MVC用AuthorizeAttribute登录验证

最新推荐文章于 2018-09-06 15:30:00 发布

哀莫离裳

最新推荐文章于 2018-09-06 15:30:00 发布

阅读量838

点赞数

分类专栏： c# MVC 文章标签： MVC登录 MVC验证登录 AuthorizeAttribute AuthorizeAttribute登录 MVCAuthorizeAttribute

本文链接：https://blog.csdn.net/tx1721110240/article/details/81127559

版权

c# MVC 专栏收录该内容

24 篇文章 0 订阅

订阅专栏

下面代码可实现记录返回登录页时的地址，时时验证登录信息

(由软谋eleven老师提供)

 /// <summary>
    /// ajax跟exception一致
    /// 检验登陆和权限的filter
    /// </summary>
    [AttributeUsage(AttributeTargets.Class | AttributeTargets.Method, Inherited = true)]
    public class AuthorityFilter : AuthorizeAttribute
    {
        /// <summary>
        /// 未登录时返还的地址
        /// </summary>
        private string _LoginPath = "";
        public AuthorityFilter()
        {
            this._LoginPath = "/User/Login/Login";
        }

        public AuthorityFilter(string loginPath)
        {
            this._LoginPath = loginPath;
        }

        public override void OnAuthorization(AuthorizationContext filterContext)
        {
            if(filterContext.ActionDescriptor.IsDefined(typeof(AllowAnonymousAttribute),true)
                || filterContext.ActionDescriptor.ControllerDescriptor.IsDefined(typeof(AllowAnonymousAttribute),true))
            {
                return;//表示支持控制器、action的AllowAnonymousAttribute
            }

            var sessionUser = HttpContext.Current.Session["CurrentUser"];//使用session
            //var memberValidation = HttpContext.Current.Request.Cookies.Get("CurrentUser");//使用cookie

            //验证session是否正确
            if (sessionUser == null || !(sessionUser is CurrentUser))
            {
                HttpContext.Current.Session["CurrentUrl"] = filterContext.RequestContext.HttpContext.Request.RawUrl;
                filterContext.Result = new RedirectResult(this._LoginPath);
            }

        }
    }

设置全局详看：点击进入