ASP.NET Core - 간단한 JWT 인증 작성

dotnet user-secrets init
dotnet user-secrets set "Authentication:JwtSecret" "thisismysecret"

using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc.Authorization;
using Microsoft.IdentityModel.Tokens;

builder.Services
    .AddAuthentication()
    .AddJwtBearer("JwtScheme", options => {
        options.TokenValidationParameters = new TokenValidationParameters 
        {
            ValidIssuer = "https://localhost:<port>",
            ValidAudience = "https://localhost:<port>",
            ValidateIssuer = true,
            ValidateAudience = true,
            ValidateLifetime = true,
            ValidateIssuerSigningKey = true,                
            IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(builder.Configuration["Authentication:JwtSecret"])),
        };
}) 

builder.Services.AddControllers(options => {
    options.Filters.Add(new AuthorizeFilter
        (new AuthorizationPolicyBuilder()
            .RequireAuthenticatedUser()
            .AddAuthenticationSchemes("JwtScheme")
            .Build()));
})

app.UseAuthentication();
app.UseAuthorization();

using Microsoft.IdentityModel.Tokens;
using System.IdentityModel.Tokens.Jwt;
using System.Security.Claims;
.
.
//inject `IConfiguration` to `_configuration` in the constructor.

//validate credentials and get user details here
var key = Encoding.ASCII.GetBytes(_configuration["Authentication:JwtSecret"]);
var claims = new List<Claim>
    {
        new Claim(ClaimTypes.NameIdentifier, user.Id.ToString()),
        new Claim(ClaimTypes.Name, user.Username)
    };
var tokenDescriptor = new SecurityTokenDescriptor
    {
        Subject = new ClaimsIdentity(claims),
        Issuer = "https://localhost:<port>",
        Audience = "https://localhost:<port>",
        Expires = DateTime.UtcNow.AddDays(7),
        SigningCredentials = new SigningCredentials(new SymmetricSecurityKey(key), SecurityAlgorithms.HmacSha256Signature),

    };

var tokenHandler = new JwtSecurityTokenHandler();
var token = tokenHandler.CreateToken(tokenDescriptor);
return tokenHandler.WriteToken(token);