Support access token in cookies and centralize param name

Introduce AccessTokenParamName constant to avoid hardcoding the access token parameter name. Update JWT authentication to check for the token in both query string and cookies, improving flexibility and maintainability.

Author: Vadim Belov

Sources/EasyExtensions.AspNetCore.Authorization/Extensions/ServiceCollectionExtensions.cs

@@ -21,6 +21,11 @@ namespace EasyExtensions.AspNetCore.Authorization.Extensions
     /// </summary>
     public static class ServiceCollectionExtensions
     {
+        /// <summary>
+        /// Represents the name of the parameter used to pass the access token.
+        /// </summary>
+        public const string AccessTokenParamName = "access_token";
+
         /// <summary>
         /// Adds JWT authentication resolving <see cref="IConfiguration"/> from DI.
         /// Reads settings from JwtSettings section or flat fallback Jwt[Key] configuration values (see <see cref="ConfigurationExtensions.GetJwtSettings"/>).
@@ -92,11 +97,19 @@ public static IServiceCollection AddJwt(this IServiceCollection services)
                     {
                         OnMessageReceived = context =>
                         {
-                            var accessToken = context.Request.Query["access_token"].ToString();
+                            var accessToken = context.Request.Query[AccessTokenParamName].ToString();
                             if (!string.IsNullOrEmpty(accessToken))
                             {
                                 context.Token = accessToken;
                             }
+                            if (string.IsNullOrWhiteSpace(context.Token))
+                            {
+                                string? cookieToken = context.Request.Cookies[AccessTokenParamName];
+                                if (!string.IsNullOrEmpty(cookieToken))
+                                {
+                                    context.Token = cookieToken;
+                                }
+                            }
                             return Task.CompletedTask;
                         }
                     };