MVC下的表单登录验证方式

1、View：获取用户登录数据

2、  对应的Controller中：

      public ActionResult AjaxAuthorizeUser(string tel, string num, string innum)
        {
            var telephone = tel ?? "";
            var numbers = num ?? "";
            var innumbers = innum ?? "";
            ViewBag.txtNum = numbers;
            ViewBag.txtTel = telephone;

            var success = false;

            if (tel != "" && numbers != "" && innumbers != "")
            {
                if (innumbers == numbers)
                {
                    var datenow = DateTime.Now;
                    var datexpires = datenow.AddDays(1);

                    //查看是否有该用户
                    var user = UserDal.F_User_GetMemberInforByTel(tel);
                    //某有则去创建
                    if (user == null)
                    {
                        int isCreate = UserDal.F_User_CreateClient_ByTel(tel);
                        user = UserDal.F_User_GetMemberInforByTel(tel);
                    }
                    //获取相关用户信息，保存至cookie中
                    //1、生成票据
                    var ticket = new FormsAuthenticationTicket(
                        1,
                        user.Id.ToString(CultureInfo.InvariantCulture) + ":" + user.ClientName,
                        datenow,
                        datexpires,
                        false,
                       // user.RoleName.ToString(CultureInfo.InvariantCulture)
                        "clients"              /*这里用上面准备好的用逗号分割的role字符串,此处简化为已client为例，
                                               使用时仅需在相关页面上添加 [Authorize(Roles = "clients")] 即可*/
                        );
                    //2、加密票据并生成Cookie
                    var cookie = new HttpCookie(FormsAuthentication.FormsCookieName, FormsAuthentication.Encrypt(ticket))
                    {
                        Expires = datexpires
                    };
                    //3、将身份验证票据Cookie输出到客户端
                    Response.Cookies.Add(cookie);

                    success = true;
                }
            }
            return Content(JsonConvert.SerializeObject(new
            {
                return_code = 0,
                success
            }));

            
        }

3、web.config文件中：

   <authentication mode="Forms">
      <forms loginUrl="~/Account/Login" timeout="2880" />
    </authentication>

4、Global.asax中：

 protected void Application_AuthorizeRequest(object sender, System.EventArgs e)
        {
            HttpApplication App = (HttpApplication)sender;
            HttpContext Ctx = App.Context; //获取本次Http请求相关的HttpContext对象
            if (Ctx.Request.IsAuthenticated == true) //验证过的用户才进行role的处理
            {
                FormsIdentity Id = (FormsIdentity)Ctx.User.Identity;
                FormsAuthenticationTicket Ticket = Id.Ticket; //取得身份验证票
                string[] Roles = Ticket.UserData.Split(','); //将身份验证票中的role数据转成字符串数组
                Ctx.User = new GenericPrincipal(Id, Roles); //将原有的Identity加上角色信息新建一个GenericPrincipal表示当前用户,这样当前用户就拥有了role信息
            }
        }

或者

protected void Application_AuthenticateRequest(Object sender, EventArgs e)
        {
            HttpCookie authCookie = Context.Request.Cookies[FormsAuthentication.FormsCookieName];
            if (authCookie == null || authCookie.Value == "")
            {
                return;
            }
            FormsAuthenticationTicket authTicket = null;
            try
            {
                authTicket = FormsAuthentication.Decrypt(authCookie.Value);
            }
            catch
            {
                return;
            }
            string[] roles = authTicket.UserData.Split(new char[] { ';' });
            if (Context.User != null)
            {
                Context.User = new System.Security.Principal.GenericPrincipal(Context.User.Identity, roles);
            }
        }  均可。

P.S. 本篇文章最好结合上一篇文章对比去学习。

上一篇文章里有详细的参数及概念的讲解，本文为实际操作为主。