.net中的身份认——AuthorizeAttribute_心得技巧

心得技巧

html5 HTML/Xhtml CSS XML/XSLT Dreamweaver教程 Frontpage教程心得技巧

上一篇: 三角形案例下一篇:TypeScript 枚举指南

.net中的身份认——AuthorizeAttribute

发布时间：2022-07-03 发布网站：脚本宝典

脚本宝典收集整理的这篇文章主要介绍了.net中的身份认——AuthorizeAttribute，脚本宝典觉得挺不错的，现在分享给大家，也给大家做个参考。

1..net自己的AuthorizeAttribute类来实现用户身份验证

AuthorizeAttribute类有两个重要的方法:AuthorizeCore和HandleUnauthorizedRequest。其中AuthorizeCore函数是用来判断一个请求是否通过用户验证，它的返回结果是一个bool。HandleUnauthorizedRequest函数则是在AuthorizeCore返回结果是false时会调用的函数。源代码如下所示：

.net中的身份认——AuthorizeAttribute

实例：

.net中的身份认——AuthorizeAttribute

[Attributeusage(AttributeTargets.Class | AttributeTargets.Method, AllowMultiple = false)]    public class CheckAttribute : AuthorizeAttribute    {        #region Methods        PRotected override bool AuthorizeCore(HttpContextBase context)        {            VAR cookie = HttpContext.current.Request.Cookies["ctoken"];            if (cookie != null && !string.IsNullOrEmpty(cookie.Value))            {                var redis = new RedisService();                var r = redis.GetUser(cookie.Value);                if (r.ITem1 &amp;& (string.IsNullOrEmpty(LoginSySUSEr.GetUserName()) || r.Item2 != LOGinSysUser.GetUserName()))                {                    var mUser = new UserService().FindByUserName(r.Item2);                    new LoginSysUser()                    {                        Id = mUser.USERID.ToString(),                        UserName = mUser.USERNAME,                        Expires = DateTime.Now.AddMinutes(20)                    }.Login();                    return true;                }            }            var falg = !string.IsNullOrEmpty(LoginSysUser.GetId());            if (!falg)                context.Response.statusCode = 403;            return falg;        }        protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)        {            base.HandleUnauthorizedRequest(filterContext);            if (filterContext.HttpContext.Response.StatusCode == 403)            {                if (filterContext.HttpContext.Request.Url != null)                {                    if (filterContext.HttpContext.Request.IsAjaxRequest())                    {                        var result = new JsonResult                        {                            Data = new                            {                                Code = -1,                                Message = "请先登录！"                            },                            JsonRequestBehavior = JsonRequestBehavior.AllowGet                        };                        filterContext.Result = result;                    }                    else                    {                        filterContext.Result = new RedirectResult("~/Sys/Account/Login");                    }                }            }        }        #endregion Methods    }