WebApiHelper

/// <summary>
        /// 根据token过滤
        /// </summary>
        /// <param name="list"></param>
        /// <returns></returns>
        private List<train_code_list> GetListByToken(List<train_code_list> list)
        {
            //token
            var token = System.Web.HttpContext.Current.Request.Headers["Token"];
            if (!string.IsNullOrEmpty(token))
            {
                var station = (new DESHelper().DecryptString(((new DESHelper().DecryptString(token, DESHelper.key, DESHelper.iv)).Split('/')[3]), DESHelper.key, DESHelper.iv));
                list = list.Where(c => c.Detail.Any(p => p.station_name == station)).ToList();
            }
            return list;
        }

 /// <summary>
        /// 获取随机码
        /// </summary>
        /// <param name="data"></param>
        /// <returns></returns>
        public ResultMsg GetRandom(authentication data)
        {
            var resultMsg = new ResultMsg() { Status = false, Info = "", Data = data };
            try
            {
                if (string.IsNullOrEmpty(data.UniqueCode))
                {
                    resultMsg.Info = "唯一码为空！";
                    return resultMsg;
                }
                if (string.IsNullOrEmpty(data.PID))
                {
                    resultMsg.Info = "PID为空！";
                    return resultMsg;
                }
                if (string.IsNullOrEmpty(data.PIN))
                {
                    resultMsg.Info = "PIN为空！";
                    return resultMsg;
                }

                var query = Query.And(Query.EQ("UniqueCode", data.UniqueCode),Query.EQ("PID", data.PID),Query.EQ("PIN", data.PIN));
                if (Mb.FindOne<authentication>(query) != null)
                {
                    var strRandom= getStr(6);
                    if (Mb.Update<authentication>(query, Update.Set("RandomDigit", strRandom)))
                    {
                        resultMsg.Status = true;
                        resultMsg.Data = strRandom;
                    }
                    else
                    {
                        resultMsg.Info = "保存随机数失败！";
                    }                    
                }
                else
                {
                    resultMsg.Info = "提供的信息在数据库中不存在！";
                }
            }
            catch (Exception ex)
            {
                resultMsg.Info = ex.Message;
            }
            return resultMsg;
        }

/// <summary>
        /// 获取token
        /// </summary>
        /// <param name="data"></param>
        /// <returns></returns>
        public ResultMsg GetToken(authentication data)
        {
            var resultMsg = new ResultMsg() { Status = false, Info = "", Data = data };
            try
            {
                if (string.IsNullOrEmpty(data.UniqueCode))
                {
                    resultMsg.Info = "唯一码为空！";
                    return resultMsg;
                }               

                if (string.IsNullOrEmpty(data.EncryptedStorage))
                {
                    resultMsg.Info = "加密存储区信息为空！";
                    return resultMsg;
                }

                var auth = Mb.FindOne<authentication>(Query.EQ("UniqueCode", data.UniqueCode));                              

                if (auth != null)
                {
                    if (data.EncryptedStorage.Replace("", "") != auth.EncryptedStorage)
                    {
                        resultMsg.Info = "加密存储区信息与数据库中信息不匹配！";
                        return resultMsg;
                    }
                    if (!ValidateMsg(auth, data.EcryptedSMS, resultMsg))
                    {
                        return resultMsg;
                    }

                    if (Mb.Remove<token>(Query.EQ("UniqueCode", data.UniqueCode)))
                    {
                        var token = new token()
                        {
                            UniqueCode = data.UniqueCode,
                            SignToken = new DESHelper().EncryptString(data.UniqueCode + "/" + Guid.NewGuid().ToString() + "/" + DateTime.Now.AddHours(2).ToString("yyyy-MM-dd HH:mm:ss")
                            +"/"+ auth.EncryptedStorage, DESHelper.key, DESHelper.iv)
                        };
                       
                        //插入数据库
                        if (Mb.Insert<token>(token))
                        {
                            resultMsg.Status = true;
                            resultMsg.Data = token.SignToken;
                        }
                        else {
                            resultMsg.Info = "保存新的token发生异常！";
                        }                        
                    }
                    else {
                        resultMsg.Info = "删除旧的token发生异常！";
                    }                    
                }
                else{
                    resultMsg.Info = "提供的信息在数据库中不存在！";
                }
            }
            catch (Exception ex)
            {
                resultMsg.Info = ex.Message;
            }
            return resultMsg;      
        }

 /// <summary>
        /// 验证token
        /// </summary>
        /// <param name="data"></param>
        /// <returns></returns>
        public ResultMsg ValidateToken(string data)
        {
            var resultMsg = new ResultMsg() { Status = false, Info = "", Data = data };
            try
            {
                var arrToken = (new DESHelper().DecryptString(data, DESHelper.key, DESHelper.iv)).Split('/');

                if (arrToken.Length != 4)
                {
                    resultMsg.Info = "token无效";
                    return resultMsg;
                }
                var auth = Mb.FindOne<authentication>(Query.And(Query.EQ("UniqueCode", arrToken[0]), Query.EQ("EncryptedStorage", arrToken[3].Replace("", ""))));
                if (auth==null)
                {
                    resultMsg.Info = "加密存储区信息与数据库中信息不匹配";
                    return resultMsg;
                }
                if (DateTime.Now.CompareTo(Convert.ToDateTime(arrToken[2])) >= 0)
                {
                    Mb.Update<authentication>(Query.EQ("UniqueCode", arrToken[0]), Update.Set("RandomDigit", ""));
                    //token失效
                    resultMsg.Info = "token失效";
                    return resultMsg;
                }

                var Info = Mb.FindOne<token>(Query.EQ("UniqueCode", arrToken[0]));
                if (Info != null && Info.SignToken == data)
                {
                    resultMsg.Status = true;
                }
                else
                {
                    //token无效
                    resultMsg.Info = "token无效";
                }
            }
            catch (Exception ex)
            {
                resultMsg.Info = ex.Message;
            }
            return resultMsg; 
        }

/// <summary>
        /// 对比加密信息
        /// </summary>
        /// <param name="auth"></param>
        /// <param name="ecryptedSMS"></param>
        /// <param name="resultMsg"></param>
        /// <returns></returns>
        private bool ValidateMsg(authentication auth, string ecryptedSMS, ResultMsg resultMsg)
        {
            if (string.IsNullOrEmpty(auth.RandomDigit))
            {
                resultMsg.Info = "随机码为空！";
                return false;
            }
            if (string.IsNullOrEmpty(auth.Key))
            {
                resultMsg.Info = "秘钥为空！";
                return false;
            }

            //服务端软件计算秘钥信息
            byte[] bytRandomCode;
            string strRandomCode = auth.RandomDigit;
            bytRandomCode = new byte[strRandomCode.Length];
            bytRandomCode = System.Text.Encoding.ASCII.GetBytes(strRandomCode);
            String strMD5Key = auth.Key;
            byte[] bytShortKey;
            bytShortKey = new byte[strMD5Key.Length];
            bytShortKey = System.Text.Encoding.ASCII.GetBytes(strMD5Key);
            byte keylen = byte.Parse(strMD5Key.Length.ToString());
            byte randomlen = byte.Parse(strRandomCode.Length.ToString());

            byte[] sbMd5Key = new byte[32];
            byte[] sbdigest = new byte[16];

            uint s_MD5_result = ET99_API.MD5_HMAC(ref bytRandomCode[0], strRandomCode.Length, ref bytShortKey[0], strMD5Key.Length, out sbMd5Key[0], out sbdigest[0]);
            if (s_MD5_result != ET99_API.ET_SUCCESS)
            {
                resultMsg.Info = "计算加密信息失败！";
                return false;
            }
            //获取 SN到文本
            string strSoftDigest = "";
            for (int i = 0; i < 16; ++i)
            {
                strSoftDigest += string.Format("{0:X2}", sbdigest[i]);
            }

            //与客户端的加密信息进行对比     
            if (strSoftDigest != ecryptedSMS)
            {
                resultMsg.Info = "认证失败！";
                return false;
            }

            return true;
        }

/// <summary>
        /// 时间转化
        /// </summary>
        /// <param name="dateTime"></param>
        /// <returns></returns>
        public string GetDateTime(string dateTime)
        {
            DateTime result;
            if (!DateTime.TryParse(dateTime, out result))
            {
                dateTime = DateTime.Now.ToString("yyyy-MM-dd");
            }
            else
            {
                dateTime = result.ToString("yyyy-MM-dd");
            }
            return dateTime;
        }

 /// <summary>
        /// 自定义WebApi返回类型
        /// </summary>
        /// <param name="obj"></param>
        /// <returns></returns>
        public static HttpResponseMessage toJson(Object obj)
        {
            String str;
            if (obj is String || obj is Char)
            {
                str = obj.ToString();
            }
            else
            {
                str = JsonConvert.SerializeObject(obj);
            }
            HttpResponseMessage result = new HttpResponseMessage { Content = new StringContent(str, Encoding.GetEncoding("UTF-8"), "application/json") };
            return result;
        }

 /// <summary>
        /// 获取随机数
        /// </summary>
        /// <param name="len"></param>
        /// <returns></returns>
        public string getStr(int len)
        {
            string str = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
            StringBuilder sb = new StringBuilder();
            Random rd = new Random();
            for (int i = 0; i < len; i++)
            {
                sb.Append(str.Substring(rd.Next(0, str.Length), 1));
            }
            return sb.ToString();
        }

 测试webapi使用Postman这个工具