2014年03月_lglgsy456

12月 11月 10月 09月 08月 07月 06月 05月 04月 03月 02月 01月

原创 Claims Based Authentication

Before going on with my other posts I want to introduce you claims-based authentication that makes is way to almost all Microsoft web-based platforms around. It is more complex than old username-passw

2014-03-31 11:01:48 2238

原创 FormAuthentication Stuff

public void SetAuthCookie(int memberId, stringaccountType) { var newTicket = new FormsAuthenticationTicket(1, memberId.ToString(), DateTime.No

2014-03-28 09:54:23 1278

原创 Jquery selector

$("input[type=submit]").on( "click", function (event) { } );

2014-03-26 15:48:56 439

原创 Form post File BUG 解决

一般来说 FormPost File，Form要求加上 enctype="multipart/form-data"如果失败，那就到后台使用Request.Form处理

2014-03-25 10:24:58 1099

原创 Bad Url request handle. 404 500 401 etc. in web.config

<customErrors defaultRedirect="url" mode="On|Off|RemoteOnly"> example <error statusCode="404" redirect="Registration/EnterPurchaseCode"/>

2014-03-24 17:56:25 1035

原创 Server-sent Events和 websocket

Server-Sent Events运行原理浏览器通过HTTP向服务器发送请求，服务器端拿出数据库中的最新的信息，立即返回给客户端，客户端等待三秒后再次发出下一个请求。实现方式同样，浏览器中HTML两个input，JavaScript模块打开EventSource，把接受者的id传给服务端。客户端收到相应后，onMessage事件的处理器将被调用。浏览器将每3秒发送一个请求，除非将

2014-03-20 17:00:37 6162

转载 castle windsor IOC

http://www.cnblogs.com/RicCC/archive/2010/03/30/castle-windsor-ioc-di.html

2014-03-20 13:40:33 696

转载具有 Windows Azure AD 和 Microsoft OWIN 组件的安全 ASP.NET Web API

http://msdn.microsoft.com/zh-cn/magazine/dn463788.aspx

2014-03-10 17:53:55 937

转载 Versioning RESTful Services

Versioning RESTful ServicesPosted by Howard Dierking on November 9, 2012I’ve talked about this in various venues and also cover it in my Pluralsight REST Fundamentals course, but the t

2014-03-07 15:07:30 775

转载在ASP.NET MVC2中使用自定义的AuthorizeAttribute绕过内置的Membership/Role机制

感谢 DSO at http://stackoverflow.com/users/38087/DSO 在ASP.NET MVC2中，我们可以使用Authorize Filter限制用户对内容的访问，如[c-sharp] view plaincopyprint?[Authorize] public class MyControll

2014-03-06 15:18:00 1248

原创自定义HttpContext.Current.User.Identity

在Global.asax中添加方法 protected void Application_PostAuthenticateRequest(Object sender, EventArgs e) { HttpCookie authCookie = Request.Cookies[FormsAuthentication.FormsCookieName];

2014-03-06 11:39:22 7499

转载 JSON和JSONP 详细介绍，很COOL

尊重原创：http://www.cnblogs.com/dowinning/archive/2012/04/19/json-jsonp-jquery.html前言：由于Sencha Touch 2这种开发模式的特性，基本决定了它原生的数据交互行为几乎只能通过AJAX来实现。当然了，通过调用强大的PhoneGap插件然后打包，你可以实

2014-03-04 17:41:07 677

原创 Content Security Policy

http://en.wikipedia.org/wiki/Content_Security_PolicyContent Security Policy (CSP) is a computer security concept, to prevent cross-site scripting (XSS) and related attacks.[1] It is a Ca

2014-03-04 17:20:31 4013

原创 preventing cross-site request forgery attack

http://www.asp.net/web-api/overview/security/preventing-cross-site-request-forgery-(csrf)-attacksCross-Site Request Forgery (CSRF) is an attack where a malicious site sends a request to a vu

2014-03-04 17:10:59 961

原创 Cross-origin request official description on asp.net

http://www.asp.net/web-api/overview/security/enabling-cross-origin-requests-in-web-apiIntroductionBrowser security prevents a web page from making AJAX requests to another domain. This r

2014-03-04 17:08:58 1445

原创 cross-origin requests descripetion

Cross-origin resource sharingFrom Wikipedia, the free encyclopediaCross-origin resource sharing (CORS) is a mechanism that allows JavaScript on a web page to make XMLHttpRequests to an

2014-03-04 17:06:48 3470