$.$Net Rest api authorization $\{$

"ConnectionStrings": $\{$

"DefaultConnection": "Data Source$=""$

$\},$

$"$Jwt$"$: $\{$

"Key": $"",$

"Issuer": "HotelReservation",

"Audience": "HotelUsers"

$\},$

"Logging": $\{$

"LogLevel": $\{$

"Default": "Information",

"Microsoft.AspNetCore": "Warning"

$\}$

$\},$

"AllowedHosts": $"*"$

$\}$using Hotel.Data;

using Hotel.Model;

using Microsoft.AspNetCore.Components;

using Microsoft.AspNetCore.Identity;

using Microsoft.AspNetCore.Mvc;

using Microsoft.IdentityModel.Tokens;

using System.IdentityModel.Tokens.Jwt;

using System.Security.Claims;

using System.Text;

using RouteAttribute $=$ Microsoft.AspNetCore.Mvc$.$RouteAttribute;

namespace Hotel.Controllers

$\{$

$[$Route$("$api$/$controller$")]$

$[$ApiController$]$

public class UserController : ControllerBase

$\{$

private readonly UserManager $\_$userManager;

private readonly SignInManager $\_$signInManager;

private readonly IConfiguration $\_$configuration;

public UserController$($UserManager userManager, SignInManager signInManager, IConfiguration configuration$)$

$\{$

$\_$userManager $=$ userManager;

$\_$signInManager $=$ signInManager;

$\_$configuration $=$ configuration;

$\}$

$[$HttpPost$("$register$")]$

public async Task Register$([$FromBody$]$ UserDTO model$)$

$\{$

var user $=$ new User $\{$ UserName $=$ model.UserName, Email $=$ model.Email $\}$;

var result $=$ await $\_$userManager.CreateAsync$($user$,$ model.Password$)$;

if $($result$.$Succeeded$)$

$\{$

return Ok$()$;

$\}$

return BadRequest$($result$.$Errors$)$;

$\}$

$[$HttpPost$("$login$")]$

public async Task Login$([$FromBody$]$ UserDTO model$)$

$\{$

var result $=$ await $\_$signInManager.PasswordSignInAsync$($model$.$UserName, model.Password, false, false$)$;

if $($result$.$Succeeded$)$

$\{$

var user $=$ await $\_$userManager.FindByNameAsync$($model$.$UserName$)$;

var token $=$ GenerateJwtToken$($user$)$;

return Ok$($new $\{$ token $\})$;

$\}$

return Unauthorized$()$;

$\}$

private string GenerateJwtToken$($User user$)$

$\{$

var claims $=$ new$[]$

$\{$

new Claim$($JwtRegisteredClaimNames$.$Sub, user.UserName$),$

new Claim$($JwtRegisteredClaimNames$.$Jti, Guid.NewGuid$().$ToString$()),$

new Claim$($ClaimTypes$.$NameIdentifier, user.Id$)$

$\}$;

var key $=$ new SymmetricSecurityKey$($Encoding$.$UTF$8.$GetBytes$(\_$configuration$["$Jwt:Key"$]))$;

var creds $=$ new SigningCredentials$($key$,$ SecurityAlgorithms.HmacSha$256)$;

var token $=$ new JwtSecurityToken$($

issuer: $\_$configuration$["$Jwt:Issuer"$],$

audience: $\_$configuration$["$Jwt:Audience"$],$

claims: claims,

expires: DateTime.Now.AddMinutes$(30),$

signingCredentials: creds$)$;

return new JwtSecurityTokenHandler$().$WriteToken$($token$)$;

$\}$

$\}$

$\}$using Hotel.Data;

using Hotel.Model;

using Microsoft.AspNetCore.Authentication.JwtBearer;

using Microsoft.AspNetCore.Identity;

using Microsoft.EntityFrameworkCore;

using Microsoft.IdentityModel.Tokens;

using Microsoft.OpenApi.Models;

using System.Reflection;

using System.Text;

var builder $=$ WebApplication.CreateBuilder$($args$)$;

$//$ Add services to the container.

builder.Services.AddDbContext$($option $=>$

$\{$

option.UseSqlServer$($builder$.$Configuration.GetConnectionString$("$DefaultConnection$"))$;

$\})$;

builder.Services.AddIdentity$()$

$.$AddEntityFrameworkStores$()$

$.$AddDefaultTokenProviders$()$;

var jwtKey $=$ builder.Configuration$["$Jwt:Key"$]$;

var jwtIssuer $=$ builder.Configuration$["$Jwt:Issuer"$]$;

var jwtAudience $=$ builder.Configuration$["$Jwt:Audience"$]$;

if $($string$.$IsNullOrEmpty$($jwtKey$)||$ string.IsNullOrEmpty$($jwtIssuer$)||$ string.IsNullOrEmpty$($jwtAudience$))$

$\{$

throw new ArgumentException$("$JWT settings are not configured properly in appsettings.json"$)$;

$\}$

var key $=$ new SymmetricSecurityKey$($Encoding$.$UTF$8.$GetBytes$($jwtKey$))$;

builder.Services.AddAuthentication$($options $=>$

$\{$

options.DefaultAuthenticateScheme $=$ JwtBearerDefaults.AuthenticationScheme;

options.DefaultChallengeScheme $=$ JwtBearerDefaults.AuthenticationScheme;

$\})$

$.$AddJwtBearer$($options $=>$

$\{$

options.TokenValidationParameters $=$ new TokenValidationParameters

$\{$

ValidateIssuer $=$ true,

ValidateAudience $=$ true,

ValidateLifetime $=$ true,

ValidateIssuerSigningKey $=$ true,

ValidIssuer $=$ jwtIssuer,

ValidAudience $=$ jwtAudience,

IssuerSigningKey $=$ key

$\}$;

$\})$;

builder.Services.AddControllers$()$

$.$AddNewtonsoftJson$($options $=>$

$\{$

options.SerializerSettings.ReferenceLoopHandling $=$ Newtonsoft.Json.ReferenceLoopHandling.Ignore;

$\})$; swagger $401$ error