webApi登录鉴权

1- 登录获取token

   /// 
/// 登录获取token/// /// [HttpPost][CustomAllowAnonymousAttribute]// 在全局注册的情况下 有这个标记就不去走校验方法 public string LoginGetToken(string account, string password){ //这里默认是admin  需要读取数据库if ("admin".Equals(account) && "123456".Equals(password)){FormsAuthenticationTicket ticketObject = new FormsAuthenticationTicket(0, account, DateTime.Now, DateTime.Now.AddHours(1), true, string.Format("{0}&{1}", account, password), FormsAuthentication.FormsCookiePath);var result = new{result = true,ticket = FormsAuthentication.Encrypt(ticketObject)};return JsonConvert.SerializeObject(result);}else{var result = new { result = false };return JsonConvert.SerializeObject(result);}}

我这里案例是默认的用admin账号，正常开发过程中需要去数据库读取

2-解密验证

 public class CustomBasicAuthorizeAttribute : AuthorizeAttribute{public override void OnAuthorization(HttpActionContext actionContext){//有这个特性就不校验if (actionContext.ActionDescriptor.GetCustomAttributes<CustomAllowAnonymousAttribute>().FirstOrDefault() != null){return;}else{var authorization = actionContext.Request.Headers.Authorization;if (authorization == null){throw new HttpResponseException(System.Net.HttpStatusCode.Unauthorized);}else{if (ValidateTicket(authorization.Parameter)){return;}else{throw new HttpResponseException(System.Net.HttpStatusCode.Unauthorized);}}}}/// 
/// 解密并验证 /// /// /// private bool ValidateTicket(string encryptTicket){//解密ticketif (string.IsNullOrEmpty(encryptTicket)) return false;try{//进行解密var newTicket = FormsAuthentication.Decrypt(encryptTicket).UserData;//验证解密后的用户信息  并返回布尔值   这里默认admin  正式应该到数据库做验证return string.Equals(newTicket, string.Format("{0}&{1}", "admin", "123456"));}catch (Exception e){return false;}}}

3-在配置文件中全局注册

 public static class WebApiConfig{public static void Register(HttpConfiguration config){//注册一下config.Filters.Add(new CustomBasicAuthorizeAttribute());}}

4-新建特性自定义类 继承Attribute就可以无需其他操作 目的是在全局注册的情况下 有这个标记就不去走校验方法

 public class CustomAllowAnonymousAttribute:Attribute{}

本文来自互联网用户投稿，文章观点仅代表作者本人，不代表本站立场，不承担相关法律责任。如若转载，请注明出处。 如若内容造成侵权/违法违规/事实不符，请点击【内容举报】进行投诉反馈！