// Controllers/AdminController
.cs
using Microsoft
.AspNetCore
.Authorization;
using Microsoft
.AspNetCore
.Identity;
using Microsoft
.AspNetCore
.Mvc;
using Microsoft
.EntityFrameworkCore;
using UserManagementSystem
.Web
.Models;
using UserManagementSystem
.Web
.Services;
namespace UserManagementSystem
.Web
.Controllers;
[Authorize(Roles = "Admin")]
public class AdminController : Controller
{
private readonly UserManager<ApplicationUser> _userManager;
public AdminController(UserManager<ApplicationUser> userManager)
{
_userManager = userManager;
}
// GET: /Admin/Users
public async Task<IActionResult> Users(string search, int page = 1, int pageSize = 10)
{
var query = _userManager
.Users
.AsQueryable();
if (!string
.IsNullOrWhiteSpace(search))
{
search = search
.Trim();
query = query
.Where(u => u
.UserName
.Contains(search) || u
.Email
.Contains(search));
}
var total = await query
.CountAsync();
var users = await query
.OrderBy(u => u
.RegisterDate)
.Skip((page - 1) * pageSize)
.Take(pageSize)
.ToListAsync();
ViewBag
.Search = search;
ViewBag
.CurrentPage = page;
ViewBag
.PageSize = pageSize;
ViewBag
.TotalPages = (int)Math
.Ceiling(total / (double)pageSize);
return View(users);
}
// GET: /Admin/CreateUser
public IActionResult CreateUser()
{
return View();
}
// POST: /Admin/CreateUser
[HttpPost]
[ValidateAntiForgeryToken]
public async Task<IActionResult> CreateUser(CreateUserViewModel model)
{
if (!
ModelState.IsValid)
{
return View(model);
}
var user = new ApplicationUser
{
UserName = model
.Email,
Email = model
.Email,
EmailConfirmed = true,
RegisterDate = DateTime
.UtcNow
};
var result = await _userManager
.CreateAsync(user, model
.Password);
if (result
.Succeeded)
{
TempData["Success"] = $"用户 {user
.Email} 创建成功。";
return RedirectToAction(nameof(Users));
}
foreach (var error in result
.Errors)
{
ModelState.AddModelError("", error
.Description);
}
return View(model);
}
// GET: /Admin/EditUser/{id}
public async Task<IActionResult> EditUser(string id)
{
var user = await _userManager
.FindByIdAsync(id);
if (user == null) return NotFound();
var model = new EditUserViewModel
{
Id = user
.Id,
UserName = user
.UserName!,
Email = user
.Email!
};
return View(model);
}
// POST: /Admin/EditUser
[HttpPost]
[ValidateAntiForgeryToken]
public async Task<IActionResult> EditUser(EditUserViewModel model)
{
if (!
ModelState.IsValid)
{
return View(model);
}
var user = await _userManager
.FindByIdAsync(model
.Id);
if (user == null) return NotFound();
// 防止编辑关键系统账户
if (user
.Email == "admin@example
.com")
{
TempData["Error"] = "无法编辑系统管理员账户。";
return RedirectToAction(nameof(Users));
}
user
.UserName = model
.UserName;
user
.Email = model
.Email;
var result = await _userManager
.UpdateAsync(user);
if (result
.Succeeded)
{
TempData["Success"] = $"用户信息已更新：{user
.Email}";
return RedirectToAction(nameof(Users));
}
foreach (var error in result
.Errors)
{
ModelState.AddModelError("", error
.Description);
}
return View(model);
}
// GET: /Admin/ResetPassword/{id}
[HttpGet]
public async Task<IActionResult> ResetPassword(string id)
{
var user = await _userManager
.FindByIdAsync(id);
if (user == null) return NotFound();
// 1
. 生成密码重置 Token（安全令牌）
var token = await _userManager
.GeneratePasswordResetTokenAsync(user);
// 2
. 生成强密码
string newPassword = PasswordGenerator
.GenerateRandomPassword(12);
// 3
. 使用 ResetPassword 直接重置（无需移除旧密码）
var result = await _userManager
.ResetPasswordAsync(user, token, newPassword);
if (!result
.Succeeded)
{
foreach (var error in result
.Errors)
{
ModelState.AddModelError("", $"密码重置失败: {error
.Description}");
}
return View(new ResetPasswordViewModel
{
UserId = user
.Id,
UserName = user
.UserName,
GeneratedPassword = null
});
}
// 4
. 刷新用户安全戳（强制所有旧 Token 失效）
await _userManager
.UpdateSecurityStampAsync(user);
// 5
. 成功 → 显示新密码
var model = new ResetPasswordViewModel
{
UserId = user
.Id,
UserName = user
.UserName,
GeneratedPassword = newPassword
};
return View(model);
}
// POST: Admin/ResetPassword
[HttpPost]
[ValidateAntiForgeryToken]
public async Task<IActionResult> ResetPassword(string userId, string newPassword, string confirmPassword)
{
if (string
.IsNullOrEmpty(newPassword) || newPassword != confirmPassword)
{
ModelState.AddModelError("", "密码不匹配或为空。");
return View(new ResetPasswordViewModel { UserId = userId });
}
var user = await _userManager
.FindByIdAsync(userId);
if (user == null)
return NotFound();
// 删除旧密码令牌（可选）
await _userManager
.RemovePasswordAsync(user);
// 设置新密码
var result = await _userManager
.AddPasswordAsync(user, newPassword);
if (result
.Succeeded)
{
TempData["SuccessMessage"] = "密码已成功重置！";
return RedirectToAction(nameof(Users));
}
foreach (var error in result
.Errors)
{
ModelState.AddModelError("", error
.Description);
}
return View(new ResetPasswordViewModel { UserId = userId });
}
// POST: /Admin/DeleteUser/{id}
[HttpPost]
[ValidateAntiForgeryToken]
public async Task<IActionResult> DeleteUser(string id)
{
var user = await _userManager
.FindByIdAsync(id);
if (user == null || user
.Email == "admin@example
.com")
{
TempData["Error"] = "无法删除此用户。";
return RedirectToAction(nameof(Users));
}
var result = await _userManager
.DeleteAsync(user);
if (result
.Succeeded)
{
TempData["Success"] = $"用户 {user
.Email} 已被删除。";
}
else
{
TempData["Error"] = "删除失败：" + string
.Join(", ", result
.Errors
.Select(e => e
.Description));
}
return RedirectToAction(nameof(Users));
}
}
还是重置密码后无法登陆
本文介绍在CSHTML中如何使用@Html.CheckBoxFor方法创建复选框，并展示了如何在控制器中通过ModelState.AddModelError进行表单验证，确保PostNextDay字段符合预期。详细解释了CSHTML与MVC框架结合使用时的表单元素生成及验证过程。
扫一扫
1206
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
