MVC Form验证 登陆和退出Cookies的设定和消除

红色部分为重点

1.webconfig配置

 <system.web>节点下添加 <authentication mode="Forms"> <forms loginUrl="~/Account/Login" timeout="2880" name=".userInfo" protection="All" path="/"></forms> </authentication>如果有如下节点则删除

<system.webServer> <modules> <remove name="FormsAuthentication" /> </modules> </system.webServer>

2.<forms loginUrl="~/Account/Login 中的loginUrl的值的~不能省略 public ActionResult Login(LoginViewModel login) { //验证账号密码 AspTaskServiceClient service = new AspTaskServiceClient(); //调用svc服务 if (service.IsLoginOk(login.UserId, Commen.Sha256(login.Password))) { AspUser user = service.GetUserInfo(login.UserId); LoginViewModel userinfo = new LoginViewModel() { UserId = login.UserId, Password = login.Password, UserName = user.LoginUserName, AspId = user.AspId, IsAsp = user.IsAspUser ? "1" : "0" }; FormsAuthentication.SetAuthCookie(JsonHelper.ToJsonString(userinfo), false); //设置cookies if (Request.QueryString["ReturnUrl"] != null) { if (Request.QueryString["ReturnUrl"].Contains("LogOff")) { return RedirectToAction("../Task/TaskList"); } else { return Redirect(Request.QueryString["ReturnUrl"]); } } else return RedirectToAction("../Task/TaskList"); } else { ModelState.AddModelError("", "正しくユーザー　または　パスワードを入力ください。"); return View(login); } }

　　

3读取cookies protected override bool AuthorizeCore(System.Web.HttpContextBase httpContext) { if (string.IsNullOrWhiteSpace(HttpContext.Current.User.Identity.Name)) return false; LoginViewModel userinfo=JsonHelper.ToObject<LoginViewModel>(HttpContext.Current.User.Identity.Name); AspTaskServiceClient service = new AspTaskServiceClient(); string _userId = userinfo.UserId; string _password = userinfo.Password; if (_userId == "" || _password == "") return false; if (service.IsLoginOk(_userId, Commen.Sha256(_password))) { return true; } else { return false; } }

　　

附：JsonHelper.cs

using System; using System.Collections.Generic; using System.Linq; using System.Web; using Newtonsoft.Json; namespace xxx.Serialization.Json { public class JsonHelper { public static string ToJsonString(object obj) { return JsonConvert.SerializeObject(obj); } public static T ToObject<T>(string jsonString) { return JsonConvert.DeserializeObject<T>(jsonString); } } }

　　

 sha256.cs

using System; using System.Collections.Generic; using System.Linq; using System.Security.Cryptography; using System.Text; using System.Web; namespace xxx.Controllers { public class Commen { public static string Sha256(string plainText) { SHA256Managed _sha256 = new SHA256Managed(); byte[] _cipherText = _sha256.ComputeHash(Encoding.Default.GetBytes(plainText)); return Convert.ToBase64String(_cipherText); } } }

　　

4.action的cookie值传入到view的js文件

public ActionResult TaskList() { ViewBag.cookies = User.Identity.Name; return View(); }

　　

view里的js文件

如下

function getUserInfo() {//获取当前用户 user = new Object(); var arrCookie = @Html.Raw(ViewBag.cookies); if (arrCookie!=null) { user.userId =arrCookie["UserId"]; user.userName = arrCookie["UserName"] user.aspId =arrCookie["AspId"]; user.isAspUser = arrCookie["IsAsp"]== "1" ? true : false; } }

　　5.退出登陆

1._LoginPartial.cshtml显示设置   必须添加引用

@using xxxx.Serialization.Json; @using xxx.Models; @if (!string.IsNullOrWhiteSpace(User.Identity.Name)) { using (Html.BeginForm("LogOff", "Account", FormMethod.Post, new { id = "logoutForm", @class = "navbar-right" })) { Html.AntiForgeryToken(); <ul class="nav navbar-nav navbar-right"> <li> @Html.ActionLink(JsonHelper.ToObject<LoginViewModel>(User.Identity.Name).UserName + " 様", "", "", routeValues: null, htmlAttributes: new { title = "" }) </li> <li><a href="javascript:document.getElementById('logoutForm').submit()">ログオフ</a></li> </ul> } }

　　

　　2.退出登陆清除cookies

public ActionResult LogOff() { FormsAuthentication.SignOut(); return RedirectToAction("Login", "Account"); }

　　

转载于:https://www.cnblogs.com/c-x-a/p/7115609.html

相关资源：JAVA上百实例源码以及开源项目