当一个furion项目在校验JWT时，furion项目仅为签收方，签发方是另外的项目时，furion项目将强制校验jwt中的kid。

### 版本号

其他版本（请升级）

### .NET SDK

.NET8

### 项目类型

WebApi

### 操作系统

Windows 11

### 运行环境

开发环境 (Development)

### 数据库类型

MySql 8+

### 应用托管程序

单文件

### 这个问题是否已经存在？

- [x] 我已经搜索过现有的问题 (https://gitee.com/dotnetchina/Furion/issues)

### 如何复现

当一个furion项目在校验JWT时，furion项目仅为签收方，签发方是另外的项目时，furion项目将强制校验jwt中的kid。

### 预期结果

我希望能够在【HandleAsync】方法中自定义jwt有效性校验

### 实际结果

目前【HandleAsync】方法中jwt有效性不可更改

### 异常信息

Microsoft.IdentityModel.Tokens.SecurityTokenSignatureKeyNotFoundException: IDX10503: Signature validation failed. Token does not have a kid. Keys tried: '[PII of type 'System.Text.StringBuilder' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'. Number of keys in TokenValidationParameters: '0'. 
Number of keys in Configuration: '0'. 
Exceptions caught:
 '[PII of type 'System.Text.StringBuilder' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'.
token: '[PII of type 'Microsoft.IdentityModel.JsonWebTokens.JsonWebToken' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'. See https://aka.ms/IDX10503 for details.
   at MeiTuan.HotSelling.Web.Core.JwtHandler.HandleAsync(AuthorizationHandlerContext context) in C:\Users\92078\Desktop\xxxx.Web.Core\Handlers\JwtHandler.cs:line 80
   at Microsoft.AspNetCore.Authorization.DefaultAuthorizationService.AuthorizeAsync(ClaimsPrincipal user, Object resource, IEnumerable`1 requirements)
   at Microsoft.AspNetCore.Authorization.Policy.PolicyEvaluator.AuthorizeAsync(AuthorizationPolicy policy, AuthenticateResult authenticationResult, HttpContext context, Object resource)
   at Microsoft.AspNetCore.Mvc.Authorization.AuthorizeFilter.OnAuthorizationAsync(AuthorizationFilterContext context)
   at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeFilterPipelineAsync>g__Awaited|20_0(ResourceInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)
   at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeAsync>g__Logged|17_1(ResourceInvoker invoker)
   at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeAsync>g__Logged|17_1(ResourceInvoker invoker)
   at StackExchange.Profiling.MiniProfilerMiddleware.Invoke(HttpContext context) in C:\projects\dotnet\src\MiniProfiler.AspNetCore\MiniProfilerMiddleware.cs:line 94
   at Swashbuckle.AspNetCore.SwaggerUI.SwaggerUIMiddleware.Invoke(HttpContext httpContext)
   at Swashbuckle.AspNetCore.Swagger.SwaggerMiddleware.Invoke(HttpContext httpContext, ISwaggerProvider swaggerProvider)
   at Microsoft.AspNetCore.Authorization.AuthorizationMiddleware.Invoke(HttpContext context)
   at Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext context)
   at Microsoft.AspNetCore.Diagnostics.DeveloperExceptionPageMiddlewareImpl.Invoke(HttpContext context)

HEADERS
=======
Accept: text/plain
Connection: keep-alive
Host: localhost:5001
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIwNWFhZTE4Zi1kMzhkLTQ0ZTUtYmYzOC1iYWU5MWZmZTA2N2MiLCJ1c2VySWQiOiIwNWFhZTE4Zi1kMzhkLTQ0ZTUtYmYzOC1iYWU5MWZmZTA2N2MiLCJuaWNrbmFtZSI6IumDreWHr-i_qiIsInJvbGUiOlsiM2UyNWU1NTQtNGU4My00OWJjLTliZDYtODU4YmFkYTBiNGM1Il0sInJvbGVzIjpbMTgyXSwiZGF0YVJvbGVUeXBlIjoiOTkiLCJub3JtYWxpemVkVXNlck5hbWUiOiLpg63lh6_ov6oiLCJuYmYiOjE3MzQzMTM0NjgsImV4cCI6MTczNDM0OTQ2OCwiaWF0IjoxNzM0MzEzNDY4LCJpc3MiOiJtaW50LWFwaSIsImF1ZCI6Im1pbnQtd2ViIn0.l4zXaoFFa9pF4Ka2D6RxOxh3myZtD8olLgQWMQOsF4A
Referer: http://localhost:5001/index.html
sec-ch-ua-platform: "Windows"
request-from: swagger
sec-ch-ua: "Microsoft Edge";v="131", "Chromium";v="131", "Not_A Brand";v="24"
sec-ch-ua-mobile: ?0
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty

### 截图或视频

无

### Demo 地址（Git/网盘/SVN）| 未提供则视为无效 `Issue`

并非bug

### 友好承诺

- [x] 我承诺将本着相互尊重、理解和友善的态度进行交流，共同维护好 Furion 来之不易的良好的社区氛围。

GVP dotNET China/Furion

内容风险标识

评论 (1)

GVPdotNET China/Furion

内容风险标识