Get bearer access token in api logging

Question

i am using web api mvc 5 and i am doing api call logging. Following is a snippet

        protected override async Task<HttpResponseMessage> SendAsync(HttpRequestMessage request, CancellationToken cancellationToken)
    {
        var corrId = string.Format("{0}{1}", DateTime.Now.Ticks, Thread.CurrentThread.ManagedThreadId);
        var requestInfo = string.Format("{0};{1}", request.Method, request.RequestUri);

        var requestMessage = await request.Content.ReadAsByteArrayAsync();

        await IncommingMessageAsync(corrId, requestInfo, requestMessage);

        var response = await base.SendAsync(request, cancellationToken);

        byte[] responseMessage;

        if (response.IsSuccessStatusCode)
            responseMessage = await response.Content.ReadAsByteArrayAsync();
        else
            responseMessage = Encoding.UTF8.GetBytes(response.ReasonPhrase);

        await OutgoingMessageAsync(corrId, requestInfo, responseMessage);

        return response;
    }

what i would like to know is how could i get the bearer token if the request is from an authenticated used. I tried HttpContext.Current.User but it's always null.

Thanks in advance.

http://stackoverflow.com/a/18384253/4753489 – Divyang Desai Nov 26 '16 at 05:11 — Divyang Desai, Nov 26 '16 at 05:11

score 1 · Answer 1 · answered Nov 26 '16 at 13:03

Assuming your token is coming in the header as Authorization key then you can pull the bearer token from the header of the request:

 if (Request.Headers.Contains("Authorization"))
       var bearerToken = Request.Headers.GetValues("Authorization").FirstOrDefault();

flawesome · Answer 2 · 2022-11-23T13:48:08.367

Using NET6 this was my approach (also assuming token via header as Authorization key):

JwtSecurityToken token = null;

if (Request.Headers.Keys.Contains("Authorization"))
{
    StringValues values;

    if (Request.Headers.TryGetValue("Authorization", out values))
    {
        var jwt = values.ToString();

        if (jwt.Contains("Bearer"))
        {
            jwt = jwt.Replace("Bearer", "").Trim();
        }

        var handler = new JwtSecurityTokenHandler();

        token = handler.ReadJwtToken(jwt);
    }
}

if (token == null)
{
    return Unauthorized();
}

Get bearer access token in api logging

2 Answers2