asp.net mvc 自定义身份验证

1.定义身份实体对象

    /// <summary>
    /// 网站用户实体对象
    /// </summary>
    public class DDTPrincipal : IPrincipal
    {
        public int? OrgCode { get; set; }
        public string RoleName { get; set; }
        public string OrgName { get; set; }
        private IIdentity _identity;

        public DDTPrincipal(string orgcode, string roleName, string orgName, IIdentity identity)
        {
            int _orgCode;
            int.TryParse(orgcode, out _orgCode);
            OrgCode =  _orgCode;
            OrgName = orgName;
            RoleName = roleName;
            _identity = identity;
        }

        public IIdentity Identity
        {
            get { return _identity; }
        }

        public bool IsInRole(string role)
        {
            return RoleName.IndexOf(role)>=0;
        }
    }

2.验证身份

        [HttpPost]
        [AllowAnonymous]
        [ValidateAntiForgeryToken]
        public ActionResult LoginView(LoginModel model, string returnUrl)
        {
            
            if (ModelState.IsValid)
            {
                Account a = DataRepository.AccountProvider.GetByAccountName(model.UserName);
                DataRepository.AccountProvider.DeepLoad(a,false, DeepLoadType.IncludeChildren,typeof(Org));
                TList<AccountRole> arList = DataRepository.AccountRoleProvider.GetByAccountName(a.AccountName);
                DataRepository.AccountRoleProvider.DeepLoad(arList, false, DeepLoadType.IncludeChildren, typeof(Role));
                
                string roleName=string.Empty;
                if (arList.Count > 0)
                {
                    foreach (var item in arList)
                    {
                        roleName += item.RoleNoSource.RoleName + ",";
                    }
                }
                else { roleName = "无"; }

                if (a!=null&&a.AccountPassword==model.Password)
                {
                   // return RedirectToLocal(returnUrl);
                    FormsAuthentication.RedirectFromLoginPage(a.UserName, false);
                    FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(1, a.UserName, DateTime.Now,
                        DateTime.Now.AddMinutes(120), false,
                        string.Format("{0}|{1}|{2}", a.OrgCode.Value.ToString(),roleName,a.OrgCodeSource.OrgName));
                    string encryptedTicket = FormsAuthentication.Encrypt(ticket);
                    HttpCookie cookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket);
                    Response.Cookies.Add(cookie);
                    return Redirect(returnUrl);
                }
            }
            // 如果我们进行到这一步时某个地方出错，则重新显示表单
            ModelState.AddModelError("", "提供的用户名或密码不正确。");
            return View(model);


            //if (ModelState.IsValid && WebSecurity.Login(model.UserName, model.Password, persistCookie: model.RememberMe))
            //{
            //    return RedirectToLocal(returnUrl);
            //}
            //// 如果我们进行到这一步时某个地方出错，则重新显示表单
            //ModelState.AddModelError("", "提供的用户名或密码不正确。");
            //return View(model);
        }

3.自定义验证属性获取验证信息

    public class CustomAuthorizeAttribute:AuthorizeAttribute
    {
        protected override bool AuthorizeCore(HttpContextBase httpContext)
        {
            httpContext.User = App_Codes.WebUtility.GetUser(httpContext);
            return base.AuthorizeCore(httpContext);
        }
    }

4.从验证信息生成验证对象

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Security;
using System.Security.Principal;

namespace XXX.App_Codes
{
    public static class WebUtility
    {
        public static DDTPrincipal GetUser(HttpContextBase httpContext)
        {
            if (httpContext.Request.IsAuthenticated)
            {
                FormsIdentity fi = httpContext.User.Identity as FormsIdentity;
                if (fi != null)
                {
                    string[] userData = fi.Ticket.UserData.Split('|');
                    if (userData.Length == 3)
                    {
                        DDTPrincipal newPrincipal = new DDTPrincipal(userData[0],
                            userData[1],userData[2],
                            httpContext.User.Identity);
                        return newPrincipal;
                    }
                    return null;
                }
                return null;
            }
            return null;
        }
    }
}

5.应用验证属性

    [CustomAuthorize]
    public class CompanyManageController : Controller{}

6.配置窗体验证

<authentication mode="Forms">
<forms loginUrl="~/Account/Login" timeout="2880" />
</authentication>