Add optional useCookies param to AddJwt extension

Add useCookies parameter to AddJwt for reading JWT from cookies if not found in query string. Update XML docs and token extraction logic to support this behavior.

Author: Vadim Belov

Sources/EasyExtensions.AspNetCore.Authorization/Extensions/ServiceCollectionExtensions.cs

@@ -31,6 +31,7 @@ public static class ServiceCollectionExtensions
         /// Reads settings from JwtSettings section or flat fallback Jwt[Key] configuration values (see <see cref="ConfigurationExtensions.GetJwtSettings"/>).
         /// </summary>
         /// <param name="services"><see cref="IServiceCollection"/> instance.</param>
+        /// <param name="useCookies">If <c>true</c>, JWT token will be read from cookies (if not found in query string).</param>
         /// <returns>Current <see cref="IServiceCollection"/> instance.</returns>
         /// <exception cref="KeyNotFoundException">When required JWT settings are missing.</exception>
         /// <remarks>
@@ -67,7 +68,7 @@ public static class ServiceCollectionExtensions
         ///   <item><description><c>RequireHttpsMetadata = false</c> (adjust in production if needed).</description></item>
         /// </list>
         /// </remarks>
-        public static IServiceCollection AddJwt(this IServiceCollection services)
+        public static IServiceCollection AddJwt(this IServiceCollection services, bool useCookies = false)
         {
             services.AddScoped<ITokenProvider, JwtTokenProvider>();
             services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
@@ -102,7 +103,7 @@ public static IServiceCollection AddJwt(this IServiceCollection services)
                             {
                                 context.Token = accessToken;
                             }
-                            if (string.IsNullOrWhiteSpace(context.Token))
+                            else if (useCookies && string.IsNullOrWhiteSpace(context.Token))
                             {
                                 string? cookieToken = context.Request.Cookies[AccessTokenParamName];
                                 if (!string.IsNullOrEmpty(cookieToken))