User管理 FormsAuthenticationTicket

 Global

   void Application_AuthenticateRequest(object sender, EventArgs e)
        {
            UserHelper.SetRoles();
        }

Login:

   protected void LoginUser_Authenticate(object sender, AuthenticateEventArgs e)
        {   
           string username=LoginUser.UserName;
           string password=LoginUser.Password;
           bool IsRemember=LoginUser.RememberMeSet;
             
            if(UserHelper.IsDBAuthenticated(username,password))
            {  
                string roles=UserHelper.GetDBRoles(username,password);
                UserHelper.Login(username, IsRemember, roles);
            } 
            
        }

Web.config

<configuration>
  <system.web>
    <compilation debug="true" targetFramework="4.0" />
    <machineKey validationKey="3FF1E929BC0534950B0920A7B59FA698BD02DFE8" 
                decryptionKey="280450BB36319B474C996B506A95AEDF9B51211B1D2B7A77" 
                decryption="3DES" 
                validation="SHA1"/>
    <authentication mode="Forms">
      <forms name="CURRENT_AUTH_Cookies_NAME"
             loginUrl="~/Account/Login.aspx"
             defaultUrl="~/About.aspx"             
             timeout="100">
        <credentials passwordFormat="SHA1"></credentials>
      </forms>      
    </authentication>
  </system.web>
</configuration>

UserHelper类文件:

public class UserHelper
    {
        #region DB
        public static bool IsDBAuthenticated(string username, string password)
        {
            return true; //查询数据库
        }

        public static string GetDBRoles(string username, string password)
        {
            return "editor,admin";// 查询数据库
        }
        #endregion

        #region Tools

        public static bool IsLogin()
        {
            var user=HttpContext.Current.User;
            if (user==null || !user.Identity.IsAuthenticated 
                           || string.IsNullOrEmpty(user.Identity.Name))
            {
                HttpContext.Current.Response.Redirect(FormsAuthentication.LoginUrl+"?ReturnUrl="
                                                                + HttpContext.Current.Request.Url);
                return false;
            }
            return true;
        } 

        public static bool InRole(string role)
        {
            var user=HttpContext.Current.User;
            if (user!=null && user.Identity.IsAuthenticated && user.Identity is FormsIdentity)
            {
                return user.IsInRole(role);
            }
            return false;
        }

        //一般由于Global::Application_AuthenticateRequest()
        public static void SetRoles()
        {
            var user=HttpContext.Current.User;
            if (user!=null && user.Identity.IsAuthenticated && user.Identity is FormsIdentity)
            {
                FormsIdentity id=user.Identity as FormsIdentity;
                FormsAuthenticationTicket ticket=id.Ticket;
                string userData=ticket.UserData;              

                // FormsAuthenticationTicket ticket2 = new FormsAuthenticationTicket(2, ticket.Name,
                //                                      DateTime.Now, ticket.Expiration, false, userData);
                // SetTicket(ticket2,ticket.Expiration);
                string[] roles=userData.Split(',');
                HttpContext.Current.User=new GenericPrincipal(id, roles);                
            }
        }
      
        public static FormsAuthenticationTicket GetTicket()
        {
            //添加下列代码以从窗体身份验证 cookie 中提取和解密身份验证票。
            string cookieName = FormsAuthentication.FormsCookieName;
            HttpCookie authCookie = HttpContext.Current.Request.Cookies[cookieName];
            if (authCookie==null)
                return null;
            FormsAuthenticationTicket authTicket = null;
            try
            {
                authTicket = FormsAuthentication.Decrypt(authCookie.Value);
            }
            catch (Exception ex)
            {
                // Log exception details (omitted for simplicity)
                return null;
            }

            return authTicket;
        }

        public static void SetTicket(FormsAuthenticationTicket ticket, DateTime endtime)
        {
            var hashString = FormsAuthentication.Encrypt(ticket);
            HttpCookie cookie=new HttpCookie(FormsAuthentication.FormsCookieName, hashString);
            cookie.Expires=endtime;
           
            if(HttpContext.Current.Request.Cookies.AllKeys.Contains(FormsAuthentication.FormsCookieName))
                 HttpContext.Current.Response.Cookies.Remove(FormsAuthentication.FormsCookieName);
            HttpContext.Current.Response.Cookies.Add(cookie);
        }
        #endregion

        #region Login Logout
        public static void Login(string UserName,bool IsRemember,string  roles)
        {

            DateTime now=DateTime.Now;
            DateTime endtime=now.AddMinutes(30);
            if (IsRemember)
                endtime=now.AddYears(1);
         
            FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(2,UserName,
                                                                  now, endtime, false, roles);
            SetTicket(ticket, endtime);
            // FormsAuthentication.RedirectFromLoginPage(UserName,IsRemember);
           HttpContext.Current.Response.Redirect(FormsAuthentication.GetRedirectUrl(UserName,IsRemember));
         
        }
        
        public static void Logout()
        {
            FormsAuthentication.SignOut();
            FormsAuthentication.RedirectToLoginPage();
        }
        #endregion
    }

AdminAbout:

 public partial class AdminAbout : System.Web.UI.Page
    {
        protected void Page_Load(object sender, EventArgs e)
        {

            if (UserHelper.IsLogin())
            {
                if (!UserHelper.InRole("admin"))                
                {
                    UserHelper.Logout();
                    Response.Redirect("~/Account/Login.aspx?ReturnUrl="+Request.Url);
                }

            }
            
        }
    }