.net 的登陆验证接口的实现

1.创建数据库 User表：

---

2. 创建一个Model类 : User1.cs

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;

namespace MyApiTest.Models
{
    public class User1
    {

        public string UserName { get; set; }
        public string PassWord { get; set; }
      public Int32 ID { set; get; }
    }
}

---

3.创建一个控制器： UserAuthenAttribute.cs

using System.Web;
using System.Web.Mvc;
using System.Web.Mvc.Filters;
using MyApiTest.Models;


namespace MyApiTest.CustomAttributes
{
    public class UserAuthenAttribute : FilterAttribute, IAuthenticationFilter
    {
        //// GET: UserAuthenAttribute
        //public ActionResult Index()
        //{
        //    return View();
        //}

        public void OnAuthentication(AuthenticationContext filterContext)
        {
            //这个方法是在Action执行之前调用
            var user = filterContext.HttpContext.Session["User"];
            if (user == null)
            {
                //filterContext.HttpContext.Response.Redirect("/Account/Logon");
                var Url = new UrlHelper(filterContext.RequestContext);
                var url = Url.Action("LogState", "Login", new { area = "" });
                filterContext.Result = new RedirectResult(url);
            }
        }
        public void OnAuthenticationChallenge(AuthenticationChallengeContext filterContext)
        {
            //这个方法是在Action执行之后调用
        }

    }
}

---

4. 创建登陆控制器  LoginController.cs

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Mvc;
using MyApiTest.Models;
using MySql.Data.MySqlClient;

namespace MyApiTest.Controllers
{
    public class LoginController : Controller
    {
        // GET: Login
        public ActionResult Index()
        {
            return View();
        }
        string strConn = System.Configuration.ConfigurationManager.AppSettings["ConnectionString"].ToString();

        #region State
        [HttpGet]
        public JsonResult LogState(User1 user)
        {
            //填充了Session 表示已有数据==已登录
            //Session["User"] = user.UserName;   
            //Session["User"] = "niu";
            return Json(new { status = 1, msg = "还没登陆" }, JsonRequestBehavior.AllowGet);
        } 
        #endregion

        #region Logon
        [HttpPost]
        public JsonResult Logon(string username, string password)
        {
            using (MySqlConnection con = new MySqlConnection(strConn))
            {
                //插入sql语句        
                string sqlStr = "select  UserName,PassWord,ID from Users where UserName='" + username + "' and PassWord='" + password + "'";
                List<User1> list = new List<User1>();
                using (MySqlCommand cmd = new MySqlCommand(sqlStr, con))
                {
                    con.Open();
                    MySqlDataReader dr = cmd.ExecuteReader();
                    while (dr.Read())
                    {

                        User1 model = new User1();
                        object obj;
                        obj = dr["UserName"];
                        if (obj != null && obj != DBNull.Value)
                        {
                            model.UserName = (string)obj;
                        }
                        model.UserName = dr["UserName"].ToString();
                        model.PassWord = dr["PassWord"].ToString();
                        model.ID = Convert.ToInt32(dr["ID"]);

                        list.Add(model);
                    }             
                        if (list != null && list.Count != 0)
                        {
                            Session["User"] = username;
                            return Json(new { status = 1, msg = "登陆succssfull", list = list }, JsonRequestBehavior.AllowGet);
                        }
                        else
                        {
                            return Json(new { status = 1, msg = "用户名或密码不正确" }, JsonRequestBehavior.AllowGet);
                        }
                }
            }
        } 
        #endregion
        #region 退出
        public ActionResult LogOff()
        {
            if (Session["User"] != null)
            {
                Session["User"] = null;
            }
            //这是在网页中的做法，跳转到登陆页
            //return RedirectToAction("Logon");  

            //APP接口的方法，只要返回信息即可
            return Json(new { status = 1, msg = "退出成功" }, JsonRequestBehavior.AllowGet);
        }
     #endregion
    }
}

5. 最后在需要使用处使用

• 导入引用

using MyApiTest.CustomAttributes;

• 在使用的方法是上面调用

        #region Get方法  查询数据 (提取Model，简化使用)
        [HttpGet]
        //[CheckLogin]
        [UserAuthen]
        public JsonResult getMySQLHandel()
        {         
          return Json(new { status = 1, msg = "获取成功", list = getdata() }, JsonRequestBehavior.AllowGet);
        }
        #endregion