密码

在我看来，你正在寻找一种token%的方法.你可以判断JWT，它有到期日期，可以很容易地在服务器端验证.

下面是一个小例子:

string GenerateToken()
{
    var mySecret = "mySecretmySecretmySecret";
    var mySecurityKey = new SymmetricSecurityKey(Encoding.ASCII.GetBytes(mySecret));

    var tokenHandler = new JwtSecurityTokenHandler();
    var tokenDescriptor = new SecurityTokenDescriptor
    {
        NotBefore = DateTime.UtcNow.AddSeconds(-2),
        Expires = DateTime.UtcNow.AddSeconds(2),
        SigningCredentials = new SigningCredentials(mySecurityKey, Security算法rithms.HmacSha256Signature)
    };

    var token = tokenHandler.CreateToken(tokenDescriptor);
    return tokenHandler.WriteToken(token);
}

bool ValidateCurrentToken(string token)
{
    var mySecret = "mySecretmySecretmySecret";
    var mySecurityKey = new SymmetricSecurityKey(Encoding.ASCII.GetBytes(mySecret));

    var tokenHandler = new JwtSecurityTokenHandler();
    try
    {
        tokenHandler.ValidateToken(token, new TokenValidationParameters
        {
            ClockSkew = TimeSpan.Zero,
            ValidateIssuerSigningKey = true,
            ValidateIssuer = false,
            ValidateAudience = false,
            IssuerSigningKey = mySecurityKey
        }, out SecurityToken validatedToken);
    }
    catch
    {
        return false;
    }
    return true;
}

请注意这里的ClockSkew = TimeSpan.Zero.默认情况下，MS允许令牌最多不同5分钟.我们只想使用绝对令牌的到期时间.