MVC - 验证用户请求

方法一：

在Controllers里建一个ControllerBase，让其它Controller都继承它即可

public

class ControllerBase : Controller

{

protected bool _needPermission = true ;

public ControllerBase()

:

base ()

{

}

protected override void ExecuteCore()

{

if (!CheckLogon())

{

var ar = RedirectToAction( "LogOn" , "Account" , new System.Web.Routing. RouteValueDictionary ( new { returnUrl = Request.Url.PathAndQuery }));

ar.ExecuteResult(

this .ControllerContext);

}

else

{

base .ExecuteCore();

}

}

/// <summary>

/// Check user logon state

/// </summary>

/// <returns></returns>

private bool CheckLogon()

{

if (_needPermission && System.Web. HttpContext .Current.Session[Common.Definitions. SessionKeys .CurrentUser] == null ) // && !AutoLogon())

{

return false ;

}

else

{

return true ;

}

}

/// <summary>

/// Auto logon by Cookies

/// </summary>

/// <returns></returns>

private bool AutoLogon()

{

bool passed = false ;

HttpCookie keepLogonCookie = Request.Cookies[Common.Definitions. CookieKeys .KeepUserLogon];

HttpCookie savedUserIDCookie = Request.Cookies[Common.Definitions. CookieKeys .SavedUserID];

int userID;

if (keepLogonCookie != null && keepLogonCookie.Value == "1" && savedUserIDCookie!= null && int .TryParse(savedUserIDCookie.Value, out userID))

{

Business.

IPersonnelProvider provider = Business. PersonnalProviderAdapter .GetEmployeeProvider();

Data.

User user = provider.GetUserInfo(userID);

if (user != null )

{

//Auto Logon

Session[GSC.Common.Definitions.

SessionKeys .CurrentUser] = user;

Session[GSC.Common.Definitions.

SessionKeys .CurrentUserPermission] = provider.GetUserToPermission(user.UserID);

passed =

true ;

}

}

return passed;

}

}

---